Effective date: February 1, 2026

Inspire Mind & Body, PLLC (“Inspire Mind & Body,” “the Practice,” “we,” “our,” “us”) respects your privacy. This Privacy Policy describes how our website, inspiremindbody.com (the “Site”), collects, uses, discloses, and protects information about you. It applies only to information collected through the Site.

If you are a current or prospective patient, the way we handle your protected health information (PHI) in the clinical relationship is described separately in our Notice of Privacy Practices and is governed by HIPAA, Texas HB 300, and related laws — not by this Policy.

1. Who we are

Inspire Mind & Body, PLLC is a Texas professional limited liability company operating an outpatient behavioral-health practice. Psychiatric and psychotherapy services are provided by Nina Ali, PMHNP-BC, FNP-BC, a dual-certified Family Nurse Practitioner and Psychiatric-Mental Health Nurse Practitioner licensed in the State of Texas, and by additional licensed clinicians the Practice may engage from time to time.

• Practice address: 77 Sugar Creek Center Blvd, Ste #669, Sugar Land, TX 77478
• Practice phone: (832) 303-3111
• General email: [email protected]
• Privacy Officer: Nina Ali, PMHNP-BC, FNP-BC — [email protected] · (832) 303-3111

2. What this Site is — and is not — for

The Site is an informational website for current and prospective patients. The Site is not a channel for transmitting protected health information. Please do not include diagnoses, medication lists, clinical histories, or other sensitive health details in contact-form submissions or in email sent to general inboxes. All clinical intake, scheduling, messaging, and records are handled inside our HIPAA-compliant patient portal and through our booking and billing partner, Headway, under a signed Business Associate Agreement.

3. Information we collect

a) Information you provide

When you use the Site, you may choose to give us:

• Contact details — name, email address, phone number — typically submitted through a contact form, appointment-request form, or direct email.
• Message content — the text of your inquiry. Please keep this general; do not include clinical details.
• Booking details — if you schedule through our booking partner, you may supply the information they require (such as insurance and demographic information) directly to them under their privacy policy and our Business Associate Agreement.

b) Information collected automatically

Like most websites, the Site collects technical information automatically when you visit:

• IP address — the full IP address of your device is logged for security, anti-abuse, debugging, and analytics purposes.
• Device and browser information — browser type and version, operating system, screen resolution, device type, and language preference.
• Usage data — pages viewed, referring URL, timestamps of visits, links clicked, and time spent on pages.
• Approximate location — derived from IP (typically city- or region-level).

We use Google Analytics (property ID G-533655466) to collect and process the information described above. Google Analytics may set cookies on your device and associate visits with a unique identifier. Google’s own practices are described at policies.google.com/privacy and policies.google.com/technologies/partner-sites. You can opt out of Google Analytics across all sites by installing the Google Analytics Opt-out Browser Add-on.

c) Cookies and similar technologies

We use cookies, web beacons, and similar technologies to keep the Site functional, remember preferences, measure traffic and engagement, and — where permitted — support marketing. We categorize these as:

Category	Purpose	Examples
Strictly necessary	Required for the Site to function (security, load balancing, session)	WordPress session cookies
Analytics / performance	Understand aggregate traffic and improve the Site	Google Analytics
Functional	Remember preferences (e.g., cookie-consent choices)	Consent cookie
Marketing / advertising	Measure and retarget marketing campaigns across third-party platforms	Social-media pixels, conversion tags

You can control cookies via your browser settings, and — where presented — via the cookie-consent banner described below.

d) Your cookie controls

Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may break parts of the Site. You can also opt out of Google Analytics as described above, and limit marketing-pixel tracking on social-media platforms via those platforms’ own advertising-preferences controls (for example, your Meta, Instagram, TikTok, LinkedIn, or YouTube account settings).

e) Do Not Track signals

Some browsers send “Do Not Track” signals. There is no consistent industry standard for how to respond, and the Site does not currently change its behavior based on a DNT signal. California residents can exercise specific opt-outs as described in Section 8.

4. How we use information

We use information collected through the Site to:

• Respond to inquiries and scheduling requests from prospective and current patients
• Connect new patients to our booking partner (Headway) and to our patient portal
• Send administrative communications (for example, confirming receipt of a contact-form submission)
• Operate, maintain, secure, and improve the Site
• Measure and analyze how the Site is used (aggregate analytics)
• Support marketing and outreach — for example, understanding which of our articles are most helpful, and measuring the performance of organic content and campaigns across social-media platforms
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with legal obligations and enforce our Terms of Use

We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes in exchange for monetary consideration. To the extent that “sharing” under certain state laws includes cross-context behavioral advertising, see Section 8 for opt-out rights.

SMS consent. If you provide a phone number through a form on the Site, you consent to receive text messages from us relating to your inquiry — for example, scheduling, confirmations, or a response to your question. Standard message and data rates may apply. Reply STOP to opt out of non-clinical texts at any time. Clinical text messaging inside the patient portal is governed by the patient-portal terms and the Notice of Privacy Practices.

5. How we share information

We share information only in the following circumstances:

• With service providers and technology partners who help us operate the Site and the Practice. These include web hosting, analytics, marketing-tag, booking, payment, and email providers. Service providers are contractually limited to using information for the services they perform for us. Partners that handle protected health information are covered by Business Associate Agreements.
• With our booking and billing partner, Headway, which operates under a Business Associate Agreement with Inspire Mind & Body.
• With advertising and analytics partners, in the limited ways described in Section 3 and Section 8 (including, where permitted, through marketing pixels on social-media platforms).
• As required by law or to protect rights — in response to valid legal process, to investigate suspected violations of our Terms of Use, or to protect the safety and rights of our patients, staff, or the public.
• In connection with a business transaction — such as a merger, acquisition, reorganization, or asset sale. Patient clinical records remain governed by HIPAA and Texas law in any such transaction.

We do not disclose PHI for purposes governed by HIPAA except as described in our Notice of Privacy Practices.

6. Third-party services used by the Site

The Site relies on a number of third-party services. Each operates under its own privacy policy:

• Hosting and platform: WordPress.com / Automattic — automattic.com/privacy
• Analytics: Google Analytics — policies.google.com/privacy
• Embedded Google Maps — policies.google.com/privacy
• Booking and billing partner: Headway — headway.co/legal/privacy-policy, under a Business Associate Agreement with Inspire Mind & Body
• Marketing platforms and social-media pixels that may be added from time to time (for example, to measure campaign performance on Meta, Instagram, TikTok, LinkedIn, YouTube, or similar platforms)
• Other third-party embeds we may use in the future to support the Site — for example, email marketing, scheduling widgets, video hosting, chat or support tools, analytics enhancements, form builders, and similar services

When we add or remove third-party services, this Policy is updated accordingly. We strive not to share personal information with third parties except as described here.

7. Data retention

We retain information collected through the Site only for as long as needed for the purposes described in this Policy, to comply with legal obligations, or to resolve disputes and enforce our agreements. Typical retention periods:

• Contact-form submissions and general inquiries: retained for up to 12 months unless a patient relationship is established, in which case the information may be transferred to the clinical record and retained under the retention schedule described in the Notice of Privacy Practices.
• Server and security logs: retained for up to 12 months.
• Analytics data: retained according to Google Analytics defaults (currently 14 months) unless a different period is configured.
• Cookie-consent records: retained for up to 12 months.

Clinical records subject to HIPAA are retained under the schedule described in the Notice of Privacy Practices and applicable Texas law (generally, at least seven years from the last date of service, and longer for minors).

8. Your U.S. state privacy rights

Residents of states with comprehensive consumer-privacy laws may have specific rights relating to personal information we hold that is not PHI. PHI is governed by HIPAA, Texas HB 300, and the Notice of Privacy Practices — not by this Section.

Rights granted (subject to the specific terms and exceptions in each state’s law):

• Right to know / access — request confirmation of whether we process your personal information and, if so, a copy of it
• Right to correct — ask us to correct inaccurate personal information
• Right to delete — ask us to delete personal information we maintain
• Right to portability — receive a copy of your information in a portable format where technically feasible
• Right to opt out of sale, sharing, or targeted advertising — direct us not to sell or share your personal information, or not to use it for cross-context behavioral (targeted) advertising
• Right to opt out of certain profiling — direct us not to use your information for automated decision-making that produces legal or similarly significant effects
• Right to limit the use of sensitive personal information (California)
• Right to appeal a denial of a privacy request (Virginia, Colorado, Connecticut, and certain other states)
• Right to non-discrimination — you will not receive less-favorable service or pricing for exercising a privacy right

Applicable state laws include, without limitation:

• California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”)
• Virginia Consumer Data Protection Act (“VCDPA”)
• Colorado Privacy Act (“CPA”)
• Connecticut Data Privacy Act (“CTDPA”)
• Utah Consumer Privacy Act (“UCPA”)
• Texas Data Privacy and Security Act (“TDPSA”), as applicable

How to exercise a right. Email [email protected] with the subject line “Privacy Request” and describe the right you are exercising. We may ask for information sufficient to verify your identity before acting on a request. We will respond within the timelines required by applicable law (generally 45 days, with a possible extension).

Authorized agent. You may designate an authorized agent to submit a request on your behalf. We will require written proof of the agent’s authority and may contact you to verify.

Appeals. If we deny your request, you may appeal by replying to our response with “Appeal” in the subject line. We will respond within the timelines required by applicable law.

California “Do Not Sell or Share My Personal Information.” California residents may submit an opt-out request as described above. The Site also honors the Global Privacy Control (GPC) signal where technically feasible.

Texas HB 300. Texas residents retain stronger protections for any PHI we hold under Texas HB 300. See the Notice of Privacy Practices for those rights.

9. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Site. Child and adolescent clinical services are arranged by a parent or legal guardian and governed by our Notice of Privacy Practices. If you believe a child under 13 has provided information through the Site, please email [email protected] and we will take appropriate steps to delete it.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information submitted through the Site — for example, encryption in transit (HTTPS), access controls, and regular software updates. No method of internet transmission or electronic storage is perfectly secure. Do not transmit clinical information via general email or through the Site.

11. Data-breach notification

If a security incident affects personal information we hold, we will notify affected individuals and, where required, regulators in accordance with applicable law. Breach notification specific to PHI is handled under HIPAA and Texas law and is described in the Notice of Privacy Practices.

12. International visitors

The Site is hosted in the United States and intended for United States residents. If you are visiting from outside the United States, your information will be transferred to and processed in the United States, which may have data-protection rules different from those in your country.

13. Links to third-party sites

The Site may link to third-party websites (for example, our booking partner, professional directories, or educational resources). We are not responsible for the content or privacy practices of third-party sites. Review each site’s privacy policy before providing information.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Effective date” at the top reflects the most recent change. Material changes will be noted prominently on the Site for at least 30 days. Continued use of the Site after an update constitutes acceptance of the revised Policy.

15. Contact

Questions, concerns, or privacy requests:

Inspire Mind & Body, PLLC
Attn: Privacy Officer — Nina Ali, PMHNP-BC, FNP-BC
77 Sugar Creek Center Blvd, Ste #669
Sugar Land, TX 77478
[email protected] · (832) 303-3111