CUSTOMER
PRIVACY POLICY

Kairos Privacy Policy

Effective Date: November 1, 2026

Last Updated: November 1, 2026

This Privacy Policy describes how Krysus LLC, doing business as Kairos (“Kairos,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you interact with us. That includes visiting www.kairosrelief.com (the “Site”), submitting a form, booking or paying for services, visiting our Stone Oak or Alamo Ranch locations, calling us, or receiving our emails or text messages (together, the “Services”).

Please read this Privacy Policy carefully. By using the Services, you acknowledge the practices described here. Our Terms of Use also govern your use of the Services and incorporate this Privacy Policy.

1. Who We Are

Kairos is an integrated pain relief, recovery, and performance center in San Antonio, Texas. We offer physical therapy, massage therapy, recovery technologies (such as float, salt, sound, red light, compression, heat, cold, and contrast therapies), memberships, and, at our Stone Oak location, clinically supervised services.

Locations:

• Stone Oak: 2102 N Loop 1604 W, San Antonio, TX 78248
• Alamo Ranch: 5522 Lone Star Pkwy, Bldg 3, Suite 302, San Antonio, TX 78253

2. Health Information and HIPAA

Some of our Services, such as physical therapy, massage therapy, and clinically supervised services, may involve health information. When we act as a health care provider, health information that identifies you (“Protected Health Information” or “PHI”) is protected by the Health Insurance Portability and Accountability Act (HIPAA) and applicable Texas law, including the Texas Medical Records Privacy Act. Our Notice of Privacy Practices explains how we use and disclose PHI and your rights regarding it. If this Privacy Policy conflicts with our Notice of Privacy Practices about PHI, the Notice of Privacy Practices controls.

Please do not include sensitive medical information in general website contact forms, emails, or text messages. If you have a clinical question, call us or discuss it at your visit.

3. Information We Collect

Information you give us:

• Contact and identity information: name, phone number, email address, mailing address, date of birth, and emergency contact.
• Booking, account, and membership information: appointment history, service preferences, membership details, gift card details, and information about gift recipients (used only to fulfill the gift).
• Payment information: billing details and payment card information. Payments are processed by our booking and payment provider; we do not store full card numbers on our own systems.
• Health and intake information: information you provide on intake, consent, and waiver forms or during care (handled under Section 2 and our Notice of Privacy Practices).
• Communications: messages you send through website forms, email, phone, text message, or social media, and your communication preferences, including text messaging opt-in and opt-out records.

Information collected automatically:

• Device and usage information: IP address, browser type, operating system, internet service provider, referring and exit pages, pages viewed, date and time stamps, and clickstream data.
• Cookies, pixels, and similar technologies: see Section 6.
• Call information: when you call certain phone numbers listed in our ads or on the Site, our call tracking provider may record the calling number, call time and duration, the ad or page that led to the call, and, where permitted by law and disclosed at the start of the call, a call recording.
• Email engagement: whether our emails are opened and which links are clicked.

Information from other sources: we may receive information from our booking and payment provider, advertising platforms (such as Google and Meta), referral partners, and the people who buy gift cards for you.

4. How We Use Information

We use personal information to:

• schedule, confirm, remind you of, and provide appointments and Services;
• process payments, memberships, gift cards, and refunds;
• send transactional messages, such as appointment reminders, account and service updates, and customer care responses;
• send marketing and promotional messages by email or text only where you have given the required consent, and honor your opt-out choices;
• answer questions and provide customer support;
• operate, secure, analyze, and improve the Site and Services;
• measure the effectiveness of our advertising and communications;
• comply with legal, regulatory, licensing, and recordkeeping obligations; and
• prevent fraud, enforce our Terms of Use, and protect the rights and safety of our clients, staff, and business.

We may create aggregated or de-identified information that does not identify you and use it for any lawful purpose.

5. How We Share Information

We do not sell or rent your personal information to other marketers. We share personal information only as described below:

• Service providers who process information for us under contracts that limit their use of it, including our booking and payment platform (Boulevard), our customer relationship management, email, and text messaging platform (HighLevel/LeadConnector) and its messaging carriers and vendors, our productivity and cloud storage provider (Google Workspace, under a Business Associate Agreement where PHI is involved), our website hosting and form providers, our call tracking provider (CallRail), and analytics and advertising providers (such as Google and Meta; see Section 6).
• Professional advisors, such as attorneys, accountants, and insurers, as needed.
• Legal and safety: to comply with law, a subpoena, court order, or other legal process; to respond to lawful government requests; or to protect the rights, property, or safety of Kairos, our clients, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this Privacy Policy.
• With your consent or at your direction.

PHI is used and disclosed only as permitted by HIPAA and described in our Notice of Privacy Practices.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. Cookies, Analytics, and Advertising Technologies

We and our providers use cookies, pixels (tags), and similar technologies to operate the Site, remember your preferences, understand how visitors use the Site, and measure and improve our advertising. These include:

• Analytics: for example, Google Analytics, to understand traffic patterns and Site performance.
• Advertising and conversion measurement: for example, the Google Ads tag and the Meta Pixel, to measure ad results and show relevant Kairos ads on other sites and platforms.
• Call tracking: CallRail, which may show a unique phone number to measure which ads or pages lead to calls.
• Email tracking: click-through links and pixels in our emails, to see whether emails are opened and links are clicked.

We configure these tools with the goal of not sending health information, such as details of your condition or treatment, to advertising platforms.

Your choices: you can block or delete cookies through your browser settings, though some Site features may not work properly. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout, adjust Google ad settings at https://adssettings.google.com, and adjust Meta ad preferences in your Facebook or Instagram settings. Industry opt-out tools are available at https://optout.aboutads.info and https://optout.networkadvertising.org. Our Site does not currently respond to “Do Not Track” browser signals. Where applicable law requires it, we will honor recognized opt-out preference signals, such as Global Privacy Control.

7. Text Messaging (SMS) Privacy

If you opt in to receive text messages from Kairos, we collect your mobile phone number, your consent, and the date, time, and method of your opt-in, along with message history and opt-out requests. We use this information only to send the messages you agreed to receive (such as appointment reminders, account and service updates, customer care, and, if you separately consent, marketing and promotional messages), to honor your opt-out choices, and to keep records of consent as required by law.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Our text messaging platform provider and wireless carriers process your number only to deliver messages for us. You can opt out at any time by replying STOP. Reply HELP for help. Message frequency varies. Message and data rates may apply. See the “SMS / Text Messaging Terms” section of our Terms of Use for full program terms.

8. Data Retention

We keep personal information only as long as needed for the purposes described in this Privacy Policy, including to provide Services, maintain your account or membership, resolve disputes, enforce agreements, and meet legal, tax, accounting, and licensing requirements. For example:

• Clinical, treatment, and intake records: kept for the period required by Texas law and applicable licensing board rules.
• Text messaging consent and opt-out records: kept for at least five (5) years after your last interaction, to document compliance with consent requirements.
• Booking, payment, and transaction records: kept as required for tax and accounting purposes.
• Marketing contact information: kept until you opt out or ask us to delete it, after which we keep only what we need to honor your opt-out.

When information is no longer needed, we delete it, de-identify it, or store it securely until it can be deleted.

9. How We Protect Information

We use reasonable administrative, technical, and physical safeguards, including encrypted (SSL/TLS) connections on pages that collect personal information, to protect personal information against loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please help protect your information by using strong passwords and keeping your account credentials confidential.

10. Your Rights and Choices

All users: you may ask to access, correct, or update your personal information, or ask us to delete it, by contacting us using the information in Section 15. You may unsubscribe from marketing emails with the “unsubscribe” link in any email, and from text messages by replying STOP. Even if you opt out of marketing, we may still send transactional or service messages you have agreed to receive, unless you opt out of those too.

Texas residents: depending on whether the Texas Data Privacy and Security Act applies to us and to your information, you may have the right to:

• confirm whether we process your personal data and access it;
• correct inaccuracies in your personal data;
• delete personal data you provided or that we obtained about you;
• get a copy of your personal data in a portable, readily usable format; and
• opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.

We do not sell personal data, and we do not sell sensitive personal data. To make a request, contact us using the information in Section 15. We will verify your identity before responding, and we will respond within 45 days, which may be extended by 45 days when reasonably necessary. We will not discriminate against you for exercising your rights. If we decline your request, you may appeal by replying to our decision or emailing us with “Privacy Appeal” in the subject line. We will respond to an appeal within 60 days. If your appeal is denied, you may contact the Texas Attorney General at https://www.texasattorneygeneral.gov/consumer-protection.

Residents of other states: you may have similar rights under your state’s law. Contact us and we will honor requests as required by applicable law.

Health information: your rights regarding PHI, including access, amendment, and an accounting of disclosures, are described in our Notice of Privacy Practices.

11. Children’s Privacy

The Site is intended for adults 18 years of age or older. We do not knowingly collect personal information online from children under 13. Services for minors require a parent or legal guardian’s authorization, and the parent or guardian provides the related information. If we learn we have collected personal information online from a child under 13 without verified parental consent, we will delete it. If you believe this has happened, please contact us.

12. Links to Other Websites

The Site may link to third-party websites and services, such as our online booking platform and social media pages. We are not responsible for their privacy practices. Please review the privacy policies of those sites.

13. Users Outside the United States

We are based in Texas and operate in the United States. If you access the Site from outside the United States, your information will be processed and stored in the United States, where data protection laws may differ from those in your country.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on the Site with a new “Last Updated” date and, where required by law, notify you by other means. Your continued use of the Services after the update means you acknowledge the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, or want to exercise your privacy rights, contact us:

Krysus LLC d/b/a Kairos

Attn: Privacy

5522 Lone Star Pkwy, Bldg 3, Suite 302

San Antonio, TX 78253

Phone: Kairos – Alamo Ranch (210) 903-5470, Kairos – Stone Oak (210) 934-8799

Email: [email protected]

Website: www.kairosrelief.com