Dynamis Online Privacy Notice

Last Updated: October 8, 2026

Introduction

Dynamis Online (“Dynamis,” “we,” “us,” or “our”) explains in this policy how personal information is handled when you visit www.dynamisonline.com, contact our team, submit forms, schedule services, or use digital tools that link to this policy. The responsible legal entity or entities are Dynamis Medical Partners, PLLC., DBA: Dynamis Online. Independent medical practices, laboratories, pharmacies, and other providers may have their own privacy notices.

This website policy does not replace a healthcare provider’s HIPAA Notice of Privacy Practices. When information is protected health information under HIPAA, applicable healthcare privacy requirements, and the treating provider’s notice govern its use and disclosure. Website use alone is not authorization for uses of health information that require separate permission.

The Information We Collect and Its Sources

The information we receive depends on your interactions with us. It may include:

• Contact and identification information: name, date of birth, mailing address, telephone number, email address, and identification documents when needed for identity verification due to clinical/medical requirements.

• Service and account information: appointment requests, account details, communication preferences, support messages, and consent records.

• Health information: information submitted for medical care, such as health history, symptoms, medications, treatment goals, and laboratory results. Use secure clinical channels for sensitive details.

• Transaction information: payments, purchases, refunds, and billing records. Payment processors may collect payment credentials directly under their own notices.

• Technical information: IP address, browser and device details, pages viewed, referral sources, and interactions with our website, where collected through website technologies.

We receive information from you and, where authorized or otherwise permitted, from providers, laboratories, pharmacies, payment processors, and vendors involved in the services you request. We collect only information appropriate to the purpose and applicable legal requirements.

Purposes for How We Use Your Information

We use information to respond to inquiries; coordinate appointments and requested services; support patient onboarding and care administration; manage payments and accounts; deliver service communications; maintain consent and preference records; resolve concerns; improve service quality; protect systems against misuse; and meet applicable recordkeeping or legal obligations.

Where permitted and consistent with your choices, we may send information about Dynamis services or promotions. Marketing uses of protected health information that require authorization will not be based solely on acceptance of this website policy.

How We Disclose Your Information

Information may be disclosed to people and organizations that need it for an authorized or legally permitted purpose, including:

• Healthcare participants, such as treating professionals, laboratories, and dispensing pharmacies, as appropriate for requested care.

• Service providers supporting scheduling, secure records, communications, payments, hosting, or other business functions, subject to applicable contractual and legal protections.

• Authorities or other recipients when required by law, valid legal process, or an applicable legal exception.

• Parties involved in a business reorganization or transfer, subject to continuing legal restrictions on the information.

• Other recipients when you direct or authorize the disclosure.

We do not sell personal information for monetary payment. Certain advertising technology disclosures may qualify as “sale,” “sharing,” or targeted advertising under state law even without monetary payment. Any such activity must be described accurately in our published disclosures and is subject to applicable opt-out requirements. Health information will not be used or disclosed for advertising in ways prohibited by applicable law.

SMS Program and Mobile Information

If you enroll in Dynamis text messaging, we use your mobile number, consent records, and messaging preferences to provide the messages you requested. These may include scheduling updates, appointment reminders, account notifications, refill coordination, customer care, and separately authorized promotional messages. Consent to marketing texts is not a condition of purchasing services. We may maintain the date and method of consent, opt-in and opt-out status, delivery records, message timestamps, and support message content to operate the program and document your choices.

Notwithstanding any other provision of this Privacy Policy, mobile phone numbers, SMS opt-in data, and consent records collected through our SMS Program are not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. They are excluded from any sale, sharing, targeted advertising, or cross-context behavioral advertising described elsewhere in this policy. We disclose this information only to messaging platforms, mobile carriers, and service providers as necessary to deliver, support, and document the messages you consented to receive, subject to applicable restrictions, or when legally required. These recipients may not use this information for their own marketing.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for assistance. You may also call 469-214-3404 or email help@dynamisonline.com. Opting out of texts does not cancel an appointment or treatment plan; contact us to arrange another communication method.

Text messages may appear on a device’s lock screen or be accessible to others using the device. Avoid sending sensitive medical details through ordinary SMS. Our SMS Terms of Service are available at https://dynamisonline.com/terms-of-use/.

Online Analytics, Advertising, and Tracking Choices

Website technologies may help maintain sessions, remember preferences, measure traffic, and, if enabled, support advertising. The cookie preference controls available on our site describe the choices offered for optional technologies. You may also adjust browser settings to block or delete cookies; some functions may then be limited.

Where applicable law requires, we recognize supported universal opt-out signals, such as Global Privacy Control. Browser signals may apply only to that browser or device unless they can be connected to your account. We obtain consent for optional tracking where required. Healthcare forms, authenticated patient areas, and sensitive health data require separate evaluation before any analytics or advertising technology is used.

Your Rights and Choices

Depending on the law applicable to your information and our organization, you may have rights to access information, obtain a portable copy, correct inaccuracies, request deletion, withdraw consent, or opt out of sale, targeted advertising, or certain profiling. California residents may also have rights concerning sharing for cross-context behavioral advertising and qualifying uses of sensitive personal information. These rights are subject to statutory scope, exemptions, and exceptions; not every right applies to every record.

Send requests to help@dynamisonline.com or call 469-214-3404. Describe the request and your state of residence. Do not include government identification numbers or detailed medical information in an initial ordinary email. We may request reasonable verification using an appropriate channel. Authorized agents may act where permitted, with evidence of authority and any required identity verification.

We respond within the time required by applicable law and explain any applicable extension or denial. If applicable law gives you a right to appeal a denial, reply to our response or contact us with “Privacy Appeal” in the subject. We will explain available appeal procedures and applicable regulator complaint options. We do not retaliate for exercising privacy rights.

You may unsubscribe from marketing email using its unsubscribe link. Essential service communications may continue through an appropriate channel. To request medical records or exercise healthcare privacy rights, contact the treating practice or ask our team to direct your request.

Retention of Your Information and How We Protect It

Retention depends on why information was collected, ongoing service needs, and applicable healthcare, tax, dispute, and other legal requirements. Closing an account or opting out of communications may not require deletion of records that must be retained. Information no longer needed is deleted, de-identified, or otherwise handled under applicable retention procedures. SMS consent logs and suppression records are retained as needed to document compliance and honor opt-out requests.

We use administrative, technical, and physical safeguards appropriate to the information and applicable obligations. Access is limited according to business and care needs. No online transmission or storage system can be guaranteed completely secure. Report suspected unauthorized account activity promptly using the contact details below.

Children and International Users

Our public website and marketing are intended for adults. We do not knowingly collect children’s information through the website without an appropriate legal basis and any required parental permission. If you believe a child has submitted information improperly, contact us. Clinical services for minors, if offered, follow separate eligibility and consent requirements.

Our services are directed to users in the United States. Information may be handled in jurisdictions where our service providers operate, subject to applicable requirements. Availability of healthcare services depends on provider licensure and service eligibility.

Third-Party Services and Notice About Health Information

Links to patient portals, laboratories, pharmacies, payment services, or other websites may lead to services operated independently. Review their privacy notices before submitting information. Their handling of information is subject to their own responsibilities; linking to a service does not extend this policy to all of its activities.

Revisions to Our Privacy Policy

We may revise this policy when our practices or legal obligations change. The published policy will show its effective or last updated date. We will provide additional notice or obtain new consent when required. Changes do not override existing legal protections or required authorizations.

Contacting Us

Dynamis Online — Privacy Inquiries

Email: help@dynamisonline.com

Telephone: 469-214-3404

Website: https://www.dynamisonline.com

Contact form: https://dynamisonline.com/contact-us/

Dynamis Online is subject to HIPAA, which governs how we may use and disclose your Protected Health Information (“PHI”), such as medication and other personal information we use to provide prescriptions. Our Notice of Privacy Practices, including information about your rights with respect to your PHI, can be found below.

Dynamis Online Notice of Privacy Practices

Last Updated: April 13, 2026

This Notice describes how your medical information may be used and disclosed and how you can get access to this information. Please review it carefully.

Dynamis Med Consulting, LLC and its subsidiaries (collectively “Dynamis Online”) are committed to maintaining the privacy of your Protected Health Information (“PHI”). We are required by law to maintain the privacy and security of your PHI, to give you this Notice of our legal duties and privacy practices with respect to your PHI, and to notify you following a breach of your unsecured PHI.

This Notice applies to Dynamis Online and all of its subsidiaries. If you have any questions about this Notice, please contact our Privacy Office using the contact information at the end of this document.

How We May Use and Disclose Your Protected Health Information

The following categories describe the typical ways that we may use and disclose your PHI without your prior authorization:

  • For Treatment. PHI obtained by Dynamis Online will be used in order to dispense medications and to provide you with health care and health care operations. We may also share your PHI with other health care providers and health information networks involved in your care.
  • For Payment. We may use or disclose your PHI in order to bill and collect payment for products or services we provided to you, including contact with your insurance company or health plan.
  • For Health Care Operations. We may use and disclose your PHI for our day-to-day health care operations, including quality improvement and staff performance monitoring.

We may also use and disclose your PHI as follows:

  • Business Associates. We may contract with third parties to perform certain services for us. We require those third parties to appropriately safeguard your PHI in accordance with HIPAA.
  • Disclosures to Parents or Legal Guardians. We may release a minor’s PHI to a parent or legal guardian as permitted or required by law.
  • As Required by Law. We will disclose your PHI when required to do so by applicable federal, state, or local law.
  • To Avert a Serious Threat to Health or Safety. We may use and disclose your PHI when necessary to prevent a serious and imminent threat to your health or safety or the health or safety of another person or the public.
  • Organ and Tissue Donation. Consistent with applicable law, we may disclose your PHI to organ procurement organizations.
  • Military and Veterans. If you are a member or veteran of the armed forces, we may disclose PHI as required by military command authorities.
  • Research. We may use your PHI to conduct research or disclose it to researchers when an institutional review board or privacy board has approved the research and established protocols to ensure the privacy of your PHI.
  • Workers’ Compensation. We may disclose PHI about you for workers’ compensation or similar programs.
  • Public Health Activities. Applicable laws may require or permit Dynamis Online to disclose certain PHI for public health purposes, including:
    • Preventing disease or telling people when they may have been exposed to a communicable disease;
    • Reporting reactions to medications, problems with products, or product recalls;
    • Reporting information to your employer if we provide health care services to you at your employer’s request;
    • Providing proof of immunization to your school if required by law;
    • Notifying a government authority if we reasonably believe you are a victim of abuse, neglect, or domestic violence.
  • Health Oversight Activities. We may disclose PHI to a health oversight agency for legally authorized activities such as audits, inspections, and investigations.
  • Judicial and Administrative Proceedings. If you are involved in a lawsuit or a dispute, we may disclose PHI in response to a court or administrative order, subpoena, or other lawful process.
  • Law Enforcement. We may disclose your PHI to the police or other law enforcement officials as required by law or in compliance with a court order.
  • Coroners, Medical Examiners and Funeral Directors. We may disclose PHI to a coroner or medical examiner to identify a deceased person or determine cause of death.
  • Correctional Institution. If you are or become an inmate of a correctional institution, we may disclose your PHI as necessary for your health and the health and safety of others.
  • Specialized Government Functions. We may disclose your PHI to units of the government with special functions, such as the U.S. military or the Secret Service.

Use and Disclosure of Substance Use Disorder Records (42 CFR Part 2)

If applicable, your substance use disorder (“SUD”) records may be protected by federal law under 42 C.F.R. Part 2 (“Part 2”), which provides additional confidentiality protections beyond standard HIPAA rules. This section applies to all PHI we receive, including any Part 2 records from other providers, whether or not you are currently receiving SUD treatment.

  • Disclosure of SUD records generally requires your explicit written consent, except in limited circumstances, including: (a) Medical Emergencies — to the extent necessary to treat you; (b) Reporting crimes on program premises; (c) Child Abuse Reporting — to appropriate state or local authorities; and (d) Fundraising — we will provide you with an opportunity to decline fundraising communications prior to making them.
  • You may revoke any such consent at any time.
  • SUD records received from Part 2 programs shall not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless based on your written consent or a court order with proper notice and opportunity to be heard.
  • A court order authorizing use or disclosure must be accompanied by a subpoena or other legal requirement compelling disclosure before any such records are used or disclosed.
  • If SUD records are disclosed to us for treatment, payment, or healthcare operations, we or our business associates may further use and disclose such information without your separate written consent only to the extent HIPAA regulations otherwise permit, consistent with this Notice.

More information about regulations regarding the use and disclosure of medical records can be found at the Center of Excellence for Protected Health Information website.

Choices You Have About Certain Uses and Disclosures of Your PHI

For certain PHI, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, tell us and we will follow your instructions:

  • Sharing PHI with family, close friends, caregiver, or others involved in your care
  • Sharing PHI in a disaster relief situation

Unless you object to such sharing, we may disclose your PHI to a family member, other relative, or close personal friend involved in your care.

Uses and Disclosures of PHI That Require Your Written Authorization

Any other uses and disclosures of your PHI not mentioned in this Notice will require your written authorization. This includes most uses and disclosures of psychotherapy notes and uses or disclosures of your PHI for marketing purposes where we receive remuneration.

If you provide us authorization to use or disclose your PHI, you may revoke that authorization in writing at any time. Your revocation will not apply to uses or disclosures we have already made in reliance on your authorization.

Your Rights Regarding Your Protected Health Information

You have the following rights regarding your PHI:

  • Access. With a few exceptions, you have the right to review and copy your PHI. You may be charged a reasonable fee for copies.
  • Amendment. If you feel that PHI in your record is incorrect or incomplete, you may ask us to amend the information. We may deny your request if we did not create the information or if we determine the information is accurate and complete.
  • Accounting of Disclosures. You have the right to ask us for a list (accounting) of the times we’ve shared your PHI, with whom, and for what purpose, for the prior six years.
  • Restricting or Limiting Disclosure. You have the right to request additional restrictions on our use or disclosure of your PHI. We are not required to agree to your request, but if we do, we will honor it.
  • Alternate Communications. You have the right to request that we communicate with you about health matters in a certain way or at a certain location.
  • Receiving a Paper Copy of This Notice. You have the right to a paper copy of this Notice of Privacy Practices at any time.
  • Notification in the Event of a Breach. We are required by law to maintain the privacy and security of your PHI and to notify you if we discover a breach of your unsecured PHI.

Changes to This Notice

We reserve the right to change this Notice, including for PHI we already have about you. If we change our practices, we will post a new Notice on our website and make it available upon request.

Complaints

We take your privacy seriously and welcome your questions and feedback. If you believe your privacy rights have been violated, you may file a complaint with the Dynamis Online Privacy Office or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Dynamis Online Privacy Office Contact Information

All correspondence related to this Notice of Privacy Practices must be submitted to the Dynamis Online Privacy Office:

Dynamis Med Consulting, LLC
Privacy Office
P.O. Box 383
Rowlett, TX 75030

Phone: 469-214-3404

EEA Residents

If you are resident in the European Economic Area, you have certain rights under applicable data protection laws. The “data controller” of your personal information is Dynamis Med Partners, PLLC. If you believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority. You can find their contact details at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

California Residents — CCPA/CPRA Privacy Rights

If you are a resident of California, you are granted specific rights regarding access to your personal information under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information We Collect

We collect the following categories of personal information (as defined by the CCPA/CPRA):

  • Identifiers (name, email address, IP address, account name)
  • Personal information under California Civil Code Section 1798.80 (address, phone number)
  • Protected classification characteristics (age, gender, as relevant to healthcare)
  • Commercial information (purchase records, transaction history)
  • Internet or other electronic network activity information (browsing and interaction data)
  • Geolocation data
  • Health and medical information (constituting “sensitive personal information”)
  • Inferences drawn from personal information to create a profile

Your CCPA/CPRA Rights

As a California resident, you have the right to:

  • Know what personal information we have collected about you, including the categories, sources, purposes, and third parties with whom we share it.
  • Access the specific pieces of personal information we have collected about you.
  • Delete personal information we have collected about you, subject to certain exceptions.
  • Correct inaccurate personal information we maintain about you.
  • Opt Out of Sale or Sharing of your personal information. We do not sell your personal information. If we share personal information for cross-context behavioral advertising, you have the right to opt out.
  • Limit Use and Disclosure of Sensitive Personal Information. You have the right to limit our use of your sensitive personal information (which includes health data) to purposes reasonably necessary for providing our services.
  • Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Shine The Light Law

California Civil Code Section 1798.83 (“Shine The Light”) permits California users to request, once a year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes in the preceding calendar year. To make such a request, please contact us using the information below.

Minors’ Rights (California)

If you are under 18 years of age, reside in California, and have a registered account with the Sites, you have the right to request removal of unwanted data that you publicly post on the Sites. To request removal, please contact us using the information below. Note that this removal may not ensure complete or comprehensive removal of content from the Internet.

How to Submit a Request

To exercise any of the above rights, please contact us using the contact information below. We will verify your identity before responding to your request and will respond within 45 days (or as required by law). You may designate an authorized agent to submit requests on your behalf.

Appeals

If we deny your request, you may appeal our decision by contacting us. If your appeal is denied, you may contact the California Privacy Protection Agency (CPPA) at https://cppa.ca.gov/.

Texas Residents — TDPSA Privacy Rights

If you are a resident of Texas, you are granted specific rights regarding your personal data under the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024.

Your TDPSA Rights

As a Texas resident, you have the right to:

  • Access the personal data we process about you.
  • Correct inaccuracies in your personal data.
  • Delete personal data you have provided or that we have obtained about you.
  • Obtain a copy of your personal data in a portable, readily usable format.
  • Opt Out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Sensitive Data

The TDPSA requires us to obtain your consent before processing “sensitive data,” which includes health information, precise geolocation data, and certain other categories. By agreeing to our Terms of Use and this Privacy Policy, you consent to our processing of sensitive data as described herein and as necessary to provide our telehealth services.

How to Submit a Request

To exercise any of the above rights, please contact us using the contact information below. We will respond within 45 days, with a possible 45-day extension for complex or numerous requests. If we decline to act on your request, we will provide you with a reason and instructions for appealing our decision. If your appeal is denied, you may contact the Texas Attorney General at https://www.texasattorneygeneral.gov.

Do We Make Updates to This Policy?

Yes, we will update this policy as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated “Last Updated” date at the top of this policy. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to stay informed of how we are protecting your information.

Medical / Pharmaceutical Disclaimer

Dynamis Med Partners, PLLC provides services to Dynamis Wellness and Anti-Aging Online and is independently owned by licensed physicians. The care provided by our health care practice is the sole responsibility of the practice and the providers the practice employs or contracts with. Services and office practices may vary across entities and you should contact the specific entity for all questions related to the health care services you receive. Dynamis Med Partners, PLLC does not provide pharmacy services. Medications that may be prescribed with a valid prescription by health care providers employed or contracted by the physician practices Dynamis Med Partners provides administrative services to are fulfilled by independent pharmacies.

This privacy policy was reviewed and updated to reflect compliance with: HIPAA (including 42 CFR Part 2 Final Rule, effective February 16, 2026), CCPA/CPRA (including 2023 amendments), the Texas Data Privacy and Security Act (effective July 1, 2024), and applicable state telehealth regulations.