This Privacy Policy describes how TIMESTAMPSNFL LLC, d/b/a TimeStamps Support Services (“Company,” “we,” “us,” or “our”), a behavioral health support services provider located in St. Augustine, Florida, collects, uses, and protects information obtained through our website at www.timestampsnorth.com (the “Site”) and any related service communications. Please read this policy carefully before using the Site or submitting any information to us.

This policy will notify you of the following:

• What personally identifiable information is collected from you through the Site, how it is used, and with whom it may be shared.

• What choices are available to you regarding the use of your data.

• The security safeguards in place to protect against misuse of your information.

• How you can access and correct any inaccuracies in information you have provided to us.

• Your rights under applicable federal and state law, including HIPAA.

1. INFORMATION COLLECTION, USE, AND SHARING

We are the sole owners of the information collected on this Site. We only collect information that you voluntarily provide to us through web forms, email, SMS, phone contact, or other direct communications. We will not sell, rent, or trade your personal information to any third party. All information provided to us is treated as confidential.

We use the information you provide to respond to your inquiries, schedule and confirm appointments, deliver services, and maintain our client relationships. We will not share your information with any third party outside of our organization, except as strictly necessary to fulfill your request or as required by applicable law.

Unless you ask us not to, we may contact you via email in the future to provide information about our services, policy updates, or other matters relevant to your service relationship with us.

2. MANDATORY NON-SHARING CLAUSE — MOBILE INFORMATION & SMS CONSENT DATA

IMPORTANT: OUR COMMITMENT REGARDING MOBILE INFORMATION

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties under any circumstances.

Information sharing to subcontractors engaged in support services — such as customer service platforms or technical operations vendors — is permitted solely to the extent necessary to fulfill those functions and is subject to binding confidentiality obligations.

To be explicit, the following data will never be shared with any third party for any purpose, including marketing, analytics, advertising, or data monetization:

• Your mobile phone number.

• Your opt-in or opt-out consent status for SMS communications.

• The content of any text messages exchanged with us.

• Any records or metadata related to your text message consent.

3. USAGE & FREQUENCY DISCLOSURE

A. Purpose of SMS Communications

If you provide your mobile phone number through our Site or other communication channels, you consent to receive SMS text messages from us. We send text messages strictly for the following service-related purposes:

• Appointment confirmations following scheduling of services.

• Appointment reminders sent prior to scheduled service visits.

• Responses to service inquiries you have submitted to us.

• Service-related updates or changes relevant to your care or account.

We do not use your mobile number to send promotional, marketing, or advertising messages unless you have separately and explicitly opted in to receive them.

B. Message Frequency

Message frequency varies. The number of messages you receive depends on the nature and frequency of your interactions with our services, your appointment schedule, and any inquiries you initiate. You will not receive messages unrelated to your service relationship with us.

C. Message & Data Rates

Standard message and data rates may apply according to your mobile carrier’s plan. We are not responsible for any charges your carrier may assess in connection with SMS communications from us.

D. How to Opt Out

You may opt out of receiving SMS messages at any time by replying STOP to any message. After opting out, you will receive a single confirmation message and no further SMS messages will be sent unless you re-enroll. You may also contact us directly at [email protected] or by phone at (904) 747-2903 to request removal from our SMS contact list.

E. How to Get Help

For questions about our SMS communications, reply HELP to any message or contact us using the information in Section 9 of this policy.

4. AGE REQUIREMENTS & CHILDREN’S PRIVACY

A. 18+ Requirement for SMS Opt-In

AGE ATTESTATION REQUIRED

By opting into our SMS services, you represent that you are at least 18 years of age. If we learn that a person under 18 has opted into SMS communications without verified parental consent, we will promptly remove that individual from our messaging list.

B. COPPA Compliance — Children Under 13

This Site is not intended for children under the age of 13, and we do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such information from our records in accordance with the Children’s Online Privacy Protection Act (“COPPA”), 15 U.S.C. § 6501 et seq.

5. YOUR ACCESS TO AND CONTROL OVER INFORMATION

You may withdraw consent or opt out of future contacts from us at any time. By contacting us using the information provided in Section 9, you may:

• Review what personal data we hold about you, if any.

• Request correction or update of any data we hold about you.

• Request deletion of any data we hold about you.

• Opt out of receiving future communications from us.

• Express any concern or objection you have about our use of your data.

6. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These safeguards include:

• SSL (Secure Sockets Layer) encryption for all data submitted through online forms on our Site.

• Restricted access to personally identifiable information, limited to employees and authorized subcontractors who require it to perform their designated job functions.

• Secure servers and network environments for the storage of personal information.

• Periodic review of our data collection, storage, and processing practices to maintain compliance.

You can verify that your connection to our Site is secure by confirming that the page address begins with “https” and that a closed lock icon appears in your browser’s address bar. While we work diligently to protect your data, no security system is impenetrable. In the event of a data breach that may affect your personal information, we will notify you as required by applicable law.

7. HIPAA NOTICE OF PRIVACY PRACTICES

This section describes how medical and health-related information about you may be used and disclosed, and how you can obtain access to this information. Please review it carefully. To the extent that TimeStamps Support Services, operating under TIMESTAMPSNFL LLC, functions as a covered entity or business associate under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the Health Information Technology for Economic and Clinical Health Act (“HITECH”), we are required to maintain the privacy and security of your protected health information (“PHI”).

A. Your Rights Under HIPAA

• With respect to your health information, you have the right to:

• Obtain a copy of your health and claims records.

• Request correction of your health and claims records if you believe they are incorrect or incomplete.

• Request confidential communication (for example, requesting that we contact you only by a specific method or at a specific address).

• Ask us to limit the information we use or share.

• Obtain a list (accounting) of those with whom we have shared your information for the six years prior to the date of your request.

• Obtain a copy of this Privacy Policy and our Notice of Privacy Practices.

• Designate someone to act on your behalf with respect to your health information, such as a person holding medical power of attorney or a legal guardian.

• File a complaint if you believe your privacy rights have been violated.

B. Your Choices Regarding Health Information

In the following situations, you have the right to tell us your preference, and we will follow your instructions:

• Sharing information with your family, close friends, or others involved in your care or payment for your care.

• Sharing information in a disaster relief situation.

In the following cases, we will never share your information without your express written permission:

• Use of your information for marketing purposes.

• Sale of your information.

C. How We Use and Share Your Health Information

We may use and share your health information in the following ways:

• Provide and coordinate your care. We can use and share your health information with professionals who are treating you or arranging services on your behalf.

• Run our organization. We can use and disclose your information as necessary to operate our organization. We will not use genetic information to determine your eligibility for services or pricing.

• Process payment for services. We can use and disclose your health information as we coordinate billing and payment for your services, including coordination with insurers or other authorized payers.

• Public health and safety. We may share health information as required to prevent disease, report adverse reactions, report suspected abuse or neglect, or address serious threats to health or safety.

• Legal compliance. We will share information as required by state or federal law, including with the U.S. Department of Health and Human Services.

• Organ donation and medical examiners. We may share health information with organ procurement organizations, coroners, medical examiners, or funeral directors as permitted or required by law.

• Government and law enforcement requests. We may use or share health information for workers’ compensation claims, law enforcement purposes, health oversight activities, and authorized government functions.

• Lawsuits and legal actions. We may share health information in response to a court or administrative order or in response to a lawful subpoena.

D. Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your protected health information.

• Notify you promptly if a breach occurs that may have compromised the privacy or security of your information.

• Follow the duties and privacy practices described in this notice.

• Refrain from using or sharing your information other than as described here, unless you provide express written authorization, which you may revoke in writing at any time.

For more information, visit: https://www.hhs.gov/hipaa/for-individuals/notice-privacy-practices/index.html

E. Filing a HIPAA Complaint

If you believe we have violated your health information privacy rights, you may contact us directly using the information in Section 9. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights:

• By mail: 200 Independence Avenue, S.W., Washington, D.C. 20201

• By phone: 1-877-696-6775

• Online: https://www.hhs.gov/hipaa/filing-a-complaint/index.html

We will not retaliate against you in any way for filing a complaint.

8. UPDATES TO THIS POLICY

This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or service offerings. All updates will be posted on this page and the effective date at the top of this document will be revised accordingly. Your continued use of the Site following any update constitutes acceptance of the revised policy. You may request a printed copy of this policy at any time by contacting us using the information in Section 9.

If you believe we are not abiding by this Privacy Policy, please contact us immediately at [email protected] or by phone at (904) 747-2903.

9. CONTACT INFORMATION

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us using the information below. Our contact details correspond to the address registered with the Internal Revenue Service and reflected in our official business documentation and website footer.

TIMESTAMPSNFL LLC

Physical Address: 32 Mitad Circle, St. Augustine, FL 32095

Business Phone: (904) 747-2903

Support Email: [email protected]

Website: www.timestampsnorth.com