Privacy Policy & SMS Terms

Effective August 2026 • Applies to our website, email, text messaging, and online forms

This Privacy Policy is separate from our Notice of Privacy Practices 2026, which is the HIPAA notice describing how we use and protect protected health information (PHI) in the course of treatment, payment, and health care operations. Where this policy and the Notice of Privacy Practices differ with respect to PHI, the Notice of Privacy Practices governs. Both are available at no charge on request.

SECTION 1 | WHO WE ARE

Regal Behavior Solutions, LLC (“Regal,” “we,” “us,” or “our”) is a Missouri-based behavioral health provider specializing in applied behavior analysis (ABA). We serve learners ages 3 through adulthood.

This policy explains what information we collect, how we use it, who we share it with, and the choices you have — whether you are visiting our website, emailing us, texting with us, filling out a form, or receiving services.

Regal Behavior Solutions, LLC — 7827 Town Square Ave, Suite 104-1145, O'Fallon, MO 63368 — (636) 400.7778 — info@regalbehaviorsolutions.com

SECTION 2 | INFORMATION WE COLLECT

Information you give us

Name, date of birth, and demographic information
Contact information — email address, phone number, mailing address
Health and behavioral information relevant to services
Insurance and payment information
Information submitted through intake forms, contact forms, and appointment requests
The content of emails, text messages, and voicemails you send us

Information collected automatically

Website usage data — pages visited, time on site, referring site
Device and browser information, including IP address
Cookies and similar technologies used for site function and analytics

Information from other sources

Referral sources, including physicians, schools, and funding sources
Insurance plans and the Missouri Department of Mental Health, for eligibility and authorization
Other treating providers, where you have authorized the exchange in writing

SECTION 3 | HOW WE USE INFORMATION

To provide, coordinate, and improve behavioral health services
To communicate with you about appointments, scheduling, and your services
To verify benefits, obtain authorization, and process payment
To meet legal, regulatory, licensing, and funding-source obligations
To respond to inquiries and requests you send us
To improve our website and understand how it is used

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes.

SECTION 4 | HOW WE SHARE INFORMATION

We may share with

Service providers and business associates:To operate our business — for example, our electronic health record, payment processor, scheduling platform, and communications providers. Those handling PHI are bound by written business associate agreements under HIPAA.
Insurance plans and funding sources: To verify eligibility, obtain authorization, submit claims, and meet reporting requirements.
Other treating providers: Only with your written authorization, or as otherwise permitted by HIPAA for treatment purposes.
Legal and regulatory authorities: When required by law — including mandated reporting of suspected abuse or neglect, subpoenas and court orders, audits, and public health reporting.

Mobile phone numbers and SMS consent are never shared with third parties or affiliates for marketing or promotional purposes.

SECTION 5 | TEXT MESSAGE (SMS) TERMS

SMS TERMS & CONDITIONS — Regal Behavior Solutions, LLC

Program description. Regal Behavior Solutions sends text messages to learners, caregivers, and legally responsible parties regarding appointment reminders and confirmations, scheduling changes, session cancellations, closure and weather notices, intake and document follow-up, billing notifications, and general service updates. We also send account and service-related messages to our employees.

How to opt in. You may opt in by providing your mobile number and giving consent on an intake or contact form, by checking the SMS consent box on our website, by verbally consenting to a staff member who documents it, or by texting us first. Consent to receive text messages is not a condition of receiving services, purchasing any goods or services, or obtaining care from Regal Behavior Solutions.

Message frequency. Message frequency varies based on your services and account activity.

Cost. Message and data rates may apply. Regal Behavior Solutions does not charge for text messages; charges come from your mobile carrier.

How to opt out. You may cancel at any time by replying STOP to any message. After you reply STOP, we will send one confirmation message and will not send further texts unless you opt in again. You may also opt out by calling (636) 400.7778 or emailing info@regalbehaviorsolutions.com.

How to get help. Reply HELP to any message for assistance, or contact us at (636) 400.7778 or info@regalbehaviorsolutions.com.

Carriers. Mobile carriers are not liable for delayed or undelivered messages.

Supported carriers. Message delivery depends on your carrier and is not guaranteed.

Privacy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Not for emergencies. Text messaging is not monitored 24 hours a day and must never be used to report an emergency or a crisis. If someone is in immediate danger, call 911. For a mental health crisis, call or text 988.

Additional practices

We use a registered A2P 10DLC campaign through The Campaign Registry to comply with carrier messaging requirements
We limit the content of text messages so that protected health information is not included beyond what is necessary for scheduling and service coordination
Text messaging is a convenience, not a substitute for clinical communication — clinical questions should go to your BCBA
Opting out of text messages does not opt you out of phone calls, email, or mailed communication
We retain records of consent and opt-out requests as required by carrier and regulatory rules

SECTION 6 | EMAIL & PHONE COMMUNICATION

Standard email and text are not fully secure. We limit the health information included in them.
You may ask us to contact you only by a specific method or at a specific number or address, and we will accommodate reasonable requests
Outgoing email and fax carry a confidentiality notice; if you receive one in error, please contact us and delete it
Voicemails are returned within one business day during business hours (8:00 a.m. – 6:00 p.m., Monday through Friday)

SECTION 7 | WEBSITE, COOKIES & ANALYTICS

Our website uses cookies for basic site function and analytics tools to understand traffic patterns
You can disable cookies in your browser settings; some site features may not work as intended
We honor browser-based Global Privacy Control (GPC) signals where technically supported
Our site may link to third-party sites, which have their own privacy policies we do not control
Forms submitted through our website are transmitted over an encrypted connection

Children and our website

Our services are provided to learners as young as age 3, but our website is directed to adults. We do not knowingly collect personal information directly from children under 13 through our website. Information about a minor learner is provided to us by a parent, guardian, or legal representative. If you believe a child has provided information to us directly, contact us and we will delete it.

SECTION 8 | HOW WE PROTECT INFORMATION

Encryption of sensitive data in transit and at rest
Access controls, unique user credentials, and authentication procedures
Role-based access — staff see only what they need for their work
Secure, HIPAA-compliant storage systems and business associate agreements with vendors
Physical records kept in locked storage with restricted access
Annual privacy and security training for all employees
Regular review of security practices and access logs
Documented procedures for secure disposal of paper and electronic records

No system is perfectly secure. If a breach affecting your unsecured protected health information occurs, we will notify you as required by the HIPAA Breach Notification Rule and applicable Missouri law.

SECTION 9 | HOW LONG WE KEEP INFORMATION

Clinical records are retained for the period required by Missouri law, our funding-source contracts, and professional standards — in most cases at least seven years, and longer for records of minors
Billing and payment records are retained as required by tax and payer requirements
SMS consent and opt-out records are retained for the period required by carrier and regulatory rules
Website analytics data is retained on a rolling basis
When records reach the end of their retention period, they are securely destroyed and the destruction is documented

SECTION 10 | YOUR RIGHTS & CHOICES

Rights regarding your health information

These rights are described in full in our Notice of Privacy Practices 2026:

Inspect and request copies of your records
Request corrections to information you believe is incorrect or incomplete
Request an accounting of certain disclosures
Request restrictions on how information is used or shared
Request confidential communication at a specific number or address
Receive a paper copy of the notice
Be notified of a breach affecting your information
Complain to us or to the U.S. Department of Health & Human Services, Office for Civil Rights, without retaliation

Rights regarding other information

Access the personal information we hold about you
Correct inaccurate information
Opt out of text messages, marketing email, and non-essential communication at any time
Request deletion of information that is not part of a clinical, billing, or legal record

A note on deletion, stated plainly: we cannot delete a clinical or billing record on request. Health care providers are legally required to retain those records for a set period, and that obligation overrides a deletion request. We can delete marketing contacts, website inquiry data, and other non-record information, and we will tell you clearly which category your request falls into.

How to exercise a right

Email info@regalbehaviorsolutions.com or call (636) 400.7778. We will respond within 30 days. If we need more time, we will tell you why and when to expect a response.

SECTION 11 | CHANGES TO THIS POLICY

We may update this policy. When we do, we will post the revised version on our website, update the effective date, and — for material changes affecting how we use your information — notify you directly. The version in effect at the time information was collected governs that information.

SECTION 12 | CONTACT US

Privacy questions, records requests, or to exercise a right | info@regalbehaviorsolutions.com • (636) 400.7778

Billing and insurance | billing@regalbehaviorsolutions.com

Intake and new services | intake@regalbehaviorsolutions.com

To cancel a session | notify@regalbehaviorsolutions.com

Mailing address | Regal Behavior Solutions, LLC 7827 Town Square Ave, Suite 104-1145, O'Fallon, MO 63368

To file a privacy complaint outside Regal | U.S. Department of Health & Human Services, Office for Civil Rights — hhs.gov/ocr/complaints

Privacy Policy & SMS Terms 2026 • Effective August 2026 • Supersedes the Notice of Privacy Practices for SMS dated September 6, 2024