Privacy Policy

If you become a patient of the clinic, your medical information is protected health information under HIPAA and is governed by our Notice of Privacy Practices. The LACTIC mobile app is operated by Chocolate Labs Apps LLC and has its own privacy policy. This page covers the website itself.

• Newsletter signups. Your email address, used only to send you the newsletter you asked for.
• Discovery session bookings. Your name, email, and phone number, used to schedule and confirm your session and to contact you about it.
• Membership signup. The information you enter to enroll, such as your name, date of birth, contact details, address, and the agreements you electronically sign.
• Payments. Payments are processed by Stripe. We never see or store your full card or bank account numbers; Stripe shares only what we need to manage your membership, such as billing status and the last digits of your payment method.
• Technical information. Standard server logs needed to operate and secure the site, such as IP address and browser type. We do not run advertising trackers.

• To provide what you asked for: the newsletter, a booked session, or a membership.
• To communicate with you about your signup, visits, and account.
• To operate, secure, and improve the website.
• To meet legal and regulatory obligations.

We do not sell your personal information, and we do not share it with advertisers. We share it only with:

• Service providers that help us run the site and the practice: Stripe (payments), Supabase (secure cloud infrastructure), Resend (email delivery), and Vercel (website hosting). Each is bound to protect your information and use it only to provide its service to us.
• Authorities when required by law, or to protect the rights and safety of our members, our staff, or others.

We keep information only as long as needed for the purposes above or as the law requires, and we protect it with industry standard safeguards, including encryption in transit. Medical records, once you are a patient, are retained according to Texas medical record requirements and our Notice of Privacy Practices.

• Every newsletter includes an unsubscribe link, and unsubscribing is immediate.
• You may ask us to access, correct, or delete the personal information we hold about you by emailing contact@hybrdhealth.io. Medical records are subject to the retention rules above and the rights described in the Notice of Privacy Practices.

This website and our services are intended for adults. We do not knowingly collect information from children.

If we make material changes, we will update this page and its effective date. Continued use of the site after a change means the updated policy applies.

HYBRD Health PLLC
23119 W IH‑10, Suite 18, San Antonio, TX 78257
contact@hybrdhealth.io