Privacy Policy

Effective Date: July 14, 2026

KC Psychiatry & Primary Care, LLC (“KC Psychiatry & Primary Care,” the “Practice,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Website Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit or interact with our public websites, including kcpsychiatrist.com and kcmedpsych.com, contact us through an online form, request information, schedule an appointment, or use another online feature that links to this Policy.

By accessing or using the Website, you acknowledge the practices described in this Policy.

1. Important distinction between this Policy and our HIPAA Notice

This Policy applies primarily to information collected through our public Website and related online services.

When KC Psychiatry & Primary Care receives, creates, maintains, or transmits information about you in connection with the provision of healthcare, that information may be protected health information under the Health Insurance Portability and Accountability Act and its implementing regulations (“HIPAA”).

Our use and disclosure of protected health information are governed by our separate Notice of Privacy Practices, not solely by this Website Privacy Policy. The Notice of Privacy Practices describes how medical information may be used and disclosed, your rights regarding that information, and our legal responsibilities as a healthcare provider.

Nothing in this Website Privacy Policy is intended to limit any rights available to you under HIPAA, applicable state medical-privacy laws, substance-use-disorder confidentiality requirements, or our Notice of Privacy Practices.

2. Information we collect

The information we collect depends on how you interact with the Website.

Information you provide directly

We may collect information that you voluntarily provide, including:

• First and last name
• Email address
• Telephone number
• Mailing address
• Appointment preferences
• Requested service or inquiry category
• Billing or payment-related information
• Communications sent to the Practice
• Information entered into contact, scheduling, intake, or request forms
• Information included in uploaded documents
• Any other information you choose to provide

The Website’s general contact form may ask for your name, email address, telephone number, inquiry type, the subject of your inquiry, and a description of your request.

Health-related information

You may voluntarily provide information concerning your symptoms, medications, refill requests, diagnoses, treatment interests, medical history, mental health, weight-management goals, or other health concerns.

Please provide only the information reasonably necessary for us to respond to your inquiry. Do not submit highly sensitive medical information through a general contact form or ordinary email unless the Practice has instructed you to use that method.

When health-related information is received and maintained by the Practice in connection with healthcare services, it will be handled in accordance with applicable healthcare privacy laws and our Notice of Privacy Practices.

Appointment and scheduling information

When you schedule or request an appointment, we or our scheduling provider may collect:

• Your name and contact details
• Date of birth or other identifying information
• Appointment type
• Requested provider
• Appointment date and time
• Reason for the appointment
• Relevant health or intake information
• Payment or deposit information
• Consent and acknowledgment records

Scheduling services may be provided through an embedded or linked third-party system. Information submitted directly to that system may also be governed by the provider’s privacy policy and terms.

Payment information

When payment or a deposit is required, payment information may be collected by the Practice or by a third-party payment processor.

Depending on the payment method, this may include:

• Cardholder name
• Billing address
• Payment-card details
• HSA or FSA payment information
• Transaction amount
• Payment status
• Transaction identifiers
• Card-on-file tokens

When a third-party payment processor is used, the Practice may not receive or store your complete payment-card number. We may retain transaction records, payment status, receipts, and limited card information needed for billing and account administration.

Information collected automatically

When you use the Website, certain technical information may be collected automatically by the Website, hosting provider, security services, cookie-consent tools, analytics providers, or other technology vendors.

This information may include:

• Internet Protocol address
• Browser type and version
• Device type
• Operating system
• Referring website
• Pages viewed
• Links selected
• Date and time of visits
• Approximate geographic location derived from an IP address
• Cookie or device identifiers
• Website performance and error information
• Security and fraud-prevention information
• Cookie-consent preferences

We use this information to operate, protect, maintain, and improve the Website and to understand how visitors interact with it.

Information from third parties

We may receive information from service providers and other third parties, including:

• Appointment-scheduling platforms
• Payment processors
• Patient portal or electronic health record providers
• Telehealth platforms
• Website hosting and security providers
• Form-delivery and email providers
• Analytics providers
• Review and reputation-management services
• Social-media platforms
• Referral sources
• Other healthcare providers, when authorized or legally permitted

3. How we use information

We may use personal information to:

• Respond to questions and contact requests
• Schedule, confirm, reschedule, or cancel appointments
• Process appointment deposits and payments
• Determine which service may be appropriate for an inquiry
• Provide patient intake and administrative support
• Coordinate care, where authorized
• Respond to medication-refill or billing requests
• Communicate about appointments, services, policies, or account matters
• Maintain patient and business records
• Operate, secure, troubleshoot, and improve the Website
• Remember cookie and privacy preferences
• Measure Website performance and visitor engagement
• Prevent fraud, abuse, security incidents, or unauthorized access
• Comply with legal, licensing, regulatory, and professional obligations
• Establish, exercise, or defend legal claims
• Enforce our agreements and Website terms
• Carry out other purposes disclosed when information is collected

We will not use protected health information for purposes prohibited by HIPAA or other applicable healthcare-privacy laws.

4. Contact forms and email communications

Information submitted through a Website form or sent by email may be transmitted through third-party systems.

Although we use reasonable safeguards, ordinary email and general Website forms may not provide the same level of security as a designated patient portal or another approved secure communication method.

Please do not use the Website, contact form, social media, or ordinary email:

• For emergencies
• For urgent medical or psychiatric concerns
• To communicate an immediate threat of harm
• As a substitute for professional medical evaluation
• To send extensive medical records unless instructed
• To request time-sensitive medication changes

Submitting a contact form does not establish a physician-patient relationship and does not guarantee that the Practice will accept you as a patient.

If you are experiencing a medical emergency, call 911 or go to the nearest emergency department. For immediate mental-health crisis support in the United States, call or text 988.

5. Cookies and similar technologies

The Website may use cookies and similar technologies such as pixels, tags, scripts, local storage, or embedded content.

Cookies are small files stored on your device that help websites function, remember preferences, provide security, and understand Website activity.

Strictly necessary cookies

These cookies are required for core Website functions, such as:

• Maintaining Website security
• Preventing malicious activity
• Managing forms and sessions
• Remembering cookie-consent preferences
• Supporting accessibility or load balancing
• Maintaining basic Website functionality

Because these cookies are necessary for the Website to operate, they generally cannot be disabled through the Website’s cookie controls.

Analytics and performance technologies

Where enabled, analytics technologies may help us understand:

• Which pages are visited
• How visitors navigate the Website
• Which devices and browsers are used
• Whether Website errors occur
• How well Website content and features perform

Where legally required, nonessential analytics technologies will be activated only after appropriate consent.

Third-party content and services

Pages may contain or link to third-party services such as online scheduling, Google Maps, Google reviews, social-media pages, review widgets, payment services, or other embedded features.

These providers may collect information such as your IP address, device details, interactions, and cookie identifiers. Their collection and use of information are governed by their own privacy policies.

You may manage nonessential cookies through the Website’s cookie-settings tool, when available, and through your browser settings. Disabling cookies may affect certain Website functions.

6. Online tracking and health-related pages

Because this Website contains information about mental health, psychiatric conditions, medications, primary care, obesity medicine, substance-use disorders, and other healthcare topics, we take additional care when evaluating analytics and tracking technologies.

We do not knowingly authorize advertising companies to use protected health information for targeted advertising.

We do not intend to disclose information indicating that an identifiable person is seeking or receiving a particular healthcare service to advertising or data-broker companies.

When a vendor creates, receives, maintains, or transmits protected health information on our behalf, we will require appropriate privacy and security protections, including a Business Associate Agreement where required by HIPAA.

7. How we disclose information

We may disclose information in the following circumstances.

Service providers

We may disclose information to vendors that help us operate the Practice or Website, including providers of:

• Website hosting
• Website development and maintenance
• Cybersecurity and fraud prevention
• Contact-form processing
• Secure email and communications
• Appointment scheduling
• Electronic health records
• Patient portals
• Telehealth services
• Payment processing
• Billing and accounting
• Data backup and storage
• Analytics and performance measurement
• Review display and reputation management
• Legal, compliance, and consulting services

These providers are permitted to process information only for authorized purposes and subject to contractual obligations where appropriate.

Healthcare operations and treatment

When permitted by law, information may be shared with healthcare professionals, laboratories, pharmacies, treatment facilities, referral partners, or other providers for treatment, care coordination, payment, or healthcare operations.

Uses and disclosures of protected health information are described more fully in our Notice of Privacy Practices.

Legal and safety purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with a law, court order, subpoena, or lawful government request
• Fulfill professional, licensing, or regulatory obligations
• Protect the rights, safety, or property of the Practice, our patients, or others
• Investigate suspected fraud, misuse, or security incidents
• Respond to an emergency or serious threat where disclosure is permitted by law
• Establish, exercise, or defend legal claims

Business changes

If the Practice undergoes a reorganization, merger, acquisition, financing, sale, or transfer of assets, information may be disclosed as part of that transaction, subject to applicable healthcare-privacy and confidentiality requirements.

With your direction or consent

We may disclose information when you request, direct, authorize, or consent to the disclosure.

8. Sale of personal information

KC Psychiatry & Primary Care does not sell personal information or protected health information for monetary consideration.

We do not sell health information to data brokers, advertising networks, or unrelated third parties.

Certain analytics, embedded content, or third-party services may receive technical information as described in this Policy. Where applicable law defines such activity as “sharing,” “targeted advertising,” or another regulated disclosure, you may exercise the applicable opt-out right through our cookie settings or by contacting us.

9. Appointment, payment, patient portal, and telehealth providers

The Website may link to or embed systems operated by third parties for:

• Appointment scheduling
• Patient intake
• Payment processing
• Electronic health records
• Patient portal access
• Telehealth visits
• Secure messaging
• Prescription or refill management

When you leave our Website or interact directly with a third-party platform, that provider may collect information under its own privacy policy and terms.

Healthcare vendors that handle protected health information on behalf of the Practice are required to maintain appropriate contractual, privacy, and security protections where applicable.

You should review the privacy terms presented by a scheduling, payment, portal, or telehealth provider before submitting information.

10. Telephone, email, and text communications

We may use the telephone number or email address you provide to:

• Respond to your inquiry
• Assist with scheduling
• Send appointment confirmations or reminders
• Communicate about forms, payments, or administrative matters
• Provide information you requested
• Communicate about your care, when permitted

Standard telephone, email, and text-message rates may apply.

We do not use your contact information for promotional text-message marketing without any consent required by applicable law. Consent to promotional communications is not a condition of receiving healthcare services.

You may ask us to stop nonessential promotional communications at any time. Administrative, appointment, billing, safety, or care-related communications may continue when necessary.

11. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including:

• Responding to inquiries
• Maintaining appointment and payment records
• Providing healthcare
• Meeting medical-record retention obligations
• Complying with tax, accounting, licensing, contractual, and legal requirements
• Resolving disputes
• Preventing fraud or abuse
• Maintaining security and audit records

Medical records and protected health information are retained in accordance with applicable healthcare laws, professional standards, and the Practice’s record-retention policies.

Information may be retained in backups for a limited period after deletion from active systems.

12. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, use, alteration, loss, or disclosure.

Depending on the information and system involved, safeguards may include:

• Access controls
• Authentication requirements
• Encryption
• Secure hosting
• Network and application security
• Backups
• Staff confidentiality obligations
• Vendor-management procedures
• Security monitoring
• Incident-response procedures
• HIPAA policies and training

No website, email system, electronic transmission, or storage system can be guaranteed to be completely secure. You should use caution when submitting sensitive information online.

13. Your privacy choices

You may take the following steps to manage your information:

• Do not provide optional information through Website forms.
• Use the cookie-settings tool to control nonessential cookies, where available.
• Configure your browser to block or delete cookies.
• Contact us to update or correct your contact information.
• Unsubscribe from promotional emails using the link provided in the message.
• Ask us to stop promotional text messages.
• Use a secure patient portal when one is provided for sensitive communications.
• Avoid sending sensitive information through ordinary email.

Blocking cookies or scripts may prevent some Website features from functioning correctly.

14. Your healthcare-information rights

When information is protected by HIPAA, you may have rights described in our Notice of Privacy Practices, which may include the right to:

• Inspect or obtain a copy of certain health information
• Request corrections to certain health information
• Request restrictions on certain uses or disclosures
• Request confidential communications
• Receive an accounting of certain disclosures
• Obtain a paper copy of the Notice of Privacy Practices
• File a privacy complaint without retaliation

These rights are subject to applicable legal requirements, limitations, and exceptions.

Requests involving medical records or protected health information should be directed to the Practice using the contact information below.

15. State privacy rights

Depending on where you reside and whether a particular law applies to the Practice or the information involved, you may have the right to:

• Confirm whether we process your personal information
• Access certain personal information
• Correct inaccurate information
• Request deletion
• Obtain a portable copy of information
• Opt out of the sale of personal information
• Opt out of targeted advertising
• Opt out of certain profiling
• Limit certain uses of sensitive information
• Withdraw consent where processing is based on consent
• Appeal the denial of a privacy request
• Receive equal service without unlawful discrimination for exercising privacy rights

Many state consumer-privacy laws contain exemptions for protected health information, medical records, healthcare providers, small businesses, or organizations that do not meet statutory thresholds. Your request may therefore be governed by HIPAA, another healthcare law, a consumer-privacy law, or a combination of laws.

To submit a request, contact us using the information below. We may need to verify your identity before completing a request. We may deny or limit a request when permitted or required by law.

An authorized agent may submit a request where applicable, but we may require evidence of the agent’s authority and verification of your identity.

16. Consumer health data

Certain information submitted through the Website may qualify as “consumer health data,” “health data,” or “sensitive data” under state law even when it is not protected health information under HIPAA.

To the extent such laws apply, we collect and process consumer health data only for purposes reasonably necessary to:

• Respond to your inquiry
• Provide requested scheduling or administrative services
• Facilitate healthcare services
• Process payments
• Maintain security
• Satisfy legal obligations
• Carry out another purpose with your consent

We do not sell consumer health data. We do not use consumer health data for targeted advertising.

You may contact us to request access, deletion, correction, or withdrawal of consent where those rights apply.

17. Children’s privacy

The Website and the Practice’s services are intended for adults. The Practice currently provides clinical services to individuals aged 18 and older.

The Website is not directed to children under 13, and we do not knowingly collect personal information online directly from children under 13 without legally required parental consent.

If you believe a child under 13 has submitted personal information through the Website, please contact us so we can review and appropriately delete the information.

Parents or guardians should not use a public contact form to submit unnecessary sensitive information about a minor.

18. External websites and social media

The Website may contain links to third-party websites or services, including:

• Google Maps
• Google reviews
• Facebook
• Scheduling platforms
• Payment processors
• Patient portals
• Telehealth systems
• Educational resources
• Crisis or public-health resources

We do not control the privacy, security, accessibility, or content practices of third-party websites.

A link does not necessarily mean that we endorse every practice or statement of the third party. Review the third party’s privacy policy before providing personal information.

Communications posted publicly on social media are not private and should not contain medical or confidential information. We cannot provide medical advice or manage urgent concerns through social-media comments or direct messages.

19. Do Not Track and privacy signals

Some browsers offer a “Do Not Track” setting. Because there is not a uniform standard governing all Do Not Track signals, the Website may not respond to every such signal.

Where required by applicable law and supported by our Website technology, we will process legally recognized browser-based opt-out preference signals.

You may also use the Website’s cookie settings to manage available preferences.

20. International visitors

The Practice is located in the United States and primarily provides services to patients in Missouri and Kansas.

If you access the Website from outside the United States, information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country.

By providing information, you acknowledge this processing, subject to rights available under applicable law.

21. Security incidents and breach notification

If we become aware of a security incident involving personal information, we will investigate and take reasonable steps to contain and address the incident.

When required, we will notify affected individuals, regulators, law-enforcement authorities, or other parties in accordance with HIPAA, applicable state breach-notification laws, and other legal requirements.

22. Changes to this Policy

We may update this Website Privacy Policy periodically to reflect changes in:

• Website features
• Technology providers
• Information practices
• Healthcare operations
• Legal or regulatory requirements

The updated Policy will be posted on the Website with a revised effective date. Material changes may also be communicated through another appropriate method.

Your continued use of the Website after an updated Policy becomes effective indicates acknowledgment of the revised Policy.

23. Contact us

Questions, privacy requests, or concerns regarding this Website Privacy Policy may be directed to:

Privacy Officer
KC Psychiatry & Primary Care, LLC
851 NW 45th Street, Suite 210
Kansas City, Missouri 64116

Telephone: (816) 708-0508
Fax: (816) 631-0118
Email: info@kcmedpsych.com

Please do not include unnecessary medical information in an ordinary email. Requests concerning medical records or protected health information may require identity verification and may be redirected to an approved secure process.