1. Overview & Scope
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you:
• Visit or use our Sites, funnels, or landing pages (including those hosted on GHL);
• Book or attend an in-person or virtual consultation;
• Communicate with us by phone, SMS/MMS, email, or social media; and
• Receive services at our clinic(s).
When you become our patient, certain information is protected by the Health Insurance Portability and Accountability Act ("HIPAA"). Our HIPAA Notice of Privacy Practices governs how we use and disclose your Protected Health Information ("PHI").
We currently operate in Alabama and Florida. If you access our Sites from outside those states, you do so at your own risk and are responsible for compliance with local laws.
2. Information We Collect
2.1 Information You Provide
• Contact & Account Data: name, address, email, phone number, preferred contact method.
• Health & Treatment Information: medical history, concerns, treatment goals, forms you complete, photos or documents you upload, treatment preferences.
• Payment Information: credit or debit card details processed by third-party payment processors.
• Marketing Preferences: opt-ins/opt-outs for SMS, email, or other marketing.
2.2 Information Collected Automatically
• Device & Usage Data: IP address, browser type, device type, operating system, pages viewed, time on page, clicks, referring/exit pages.
• Cookies & Similar Tech: pixels, tags, SDKs, analytics (e.g., Google Analytics), advertising/retargeting (e.g., Meta Pixel). You can manage cookies in your browser settings or via industry tools (e.g., optout.aboutads.info).
2.3 Information From Third Parties
We may receive information from advertising networks, analytics providers, social media platforms, lead vendors, or referral partners to measure campaign performance or improve services.
3. How We Use Information
3.1 For Treatment & Operations (HIPAA/PHI)
• Provide or coordinate care;
• Contact you about appointments, test results, and treatment follow-ups;
• Conduct quality assessment, staff training, compliance, and safety activities;
• Fulfill legal and regulatory obligations (e.g., public health reporting).
3.2 For Business & Website Purposes (Non‑PHI)
• Respond to inquiries and provide requested information;
• Send transactional communications (confirmations, reminders, follow-ups);
• Send marketing communications only if you have opted in (offers, new services);
• Analyze and improve the Sites, marketing campaigns, and user experience;
• Protect against fraud and enforce our Terms of Service.
We do not sell your PHI. We also do not "sell" personal information as defined by certain state privacy laws. If future laws define "share" or "sell" differently, we will update this Policy accordingly.
4. How We Share Information
We may disclose information to:
• Service Providers & Business Associates: hosting, SMS/email vendors, EHR/telehealth platforms, analytics, payment processors, schedulers—subject to appropriate contracts and, where applicable, Business Associate Agreements (BAAs).
• Healthcare Partners: labs, pharmacies, specialists, or supervising physicians, as allowed by HIPAA.
• Law Enforcement/Regulators: when required or permitted by law.
• Successors/Assignees: in a merger, acquisition, asset sale, or similar transaction subject to this Policy or one equally protective.
5. Your Choices & Rights
5.1 SMS/Email
• SMS: Reply STOP to any text to opt out. Reply HELP for help. Msg & data rates may apply.
• Email: Use the unsubscribe link in marketing emails. Transactional emails may still be sent where permitted.
5.2 Cookies/Tracking
Use browser/device settings or industry tools to block or delete cookies or limit targeted ads (e.g., Network Advertising Initiative opt‑out). Some features may not function properly without cookies.
5.3 HIPAA Rights (PHI)
You may request to:
• Access or receive a copy of your record;
• Request corrections;
• Restrict certain disclosures;
• Receive confidential communications;
• Request an accounting of disclosures;
• Get a paper copy of our HIPAA Notice.Submit requests using the contact details in Section 12.
5.4 State Privacy Rights
You may have additional rights under your state’s privacy laws (e.g., right to know, delete, or correct). Contact us to exercise these rights.
6. Data Security & Retention
We use administrative, technical, and physical safeguards to protect information. However, no system is 100% secure. We retain information as long as necessary for treatment, legal, accounting, or business purposes, or as otherwise required by law.
7. Children’s Privacy
Our Sites are intended for adults. We do not knowingly collect information from children under 13 without verified parental consent. If you believe a child has provided us information, contact us and we will delete it where required by law.
8. Third‑Party Links & Tools
The Sites may link to third-party websites or include third-party features (e.g., Google Maps). We are not responsible for their privacy practices. Review their policies before using those services.
9. International Visitors
We operate in the United States. If you access the Sites from outside the U.S., you consent to the transfer and processing of your information in the U.S., which may have different data protection laws than your country.
10. Do Not Track
Our Sites currently do not respond to browser "Do Not Track" signals. You can use other mechanisms (cookies settings, ad opt-out tools) to control tracking.
11. Changes to This Policy
We may update this Policy periodically. The Effective Date above reflects the latest revision. Material changes will be posted on this page or otherwise communicated. Your continued use of the Sites or Services after changes means you accept the updated Policy.
12. Contact Us (Privacy or HIPAA Questions)
Privacy Officer – Elite Body Solutions LLC
Address: 5211 Skiff Ln, Gulf Shores, Alabama 36542
Phone: 251-351-4664
Email: [email protected]
For SMS help, reply HELP to any message or call 251-351-4664. To opt out of SMS, reply STOP.