Privacy Policy

1. Introduction

Glow'd Up Beauty & Esthetics ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this Privacy Policy carefully. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Name, date of birth, and contact information (phone, email, address)
• Medical history, health conditions, medications, and allergies
• Insurance information (if applicable)
• Payment information (credit card numbers, billing address)
• Treatment history and photographs (before/after photos with consent)
• Emergency contact information

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website addresses
• Device information (operating system, device type)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, schedule, and manage your aesthetic treatments
• To communicate with you about appointments, treatments, and follow-ups
• To process payments and manage billing
• To maintain medical records as required by law
• To ensure your safety and provide appropriate medical care
• To send you promotional materials (with your consent)
• To improve our website and services
• To comply with legal obligations and respond to legal requests

4. Health Information Protection (HIPAA)

As a healthcare provider, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA). Your protected health information (PHI) is subject to additional protections under HIPAA. We:

• Maintain the confidentiality of your health information
• Only use and disclose your PHI as permitted by HIPAA
• Provide you with a Notice of Privacy Practices regarding your health information
• Allow you to access, amend, and request restrictions on your health information

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party service providers who assist in operations (payment processing, scheduling software, etc.)
• Legal Requirements: When required by law, court order, or government regulation
• Medical Emergencies: To protect your health and safety in emergency situations
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
• With Your Consent: When you explicitly authorize us to share your information

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of sensitive data in transit and at rest
• Secure storage of medical records
• Access controls and authentication measures
• Regular security assessments and updates
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing communications
• Portability: Request a copy of your data in a portable format

To exercise these rights, please contact us using the information provided below.

8. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings. However, disabling cookies may limit certain website functionalities.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., GlossGenius, Cherry financing). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. Data Retention

We retain your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Medical records are retained as required by state and federal law (typically 7-10 years).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: