Privacy Policy & HIPAA Notice | Luxe Aesthetic Center

Privacy Policy & Notice of Privacy Practices (HIPAA)

Effective Date: July 04, 2026

This Privacy Policy includes our Notice of Privacy Practices as required under HIPAA. It explains how Luxe Aesthetic Center (“Luxe,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards your personal and health information when you visit our website at https://luxemedspa.net (the “Site”) or receive services at our clinic in Yorba Linda, California. By using our Site or services, you agree to this policy.

1. Information We Collect

1.1 Personal Information

We may collect information you voluntarily provide when you book an appointment, complete a consultation or intake form, contact us, or subscribe to our newsletter, including your name, email address, phone number, date of birth or preferred appointment date, medical history (for treatment planning), billing or payment information, and treatment-related photographs (with your consent).

1.2 Technical & Usage Data

When you use our Site, we may automatically collect your IP address, browser type and version, pages viewed and time spent, referral sources, device type and unique identifiers, and cookie and tracking-pixel data.

1.3 Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and improve our content. You can manage cookies through your browser settings and through the choices described in our Cookies Policy and Opt-Out Preferences page.

2. How We Use Your Information

We use the information we collect to schedule and confirm appointments, provide aesthetic and medical services, respond to inquiries and support requests, send appointment reminders and service updates, improve our website and customer experience, send marketing communications (with your consent), and fulfill legal and regulatory obligations.

3. Sharing Your Information

We do not sell your personal or health information. We may share information with service providers (such as scheduling, payment processing, and secure platforms), healthcare professionals involved in your care, regulatory bodies or legal authorities when required by law, and other third parties only with your explicit consent. All service providers handling Protected Health Information (PHI) operate under HIPAA-compliant agreements.

4. Data Security

We implement appropriate administrative, technical, and physical safeguards to protect your information from unauthorized access, use, or disclosure. While we take reasonable steps to secure your data, no online transmission or storage is 100% secure.

5. Data Retention

We retain your personal and health information only as long as necessary for treatment, business operations, and legal compliance, unless otherwise required by law.

6. Your Rights and Choices

You have the right to opt out of marketing emails via the unsubscribe link, access or correct your personal information, request deletion of your data (subject to legal obligations), and control cookies and online tracking. Where required by law, we honor the Global Privacy Control (GPC) browser signal as a valid opt-out request.

7. Children’s Privacy

Our services are intended for individuals age 18 and older. We do not knowingly collect or store information from children under the age of 13.

8. Third-Party Links

Our Site may contain links to third-party platforms (e.g., Instagram, Yelp, Facebook). We are not responsible for their content or privacy practices and encourage you to review their policies separately.

9. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with the new effective date.

10. Notice of Privacy Practices (HIPAA)

This section outlines how we handle your Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA) and the California Medical Information Act (CMIA). We may collect and use PHI (such as medical history, treatment plans, photos, and treatment records) to provide aesthetic and healthcare services, coordinate or refer care, process payments and insurance claims (if applicable), conduct clinic operations such as quality improvement and recordkeeping, and comply with legal requirements.

We will not share your PHI with unaffiliated third parties without your written authorization, and we will not use your health information for marketing or promotional purposes without your consent.

Your HIPAA Rights

You have the right to request a copy of your health records, request corrections to inaccurate information, request restrictions on certain uses or disclosures, receive a list of disclosures we have made, request that we communicate with you confidentially (e.g., by email only), and file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. Filing a complaint will not affect your care.