Privacy Policy and HIPAA Compliance Statement

Alluring Image Medspa ("we," "our," or "us") is dedicated to protecting the privacy and security of our website visitors and patients. This Privacy Policy explains how we collect, use, store, protect, and share your personal information and Protected Health Information (PHI) in strict compliance with the Health Insurance Portability and Accountability Act (HIPAA), the HITECH Act, and other applicable state and federal privacy laws and regulations.

Please read this policy carefully. By accessing our website (https://alluringimagemedspa.com/) or utilizing our services, you agree to the data practices described herein.

1. Compliance with HIPAA and Privacy Regulations As a medical spa providing clinical and aesthetic treatments, we operate in full compliance with U.S. HIPAA regulations regarding Protected Health Information (PHI). Any health-related data, medical histories, treatment records, or consultation information you transmit to us online or provide in-person is treated under the highest standards of medical confidentiality required by law.

2. How Patient Information is Collected We collect information through multiple touchpoints, including:

• Personally Identifiable Information (PII): Name, email address, phone number, and demographic data provided voluntarily via contact forms, newsletter sign-ups, or inquiries.

• Protected Health Information (PHI): Medical histories, skin conditions, current medications, or treatment goals provided when booking clinical evaluations, filling out digital intake forms, or during consultations.

• Technical and Derivative Data: IP addresses, browser types, and tracking cookies used exclusively to optimize website performance and user experience.

3. How Patient Information is Stored and Protected We implement stringent administrative, physical, and technical safeguards to ensure the security of your data:

• Encryption: All electronic data transmissions, including appointment requests and contact form submissions, are protected using secure, industry-standard Secure Socket Layer (SSL/TLS) encryption technology.

• Compliant Storage: All PHI and patient medical data are housed securely within HIPAA-compliant Electronic Medical Record (EMR) software platforms with restricted, role-based access controls.

• Data Safeguards: We perform regular security audits to prevent unauthorized access, disclosure, alteration, or destruction of consumer personal data and medical records.

4. How Information is Shared (and Non-Disclosure) We strictly limit the sharing of your personal and medical data:

• No Sale of Data: We do not sell, trade, rent, or lease your personal information or PHI to third parties for marketing or any other purposes.

• Authorized Disclosures: Your PHI is only disclosed to healthcare professionals directly involved in your continuum of care, or to authorized third-party service providers (such as secure e-prescribing or laboratory partners) bound by strict Business Associate Agreements (BAAs) to maintain HIPAA-level security.

• Marketing and Photos: We will never use your medical information, treatment details, or before-and-after photographs for marketing or social media platforms without your explicit, signed, written authorization.

• Legal Obligations: We may disclose information only when legally compelled to do so by court order, subpoena, or applicable state and federal public health laws.

5. SMS and Text Messaging Privacy Phone numbers collected for text messaging and SMS marketing/reminders, alongside any corresponding user consents, will not be shared with external third parties or affiliates for marketing purposes under any circumstances. Users can opt out at any time by replying "STOP".

6. Your Legal Rights Under HIPAA and federal privacy regulations, you have the right to inspect and receive copies of your medical records, request amendments to inaccurate information, request confidential communications, and request restrictions on how your health data is utilized.

7. Contact Our Privacy Officer For questions regarding this policy, or to exercise your privacy rights, please contact us at:

Alluring Image Medspa

Attn: Privacy Officer

90 SE 4th Ave, Ste 2 Delray Beach, FL 33483

[email protected]

(561) 567-9056