Privacy Policy

We may collect the following types of information:

• Personal Information: Name, email, phone number, date of birth, and medical history (provided voluntarily via forms or consultations).
• Protected Health Information (PHI): Medical records and treatment details, governed by HIPAA.
• Mobile Information: Phone numbers collected for appointment reminders, updates, holidays and birthday greetings, or promotional purposes.
• Photographic Data: Before-and-after photos (collected only with explicit written consent and anonymized to protect your identity).
• Technical Data: IP address, browser type, and usage data via cookies.

We use your information to:

• Provide medical services, manage appointments, and communicate with you.
• Send appointment reminders, updates, or promotional offers (with your consent).
• Improve our website, services, and patient experience.
• Use anonymized before-and-after photos for educational, marketing, or training purposes (only with your written consent).

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

• Mobile Information: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
• HIPAA Compliance: PHI is only shared:
  • With your written authorization.
  • For treatment, payment, or healthcare operations.
  • As required by law (e.g., public health reporting).
• Service Providers: Third parties must sign Business Associate Agreements (BAAs) to handle PHI under HIPAA.

• Before-and-after photos will only be used with your explicit written consent.
• Photos are anonymized (e.g., faces obscured) to prevent identification.
• You may withdraw consent at any time by contacting info@hairthetics.org

We implement safeguards (e.g., encryption, access controls, secure servers) to protect your data per:

• HIPAA Security Rule
• Florida Information Protection Act (FIPA)
• FTC Safeguards Rule

• HIPAA Rights: Request access to or correction of your personal data.
• Opt-Out: Unsubscribe from marketing communications via the "unsubscribe" link in emails or by contacting us.
• Deletion: Request deletion of non-medical data, subject to legal retention requirements.

Our services are not directed at individuals under 13 years of age (per COPPA). We do not knowingly collect data from minors.

This policy complies with:

• HIPAA: For PHI protection and patient rights.
• TCPA: Prior consent for automated calls/texts.
• CAN-SPAM: Clear opt-out mechanisms in emails.
• FTC Act: Prohibition of deceptive data practices.
• Florida FIPA: Data breach notification and security standards.

Unsubscribe from marketing communications via the "unsubscribe" link in emails or by contacting us.