Vitality Injection Studio Privacy Policy

Effective Date: April 2026 Last Updated: April 2026

Introduction

Welcome to Vitality Injection Studio. We are committed to protecting your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our facility, use our website, or receive our services.

Please read this policy carefully. By using our services, you agree to the terms described herein.

Information We Collect

Personal Information

·       Full name, date of birth, and gender

·       Contact information (address, phone number, email)

·       Emergency contact information

·       Payment and billing information (credit card, insurance details)

Medical & Health Information

·       Medical history and health conditions

·       Current medications and allergies

·       Treatment records and clinical notes

·       Before and after photographs (with consent)

·       Consultation notes and provider assessments

Website & Digital Information

·       IP address and browser type

·       Pages visited and time spent on our website

·       Cookies and tracking data

·       Form submissions and appointment requests

How We Use Your Information

We use your information to:

·       Provide medical and aesthetic services and treatments

·       Schedule and manage appointments

·       Process payments and billing

·       Communicate appointment reminders and follow-up care instructions

·       Comply with legal and regulatory requirements

·       Improve our services and patient experience

·       Send promotional materials (only with your consent)

·       Respond to inquiries and customer service requests

HIPAA Compliance

We are committed to complying with the Health Insurance Portability and Accountability Act (HIPAA). Your Protected Health Information (PHI) will:

·       Only be used or disclosed as permitted by law

·       Be shared with treatment providers involved in your care

·       Be protected through administrative, physical, and technical safeguards

·       Be subject to your rights as a patient, including the right to access and amend your records

For a full description of your HIPAA rights, please request our Notice of Privacy Practices at the front desk or via our website.

How We Share Your Information

We do not sell your personal information. We may share your information with:

Recipient

Purpose

Healthcare providers & staff

Direct treatment and care coordination

Payment processors

Billing and transaction processing

Electronic health record (EHR) systems

Secure record management

Legal authorities

When required by law or court order

Business associates

Under HIPAA-compliant agreements

Marketing platforms

Only with your explicit prior consent

Photographs & Marketing

Before and after photos are the property of Vitality Injection Studio. We will:

·       Never use your photos for marketing without your written consent

·       Store photos securely within your medical record

·       Allow you to withdraw photo consent at any time

Data Security

We implement industry-standard security measures including:

·       Encryption of electronic records and communications

·       Secure servers and firewalls

·       Access controls limiting staff access to your records

·       Regular security audits and staff training

·       Physical security measures at our facility

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Cookies & Website Tracking

Our website may use cookies to:

·       Improve website functionality

·       Analyze website traffic

·       Remember your preferences

You may disable cookies through your browser settings. Some features of our website may not function properly if cookies are disabled.

Your Rights

You have the right to:

·       Access your personal and medical records

·       Request corrections to inaccurate information

·       Request deletion of non-medical personal data (where applicable)

·       Opt out of marketing communications at any time

·       Withdraw consent for photos or optional data use

·       File a complaint with us or the U.S. Department of Health & Human Services (HHS)

Retention of Records

We retain medical records in accordance with applicable state and federal laws, typically for a minimum of 7 years from the date of last treatment (or longer for minors). Non-medical personal data is retained only as long as necessary for the purpose collected.

Children's Privacy

Our services are intended for individuals 18 years of age and older. Minors receiving services must have a parent or legal guardian provide consent. We do not knowingly collect personal information from children under 13 without parental consent.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies independently.

Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be:

·       Posted on our website with an updated effective date

·       Made available at our front desk upon request

·       Communicated to you if materially significant

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact:

Vitality Injection Studio 1507 W Bay Area Blvd, Webster, TX, 77059. 832-298-8365 sydney@rothaesthetic.com

Privacy Officer / Compliance Contact: [Jonathan Tibaldo, ENP-C, FNP-C, Jonathan@rothaesthetic.com