Privacy Policy

Last Updated: April 10, 2026

This Privacy Notice for Ivy Psychiatry PLLC d/b/a Lux Mental Health ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at www.luxmentalhealth.com or any website of ours that links to this Privacy Notice

• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.

If you still have any questions or concerns, please contact us at: admin@luxmentalhealth.com

SUMMARY OF KEY POINTS

What personal information do we process? We may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process sensitive personal information? Yes, when necessary and with your consent (or as permitted by law), we may process sensitive personal information, including health data.

Do we collect information from third parties? No, we do not collect information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with applicable law.

When do we share personal information? We may share information in specific situations with specific third parties, as described below.

How do we keep your information safe? We implement organizational and technical safeguards, but no system can be guaranteed 100% secure.

What are your rights? Depending on your location, you may have rights regarding access, correction, deletion, and more.

TABLE OF CONTENTS

1. What Information Do We Collect?

2. How Do We Process Your Information?

3. What Legal Bases Do We Rely On?

4. When and With Whom Do We Share Your Personal Information?

5. Do We Use Cookies and Other Tracking Technologies?

6. SMS and Text Message Communications

7. How Long Do We Keep Your Information?

8. How Do We Keep Your Information Safe?

9. Do We Collect Information From Minors?

10. What Are Your Privacy Rights?

11. Controls for Do-Not-Track Features

12. Do United States Residents Have Specific Privacy Rights?

13. Do We Make Updates to This Notice?

14. How Can You Contact Us About This Notice?

15. How Can You Review, Update, or Delete Your Data?

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you express interest in our Services, participate in activities on the Services, or contact us.

This may include names, phone numbers, email addresses, and contact preferences.

Sensitive Information

With your consent or as permitted by law, we may process health data you choose to share with us through the website.

Payment Data

If you make purchases, we may collect payment information. All payment data is handled and stored by Ivy Pay. Their privacy policy is available at: https://www.talktoivy.com/privacy-policy

All personal information you provide must be accurate and current.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process personal information to deliver and facilitate services, respond to inquiries and provide support, send administrative information, enable user communications, and protect an individual's vital interests.

We only process your information when we have a valid legal basis to do so.

3. WHAT LEGAL BASES DO WE RELY ON?

If you are in the EU/UK, we may rely on consent, performance of a contract, legal obligations, or vital interests.

If you are in Canada, we may rely on express or implied consent, or legal exceptions under applicable Canadian law.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your personal information in the following situations:

• Business transfers: In connection with a merger, sale, or acquisition of all or part of our business

• Service providers: With third-party vendors who assist in operating our Services, subject to confidentiality obligations

We do not sell your personal information.

5. DO WE USE COOKIES AND TRACKING TECHNOLOGIES?

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the website function, remember your preferences, and collect information about how you use the site. We may also use related technologies such as web beacons and pixels, which function similarly to cookies.

Types of Cookies We Use

Strictly Necessary Cookies These cookies are required for the website to function and cannot be switched off. They are typically set in response to actions you take, such as filling out a form or setting privacy preferences. You can set your browser to block these cookies, but some parts of the site may not work as a result.

Functional Cookies These cookies allow the website to remember choices you make and provide enhanced, personalized features. They may be set by us or by third-party providers whose services we use.

Analytics and Performance Cookies These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use Google Analytics, including Google Analytics Demographics and Interests Reporting, to collect this information. You can opt out of Google Analytics tracking at any time at https://tools.google.com/dlpage/gaoptout.

Marketing and Advertising Cookies We do not currently use cookies for advertising or marketing targeting purposes. If this changes, this notice will be updated accordingly.

Third-Party Cookies

Some pages on our website may include embedded content or tools provided by third parties. These third parties may place their own cookies on your device. We do not control third-party cookies and encourage you to review the privacy policies of any third-party services you interact with on our site.

How Long Do Cookies Last?

Cookies may be either session cookies or persistent cookies. Session cookies are temporary and are deleted from your device when you close your browser. Persistent cookies remain on your device for a set period of time or until you delete them manually.

Your Cookie Choices

You have the right to choose whether to accept or reject non-essential cookies. You can manage your cookie preferences in the following ways:

• Cookie consent banner: When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You may update your preferences at any time.

• Browser settings: Most browsers allow you to refuse or delete cookies through their settings. Note that disabling cookies may affect the functionality of this website.

• Opt-out tools: For Google Analytics specifically, you may use Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.

Residents of Colorado and other states with applicable privacy laws have the right to opt out of the collection of personal data through cookies used for analytics or tracking purposes. To exercise this right, please use the cookie consent banner on our site or contact us at admin@luxmentalhealth.com.

6. SMS AND TEXT MESSAGE COMMUNICATIONS

Consent to Receive Text Messages

By providing your phone number and opting in to SMS communications from Ivy Psychiatry PLLC, you consent to receive text messages from us. These messages may include appointment reminders, scheduling notifications, responses to your inquiries, and other practice-related communications.

We do not send marketing or promotional text messages without your express prior written consent. Consent to receive text messages is not a condition of receiving care or services.

Message Frequency and Rates

Message frequency varies based on your interactions with our practice. Standard message and data rates may apply depending on your mobile carrier and plan.

How to Opt Out

You may opt out of SMS communications at any time by replying STOP to any text message you receive from us. After opting out, you will receive one final confirmation message and no further texts will be sent, except as required for patient safety or legal compliance.

How to Get Help

Reply HELP to any text message for assistance, or contact us directly at 720-663-0707 or admin@luxmentalhealth.com.

Privacy of Text Communications

Text messages are not encrypted and are not a HIPAA-secure method of communication. Please do not send sensitive health information, diagnoses, or clinical details via text message. If you need to communicate sensitive information, please call our office directly or use our secure patient portal if available.

Carrier Disclaimer

Ivy Psychiatry PLLC is not liable for delayed or undelivered messages. Mobile carriers are not responsible for this program.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only as long as necessary to fulfill the purposes outlined in this notice, unless required by law to retain it longer. When no longer needed, we delete or anonymize the data.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We use appropriate technical and organizational safeguards to protect your personal information. However, no method of transmission over the Internet is 100% secure. You access the Services at your own risk.

Please note that communications through our website, including contact forms and email, are not HIPAA-secure. Do not transmit sensitive health information through these channels.

9. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from or market to children under 18. If we learn we have collected data from a minor, we will delete it promptly. To report a concern, contact us at admin@luxmentalhealth.com.

10. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have the right to access your personal data, correct inaccuracies, delete your personal data, restrict processing, request data portability, withdraw consent, and opt out of marketing communications.

To exercise any of these rights, please contact us at admin@luxmentalhealth.com.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

We do not currently respond to Do-Not-Track (DNT) browser signals. No uniform standard for DNT exists at this time.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Residents of certain U.S. states may have additional privacy rights. Given that Ivy Psychiatry PLLC operates in Colorado, Rhode Island, New York, and Massachusetts, the following state-specific rights are particularly relevant:

Colorado (Colorado Privacy Act): Colorado residents have the right to know, access, correct, delete, and opt out of the sale or sharing of personal data, as well as the right to data portability and to appeal our decisions regarding your requests.

Rhode Island (Rhode Island Data Transparency and Privacy Protection Act): Rhode Island residents have the right to access, correct, delete, and opt out of the sale of personal data.

New York (SHIELD Act): New York residents are protected by reasonable data security requirements governing how we safeguard your personal information.

Massachusetts (Massachusetts Data Privacy Law): Massachusetts residents are protected by data security requirements and have rights regarding the handling of their personal information.

We have not sold personal information in the past 12 months.

To submit a request, contact us at admin@luxmentalhealth.com.

13. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this Privacy Notice periodically. The updated version will reflect a revised date at the top of this page. We encourage you to review this notice regularly.

14. HOW CAN YOU CONTACT US?

Ivy Psychiatry PLLC Email: admin@luxmentalhealth.com Phone: 720-663-0707 Address: 950 S Cherry St, Denver, CO 80246

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

You may request to access, update, correct, or delete your personal information by contacting us at admin@luxmentalhealth.com.