Privacy Policy

Effective Date: August 27, 2026
Last Updated: August 27, 2026

Oberidon (“Oberidon,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the confidentiality and security of information entrusted to us.

This Privacy Policy describes how Oberidon collects, uses, maintains, discloses, and otherwise processes information when you visit or interact with our website, communicate with us, request an appointment, or use other services through which this Privacy Policy is displayed or referenced.

Because Oberidon provides mental health and healthcare-related services, certain information we maintain about patients may constitute Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), as applicable.

Our use and disclosure of PHI is governed by our Notice of Privacy Practices, not solely by this Privacy Policy. If there is any conflict between this Privacy Policy and our Notice of Privacy Practices with respect to PHI, the Notice of Privacy Practices will control.

By accessing or using our website, you acknowledge the practices described in this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

• Our website;

• Online contact and inquiry forms;

• Appointment-request and scheduling functions;

• Communications with Oberidon;

• Payment and administrative interactions;

• Telehealth-related entry points, where applicable; and

• Other online services that link to this Privacy Policy.

This Privacy Policy does not replace or modify any rights you may have with respect to PHI under HIPAA, applicable state law, or Oberidon’s Notice of Privacy Practices.

Third-party websites, applications, patient portals, payment processors, or other services may maintain separate privacy policies governing information collected directly by those parties.

2. Information We Collect

Depending on how you interact with Oberidon, we may collect information that identifies, relates to, describes, or could reasonably be associated with you.

A. Information You Provide Directly

We may collect information you voluntarily provide, including:

• Name;

• Mailing or residential address;

• Email address;

• Telephone number;

• Date of birth;

• Appointment preferences;

• Information submitted through contact or intake forms;

• Insurance or benefits information;

• Billing and payment-related information;

• Communications you send to us; and

• Other information you elect to provide.

Please use caution when submitting sensitive medical or mental health information through general website contact forms or ordinary email unless we specifically indicate that the communication method is appropriate for such information.

B. Health and Treatment Information

When you become a patient or otherwise receive clinical services from Oberidon, we may collect information concerning your health and healthcare, including, as applicable:

• Medical and mental health history;

• Current symptoms and concerns;

• Diagnoses;

• Medications;

• Treatment history;

• Laboratory or assessment information;

• Family medical or psychiatric history;

• Substance-use information;

• Treatment plans;

• Clinical notes;

• Referrals;

• Insurance information; and

• Other information relevant to the provision, coordination, or payment of your care.

To the extent this information constitutes PHI, its collection, use, and disclosure are governed by applicable healthcare privacy laws and our Notice of Privacy Practices.

C. Information Collected Automatically

When you access our website, we or service providers acting on our behalf may automatically collect certain technical information, including:

• Internet Protocol (“IP”) address;

• Browser type and version;

• Device type;

• Operating system;

• Referring and exit pages;

• Date and time of access;

• Pages viewed;

• General geographic information;

• Website navigation and interaction data; and

• Other technical information relating to your use of the website.

We may use this information to operate, secure, maintain, and improve our website and services.

3. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, web beacons, analytics tools, and similar technologies to support website functionality, maintain security, understand website performance, remember preferences, and improve the user experience.

A “cookie” is a small data file stored on your device when you visit a website.

Depending on the technologies used on our website, you may be able to control certain cookies through your browser settings or through privacy controls made available on the website.

Disabling cookies may affect the availability or functionality of certain website features.

Oberidon evaluates the use of online tracking technologies in light of applicable healthcare and privacy requirements. We do not intend for tracking technologies to be used in a manner that impermissibly discloses PHI.

Where information collected through a website technology constitutes PHI, Oberidon will handle such information in accordance with applicable HIPAA requirements, including requirements applicable to service providers or business associates, where required.

4. How We Use Information

We may use personal information for legitimate business, healthcare, administrative, operational, and legal purposes, including to:

• Respond to inquiries;

• Process appointment requests;

• Schedule and manage appointments;

• Provide requested services;

• Deliver mental health and healthcare services;

• Communicate with you regarding appointments, care, or administrative matters;

• Coordinate treatment or services, where appropriate;

• Verify insurance coverage or benefits;

• Process billing and payments;

• Maintain business and clinical records;

• Operate and improve our website;

• Analyze website functionality and performance;

• Protect against fraud, misuse, unauthorized access, or security incidents;

• Maintain and improve the quality of our services;

• Comply with professional, regulatory, contractual, and legal obligations;

• Establish, exercise, or defend legal rights; and

• Carry out other purposes permitted or required by applicable law.

Where required by law, we will obtain appropriate consent or authorization before using information for a particular purpose.

5. Protected Health Information

Oberidon recognizes the highly sensitive nature of mental and behavioral health information.

To the extent Oberidon is a covered entity under HIPAA, we are required to maintain the privacy of PHI, provide individuals with notice of our legal duties and privacy practices, and comply with the terms of our Notice of Privacy Practices currently in effect.

Our Notice of Privacy Practices explains, among other matters:

• How we may use and disclose PHI;

• When your written authorization may be required;

• Your rights to access certain health records;

• Your right to request amendments to certain records;

• Your right to request certain restrictions;

• Your right to request confidential communications;

• Your right to receive an accounting of certain disclosures;

• Your right to receive a copy of the Notice of Privacy Practices; and

• How you may submit a privacy complaint.

Please review Oberidon’s Notice of Privacy Practices for additional information regarding PHI.

6. How We May Disclose Information

We may disclose information only as reasonably necessary and as permitted or required by applicable law.

Depending on the circumstances, disclosures may include the following.

A. Healthcare Providers and Care Coordination

Where permitted by law, information may be disclosed to physicians, psychiatric professionals, therapists, pharmacies, laboratories, healthcare facilities, or other professionals involved in your treatment or care.

Certain types of mental health, psychotherapy, substance-use, or other sensitive records may be subject to additional federal or state protections.

B. Service Providers and Business Associates

We may engage third parties to perform services on our behalf, including:

• Electronic health record services;

• Scheduling platforms;

• Telehealth technology providers;

• Secure communication providers;

• Billing companies;

• Payment processors;

• Information technology providers;

• Cybersecurity providers;

• Website hosting providers;

• Cloud-storage providers; and

• Professional and administrative service providers.

Where a third party creates, receives, maintains, or transmits PHI on our behalf and qualifies as a business associate under HIPAA, we will enter into an appropriate Business Associate Agreement when required by law.

C. Health Plans and Payment-Related Parties

Where applicable, we may disclose information to health insurers, health plans, benefits administrators, billing providers, or other entities as necessary for payment, eligibility verification, claims administration, or other legally permitted healthcare operations.

D. Legal and Regulatory Requirements

We may disclose information when we reasonably determine that disclosure is required or permitted under applicable law, including in response to:

• A court order;

• Subpoena or other lawful process;

• Government or regulatory inquiry;

• Licensing or professional-board requirement;

• Public-health requirement; or

• Other legally authorized request.

Additional restrictions may apply to certain mental health, psychotherapy, or substance-use records.

E. Health and Safety

Information may be disclosed when permitted or required by law to address a serious and imminent threat to the health or safety of an individual or the public, to report suspected abuse or neglect, or for other legally authorized safety purposes.

F. Corporate Transactions

Subject to applicable healthcare and privacy laws, information may be transferred in connection with a merger, acquisition, reorganization, financing, sale of assets, or similar business transaction involving Oberidon.

Any PHI involved in such a transaction will remain subject to applicable healthcare privacy requirements.

7. Sale and Marketing of Health Information

Oberidon does not sell PHI in violation of HIPAA or other applicable law.

We will not use or disclose PHI for a purpose requiring a valid HIPAA authorization unless the appropriate authorization has been obtained or another legal basis permits the use or disclosure.

Where applicable state privacy law defines “sale,” “sharing,” “targeted advertising,” or similar activities more broadly, Oberidon will provide any notices, choices, or rights required by applicable law.

8. Email, Text Messages, and Electronic Communications

Oberidon may communicate with you through email, telephone, text message, a patient portal, or other electronic methods where appropriate.

Electronic communications may carry inherent privacy and security risks. Ordinary email and text messaging may not always be encrypted.

By providing contact information and requesting that we communicate with you through a particular method, you acknowledge that certain communications may be made through that method, subject to applicable law and your communication preferences.

You should not use ordinary email, website forms, text messages, or social media to communicate urgent or emergency medical or psychiatric concerns.

9. Payment Information

If you make a payment through an online payment service, payment-card information may be processed directly by a third-party payment processor.

Oberidon may receive limited transaction information, such as payment status, transaction identifiers, billing information, or payment confirmation.

Third-party payment providers may process your information pursuant to their own privacy and security practices.

10. Data Security

Oberidon maintains reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, use, alteration, loss, destruction, or disclosure.

Such safeguards may include, as appropriate:

• Access controls;

• Authentication procedures;

• Secure technology systems;

• Workforce confidentiality requirements;

• Security policies and procedures;

• Vendor-management practices;

• Technical safeguards; and

• Administrative controls.

Where electronic PHI is involved, Oberidon applies safeguards as required by applicable healthcare privacy and security laws.

Nevertheless, no method of transmission over the Internet, method of electronic storage, or information-security system can be guaranteed to be completely secure. Accordingly, we cannot guarantee the absolute security of information transmitted to or maintained by us.

11. Data Retention

We retain information for the period reasonably necessary to:

• Provide services;

• Maintain appropriate clinical and business records;

• Satisfy legal, regulatory, professional, insurance, and contractual obligations;

• Resolve disputes;

• Enforce agreements;

• Protect legal rights; and

• Fulfill legitimate operational requirements.

Medical and mental health records may be subject to specific retention periods under federal or state law and professional licensing requirements.

When information is no longer required to be retained, we may delete, destroy, de-identify, or otherwise dispose of it in accordance with applicable law and our record-retention practices.

12. Your Rights and Choices

Depending on the nature of the information, your relationship with Oberidon, and the state in which you reside, you may have rights concerning your personal information.

Such rights may include, where applicable, the right to:

• Request access to personal information;

• Request correction of inaccurate information;

• Request deletion of certain information;

• Request limitations on certain uses or disclosures;

• Opt out of certain marketing communications;

• Withdraw consent where processing is based on consent;

• Request information regarding certain disclosures;

• Request confidential communications; or

• Exercise other rights provided by applicable federal or state law.

These rights are not absolute and may be subject to legal exceptions, identity-verification requirements, medical-record retention requirements, or other limitations.

Rights relating specifically to PHI are described in Oberidon’s Notice of Privacy Practices.

We will not unlawfully discriminate or retaliate against you for exercising a privacy right provided by applicable law.

13. State-Specific Privacy Rights

Certain states provide residents with privacy rights that may exceed or differ from the rights described generally in this Privacy Policy.

Depending on your state of residence and whether a particular law applies to Oberidon or the information at issue, you may have additional rights relating to access, correction, deletion, portability, consent, or the use of sensitive information.

Mental health and medical information may also receive additional protections under state law.

Where state law provides greater privacy protections than federal law, Oberidon will comply with applicable requirements.

To submit a privacy request, please contact us using the information listed below.

14. Children and Minors

The availability of Oberidon’s clinical services to minors, if any, is subject to applicable law, professional requirements, parental or guardian consent requirements, and the circumstances of the treatment.

Our general website is not designed to solicit personal information directly from children in violation of applicable law.

Where Oberidon provides services to a minor, information concerning that minor will be handled in accordance with applicable federal and state laws governing consent, confidentiality, parental or guardian access, and healthcare records.

15. Third-Party Websites and Services

Our website may contain links to websites, applications, social-media platforms, payment services, patient portals, or other resources operated by third parties.

This Privacy Policy does not govern the privacy practices of independent third parties.

Oberidon is not responsible for the content, security, availability, or privacy practices of third-party websites or services. We encourage you to review the privacy policies and terms applicable to any third-party service before providing personal information.

16. Telehealth Services

Where Oberidon provides telehealth services, information transmitted in connection with those services will be handled in accordance with applicable healthcare privacy and security requirements.

Patients should participate in telehealth appointments from a private location whenever reasonably possible and should take reasonable precautions to protect the privacy of their communications.

Additional telehealth consents, disclosures, or notices may apply depending on the state in which a patient is physically located at the time services are provided.

17. Mental Health Emergencies

Oberidon’s website, general email addresses, contact forms, and routine messaging services are not monitored or intended for emergency or crisis communications.

If you believe you are experiencing a medical or psychiatric emergency, are in immediate danger, or may harm yourself or another person, call 911, go to the nearest emergency department, or contact the 988 Suicide & Crisis Lifeline by calling or texting 988.

Do not rely on a website submission, voicemail, email, or routine appointment request for emergency assistance.

18. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy from time to time to reflect changes in our practices, services, technology, legal obligations, or regulatory requirements.

When we make changes, we will revise the “Last Updated” date displayed at the beginning of this Privacy Policy.

Material changes may be communicated through additional means where required by applicable law.

Your continued use of the website following the posting of an updated Privacy Policy will be subject to the policy then in effect, except where applicable law requires a different form of notice or consent.

19. Notice of Privacy Practices

This Privacy Policy is not intended to serve as Oberidon’s HIPAA Notice of Privacy Practices.

If you are a patient of Oberidon, please review our Notice of Privacy Practices for information regarding our legal duties concerning PHI and your rights regarding your health information.

A copy of the Notice of Privacy Practices is available upon request and, where required, through our website.

20. Contact Information

Questions, concerns, or requests regarding this Privacy Policy or Oberidon’s privacy practices may be directed to:

Oberidon
Privacy Officer

Telephone: (+1) 000 111 222
Email: info@oberidon.com

For questions or requests relating specifically to your medical records or Protected Health Information, please contact our Privacy Officer using the information above.

21. Complaints

If you believe your privacy rights have been violated, you may submit a complaint to Oberidon using the contact information provided above.

Where applicable, you may also have the right to submit a complaint to the U.S. Department of Health and Human Services, Office for Civil Rights, or another appropriate regulatory authority.

Oberidon will not retaliate against you for filing a good-faith privacy complaint or exercising a right available to you under applicable law.