Privacy Policy

This Privacy Policy explains how Beauty Lab + Laser collects, uses, stores, protects, and discloses information through our website, patient communications, scheduling systems, and clinical operations.

Information We Collect

Beauty Lab + Laser may collect:

• Personal information
• Contact information
• Appointment information
• Payment-related information
• Health history
• Treatment information
• Prescription-related information
• Photographs
• Consent forms
• Communications
• Other information patients provide to us

When information relates to a patient's health care, treatment, payment, or health care operations, it may be considered protected health information under HIPAA and applicable privacy laws.

How We Use Information

Beauty Lab + Laser uses patient information to:

• Schedule and manage appointments
• Provide aesthetic, wellness, and medical services
• Review health history and treatment eligibility
• Document patient care
• Communicate with patients
• Process payments and billing
• Coordinate prescriptions, pharmacy orders, or treatment-related products when clinically appropriate
• Operate and improve our business
• Comply with legal, regulatory, licensing, and professional obligations

Beauty Lab + Laser does not sell protected health information.

Protected Health Information and HIPAA

Beauty Lab + Laser maintains protected health information in accordance with applicable federal and state privacy requirements, including HIPAA where applicable.

Beauty Lab + Laser uses Decoda Health as its HIPAA-compliant electronic medical record system. Patient records are stored and managed through Decoda Health and/or other secure systems used for patient care, scheduling, billing, communication, and business operations.

Access to protected health information is limited to authorized personnel who need access to perform their job duties. Beauty Lab + Laser maintains administrative, technical, and physical safeguards designed to protect patient information from unauthorized access, use, disclosure, alteration, or destruction.

Uses and Disclosures of Protected Health Information

Beauty Lab + Laser may use or disclose protected health information as permitted or required by law, including for:

• Treatment and care coordination
• Payment and billing
• Health care operations
• Prescription or pharmacy coordination
• Compliance, audits, and quality assurance
• Legal or regulatory requirements
• Public health or safety obligations
• Patient-authorized disclosures

When required, Beauty Lab + Laser obtains patient authorization before using or disclosing protected health information for purposes not otherwise permitted by law.

Third-Party Service Providers

Beauty Lab + Laser may work with third-party service providers that support our operations, including electronic medical record systems, scheduling platforms, payment processors, pharmacies, communication tools, website hosting providers, analytics providers, and other vendors.

When a third-party service provider may access protected health information, Beauty Lab + Laser uses vendors that are expected to maintain appropriate privacy and security protections, including business associate agreements where required by HIPAA.

Website Information

When users visit our website, we may collect limited technical information such as browser type, device information, pages visited, general location information, referral source, and website usage activity. This information may be used to maintain website functionality, improve the user experience, understand site performance, and support marketing or analytics activities.

Website forms should not be used to submit urgent medical concerns. Patients should contact Beauty Lab + Laser directly for clinical questions or urgent needs.

Free Skin Analysis and AI Service Chat

Beauty Lab + Laser offers free skin analysis and AI service chat tools for educational guidance and service suggestions. These tools do not store personal information unless a customer chooses to provide contact details, such as an email address or phone number, so that Beauty Lab + Laser can follow up or send requested results.

Photos submitted for the free skin analysis are sent securely for analysis and are not stored by this site. Customers should avoid sharing sensitive medical information, emergency concerns, or information they do not want included in their message to Beauty Lab + Laser through the AI service chat.

Patient Rights

Patients may have rights under applicable privacy laws, including the right to:

• Request access to their records
• Request corrections to their records
• Request restrictions on certain uses or disclosures
• Request confidential communications
• Request an accounting of certain disclosures
• Receive a copy of applicable privacy notices
• File a privacy-related complaint

Requests may be submitted using the contact information below. Beauty Lab + Laser will respond to patient requests in accordance with applicable law.

Record Retention

Beauty Lab + Laser retains patient records and protected health information for at least the period required by applicable federal and Utah medical record retention requirements. In general, records are retained for a minimum of seven years after the last date of patient care, and records for minors are retained for the legally required period applicable to minor patients.

Records may be retained longer when necessary for legal, regulatory, billing, continuity-of-care, compliance, or business purposes. When records are eligible for disposal, they are disposed of in a manner designed to protect patient privacy and confidentiality.

Security Safeguards

Beauty Lab + Laser uses administrative, technical, and physical safeguards designed to protect personal information and protected health information. These safeguards may include access controls, secure electronic systems, staff training, password protections, vendor oversight, secure record storage, and policies limiting access to patient information.

No electronic system or method of transmission is completely secure. However, Beauty Lab + Laser takes privacy and security seriously and works to protect patient information using reasonable and appropriate safeguards.

Payments

Beauty Lab + Laser may collect payment information for services, products, or deposits. Payment information may be processed through third-party payment processors. Beauty Lab + Laser does not intentionally store full payment card information outside secure payment processing systems.

Communications

Beauty Lab + Laser may communicate with patients by phone, text message, email, patient portal, or other communication methods. Some communication methods may not be fully secure. Patients may request alternative communication methods by contacting Beauty Lab + Laser.

Children's Privacy

Beauty Lab + Laser does not knowingly collect information from children through the website without appropriate consent. Medical records for minor patients are maintained in accordance with applicable legal requirements.

Compliance With Applicable Laws

Beauty Lab + Laser is committed to operating in compliance with applicable federal and state privacy laws and regulations, including requirements related to protected health information. We maintain privacy practices, secure record systems, vendor safeguards, and internal procedures designed to protect patient information and support compliance with applicable legal and regulatory obligations.

Changes to This Privacy Policy

Beauty Lab + Laser may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

Contact Information

For questions about this Privacy Policy, protected health information, or privacy-related requests, please contact: