Silk & Co Medical Spa (“we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of our clients’ personal and health information. This policy explains how we collect, use, store, and protect your information in compliance with applicable privacy laws, including HIPAA.

Information We Collect

We may collect the following types of information:

• Personal Identifiers: Name, address, phone number, email address, date of birth

• Medical Information: Health history, medications, allergies, treatment records

• Payment Information: Credit/debit card details, billing address

• Marketing Preferences: Consent for promotional communications

How We Use Your Information

Your information may be used for:

• Scheduling and confirming appointments

• Providing medical spa treatments and maintaining treatment records

• Processing payments and invoices

• Communicating treatment updates and aftercare instructions

• Complying with legal, regulatory, and insurance requirements

• Sending promotional materials (only with your consent)

How We Protect Your Information

• All client records are stored securely in password-protected, HIPAA-compliant systems

• Paper files (if any) are kept in locked storage areas

• Only authorized personnel have access to your information

• All staff members are trained in confidentiality and HIPAA compliance

Information Sharing

We do not sell or rent your information. We may share information only when:

• Required by law or court order

• Necessary for insurance claims processing

• Coordinating care with other licensed healthcare providers (with your consent)

• Using secure third-party service providers for scheduling, billing, or marketing

Marketing Communications

We may send you special offers, updates, and event invitations if you opt in. You can withdraw your consent at any time by clicking “unsubscribe” in our emails or contacting us directly.

Your Rights

You have the right to:

• Access and request a copy of your records

• Request corrections to inaccurate information

• Request restrictions on certain uses or disclosures

• Withdraw marketing consent at any time

• File a complaint if you believe your privacy rights have been violated

Policy Updates

We may update this policy from time to time. The latest version will always be posted in our office and on our website.