Privacy Policy

Effective Date: 03/01/2026

Last Reviewed: 03/01/2026

Approved By: Board of Managers

1. Purpose and Scope

This Website Privacy Policy and SMS Communications Terms describes the policies and practices of Aligned Cardio Partners (“the Practice”) regarding the collection, use, disclosure, and protection of personal information through its website, electronic communications, SMS messaging programs, and related services.

Aligned Cardio Partners complies with the Health Insurance Portability and Accountability Act (HIPAA), the Virginia Consumer Data Protection Act (VCDPA), applicable Virginia healthcare confidentiality statutes, and federal and state telecommunications regulations.

This document is a website privacy and SMS communications policy. It does not replace or constitute Aligned Cardio Partners' HIPAA Notice of Privacy Practices (NPP), which is separately available upon request and at [www.alignedcardio.com/privacy-notice]. Patients seeking information about their HIPAA rights and ACP's uses and disclosures of Protected Health Information should refer to the NPP.

Certain services, including the patient portal, are provided by third-party vendors operating under Business Associate Agreements as required by HIPAA (45 CFR § 164.502(e)).

2. Categories of Personal Information Collected

• Identifiers (name, address, email, phone number, date of birth)

• Insurance and payment information

• Medical and health information (Protected Health Information)

• Website and device information (IP address, browser type, cookies)

• Information submitted via forms, patient portal, or SMS opt-in

3. Purposes for Processing Personal Information

• Provision of medical care and treatment

• Appointment scheduling and care coordination

• Insurance verification and claims processing

• Billing and payment collection

• Regulatory compliance and quality improvement

• Electronic and SMS communications (with consent)

Aligned Cardio Partners does not sell personal information.

Aligned Cardio Partners will not use Protected Health Information for marketing or promotional purposes without a patient's written HIPAA authorization, consistent with 45 CFR §§ 164.514(e) and 164.508.

4. SMS Communications

Patients may opt in to receive SMS messages by signing a consent form at the time of registration, through the patient portal, or by otherwise providing express written consent as required under the Telephone Consumer Protection Act (TCPA).

Patients who opt in may receive the following types of messages:

• Appointment reminders and confirmations

• Follow-up care instructions

• Billing notifications and account alerts

• Health-related notifications

Messaging frequency may vary.

Message and data rates may apply.

Mobile carriers are not liable for delayed or undelivered messages.

To opt out at any time, text STOP.

For assistance, text HELP or visit www.alignedcardio.com.

SMS communications involving Protected Health Information are governed by ACP's HIPAA Privacy and Security policies and ACP's internal compliance program.

5. Virginia Consumer Data Protection Act (VCDPA)

Virginia residents may have the right to:

• Confirm whether personal data is being processed

• Access personal data

• Correct inaccuracies

• Delete personal data (subject to healthcare retention laws)

• Obtain a portable copy of personal data

• Opt out of targeted advertising or profiling

Protected Health Information (PHI) regulated by HIPAA is generally exempt from VCDPA rights. However, other personal data collected through this website — such as browsing data, cookies, IP addresses, and device information — may be subject to VCDPA rights as described above.

6. Data Security

Aligned Cardio Partners maintains administrative, technical, and physical safeguards designed to protect personal information consistent with HIPAA and Virginia law.

Aligned Cardio Partners retains personal information in accordance with applicable federal and state healthcare laws, including HIPAA's minimum six (6)-year retention requirement for compliance-related documentation (45 CFR § 164.530(j)).

7. Contact Information

Aligned Cardio Partners

7275 Glen Forest Dr.

Richmond, VA 23226

Phone: (804) 915-0046

Privacy Officer: Christina Peterson

Privacy Officer Phone: 720-372-2347

If you have questions or concerns about how your information is handled, or to exercise your rights under HIPAA or the VCDPA, please contact the Privacy Officer above. You may also submit a complaint to the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr, or to the Virginia Attorney General's Office at www.oag.state.va.us, without fear of retaliation.