Privacy Policy

PRIVACY POLICY & NOTICE OF PRIVACY PRACTICES

Healthy Beginnings Wellness & Esthetics

• (540) 656-2933
• 1185 Armory Dr Suite 200, Fredericksburg, VA 22401, United States
• info@healthybeginningswellness.com
• Working Hours:
  Mon: 9:00 AM – 5:00 PM
  Tue: 8:00 AM – 5:00 PM
  Wed – Thu: 8:00 AM – 7:00 PM
  Fri: 8:00 AM – 5:00 PM
  Sat: 9:00 AM – 1:30 PM
  Sun: By appointment only

Effective Date: Oct 1, 2025
Last Updated: Oct 6, 2025

ABOUT THIS NOTICE

This Privacy Policy and Notice of Privacy Practices describes how Healthy Beginnings Wellness & Esthetics (“we,” “us,” or “our”) collects, uses, and protects your personal information and Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA), California privacy laws including the California Consumer Privacy Act (CCPA), and other applicable regulations.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. INFORMATION WE COLLECT

1.1 Protected Health Information (PHI)

As a medical spa providing aesthetic medical services including injectables, laser treatments, microneedling, and wellness therapies, we collect and maintain PHI, which may include:

• Personal Identifiers: Name, address, phone number, email address, date of birth, Social Security number (when required)

• Medical History: Previous treatments, allergies, medications, medical conditions, health status

• Treatment Records: Services received, clinical notes, treatment plans, progress notes, photographs (before/after), SOAP notes

• Billing Information: Payment details, insurance information (if applicable), transaction history

• Consent Forms: Signed consent forms, intake forms, medical history questionnaires

1.2 Website & Online Information

When you visit our website or use our online booking system, we may collect:

• Browser type and IP address

• Pages visited and time spent on our website

• Booking preferences and appointment history

• Communication preferences

2. HOW WE USE YOUR INFORMATION

2.1 Treatment, Payment, and Healthcare Operations (TPO)

We use and disclose your PHI without your authorization for:

Treatment:
To provide, coordinate, or manage your healthcare services, including:

• Consultations and treatment planning

• Administering injectables, fillers, laser treatments, and microneedling

• Monitoring treatment progress and outcomes

• Coordinating care with other healthcare providers when necessary

Payment:
To obtain payment for services provided, including:

• Billing and collection activities

• Processing credit card or other payment transactions

• Determining eligibility for services

Healthcare Operations:
To support our business operations, including:

• Quality assessment and improvement activities

• Staff training and education

• Business planning and management

• Customer service and appointment scheduling

2.2 Other Permitted Uses

We may use or disclose your PHI without authorization when:

• Required by law

• For public health or safety purposes

• For health oversight and compliance audits

• In response to court orders or subpoenas

• For law enforcement or emergency medical needs

• For workers’ compensation compliance

3. YOUR AUTHORIZATION FOR OTHER USES

Any uses or disclosures of PHI not described in this Notice will only be made with your written authorization, including:

• Marketing communications (except appointment reminders)

• Sale of PHI

• Use of photographs or testimonials for promotional purposes

You may revoke any authorization in writing at any time, except to the extent we have already taken action in reliance on it.

4. YOUR PRIVACY RIGHTS

You have the right to:

• Access your medical records

• Request amendments or corrections

• Request a list of disclosures made

• Request restrictions on disclosures

• Request confidential communications

• Receive a paper copy of this notice

• Be notified in the event of a PHI breach

5. CALIFORNIA PRIVACY RIGHTS (CCPA)

As a California resident, you have additional rights under the CCPA:

• Right to know what data we collect

• Right to request deletion of your data (with exceptions)

• Right to opt out of data sales (we do not sell data)

• Right to non-discrimination for exercising privacy rights

To exercise your California privacy rights:
Email: info@skinsculpt-aesthetics.com
Phone: (540) 656-2933
Mail: 1495 W Shaw Ave. Fresno, CA 93711

6. HOW WE PROTECT YOUR INFORMATION

We maintain strict safeguards to protect PHI:

Technical Safeguards:

• Encrypted data transmission and secure storage

• Access control and authentication systems

• Regular software updates and security audits

Physical Safeguards:

• Restricted facility access

• Locked record storage

• Secure record disposal procedures

Administrative Safeguards:

• Staff HIPAA training

• Confidentiality agreements with all third-party vendors

• Regular compliance reviews and risk assessments

7. DATA RETENTION

We retain your records as required by law:

• Active records are maintained during your patient relationship

• Inactive records are stored for at least seven (7) years

• Minor records are retained until one year after the patient turns 18, but not less than seven (7) years

8. THIRD-PARTY DISCLOSURES

We share PHI only with authorized third parties such as:

• Practice management software providers

• Payment processors

• Medical waste and lab partners

• IT and security vendors

All partners are bound by HIPAA-compliant Business Associate Agreements.

9. MARKETING & COMMUNICATIONS

We may contact you for:

• Appointment reminders or follow-ups

• Treatment updates or educational content

• Promotions for services you have received

Your written consent is required before using your images or testimonials for marketing purposes.

10. WEBSITE & COOKIES

Our website may use cookies to enhance your browsing experience and improve performance. You can manage cookies through your browser settings. We are not responsible for privacy practices on external linked sites.

11. CHILDREN’S PRIVACY

Our services are intended for adults 18 and older. Parental or guardian consent is required for minors, and all records are maintained per state regulations.

12. CHANGES TO THIS NOTICE

We may update this policy as necessary. Updates will be posted on our website and available in-office. You may request a current copy at any time.

13. CONTACT INFORMATION

Healthy Beginnings Wellness & Esthetics

• (540) 656-2933
• 1185 Armory Dr Suite 200, Fredericksburg, VA 22401, United States
• info@healthybeginningswellness.com
• Working Hours:
  Mon: 9:00 AM – 5:00 PM
  Tue: 8:00 AM – 5:00 PM
  Wed – Thu: 8:00 AM – 7:00 PM
  Fri: 8:00 AM – 5:00 PM
  Sat: 9:00 AM – 1:30 PM
  Sun: By appointment only

14. ACKNOWLEDGMENT

By signing our intake or consent forms, you acknowledge that you have reviewed and understand this Privacy Notice. You consent to our use and disclosure of your PHI for treatment, payment, and healthcare operations as described above.

Healthy Beginnings Wellness & Esthetics is committed to maintaining the confidentiality and security of your health information in compliance with all applicable laws and best practices.