Effective July 1, 2026
1. Introduction
Glow Up MD PLLC ("Glow Up MD," "we," "us," or "our") is committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our clinic, use our website (glowupmdspa.com), or interact with us in any way.
As a physician-owned medical practice, we are subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable Texas state law. Our practices governing Protected Health Information (PHI) are described in our separate Notice of Privacy Practices, which you will receive at your first visit.
2. Information We Collect
We may collect the following categories of information:
Personal Identifiers: Full name, date of birth, address, phone number, email address, and emergency contact information.
Health & Medical Information (PHI): Medical history, skin condition details, treatment records, photographs taken for clinical purposes, consent forms, and payment information related to healthcare services.
Website Usage Data: IP address, browser type, pages visited, referring URLs, and cookies. This data is collected through our website and is not linked to your medical record.
Payment Information: Credit/debit card details, which are processed through our secure payment processor and are not stored on our systems.
Communications: Messages you send us via email, phone, text, or contact forms.
3. How We Use Your Information
We use your information for the following purposes:
Treatment: To provide, coordinate, and improve the aesthetic and wellness services you receive at Glow Up MD.
Operations: For scheduling, billing, quality assurance, staff training, and general practice administration.
Communications: To send appointment confirmations, treatment reminders, post-care instructions, and responses to your inquiries.
Marketing (with consent): To send promotional emails, newsletters, or offers. You may opt out at any time by clicking "unsubscribe" or contacting us directly. We will never sell your personal information to third parties for marketing purposes.
Legal Compliance: To comply with applicable federal and Texas state laws and regulations, including HIPAA.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
With Your Consent: When you authorize us to share your information with another healthcare provider or for any other purpose.
Business Associates: With vendors and service providers who assist in our operations (e.g., Zenoti practice management, payment processors) under written Business Associate Agreements that require them to protect your information.
Legal Requirements: When required by law, court order, or governmental authority.
Health Oversight: With regulatory bodies for licensing, auditing, or accreditation purposes.
Emergency Situations: To prevent or lessen a serious and imminent threat to your health or safety.
We do not share your before/after photographs publicly without your explicit written consent.
5. Data Security
We implement industry-standard physical, technical, and administrative safeguards to protect your information, including:
— Encrypted electronic health records via our HIPAA-compliant practice management system (Zenoti) — Restricted staff access to PHI on a need-to-know basis — Secure, password-protected network infrastructure — Staff training on privacy and data security — Physical safeguards at our clinic location
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
6. Your Rights Under HIPAA
As a patient, you have the following rights regarding your Protected Health Information:
Right to Access: Request a copy of your medical records in paper or electronic format.
Right to Amend: Request corrections to inaccurate or incomplete information.
Right to an Accounting of Disclosures: Request a list of instances where we disclosed your PHI other than for treatment, payment, or operations.
Right to Restrict: Request restrictions on how we use or disclose your PHI (we are not always required to agree, but will consider all reasonable requests).
Right to Confidential Communications: Request that we communicate with you in a specific way or at a specific location.
Right to Complain: File a complaint with us or with the U.S. Department of Health & Human Services if you believe your privacy rights have been violated — without fear of retaliation.
To exercise any of these rights, contact us at info@glowupmdspa.com or (832) 947-5826.
7. Website Cookies
Our website uses cookies and similar tracking technologies to improve your browsing experience and analyze site traffic. You may disable cookies through your browser settings; however, some features of the website may not function correctly if cookies are disabled.
We do not use website cookies to track your health information.
8. Children's Privacy
Our services are intended for adults 18 years of age or older. Patients under 18 require written parental or guardian consent prior to any treatment. We do not knowingly collect personal information from minors through our website.
9. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. Your continued use of our services after any changes constitutes your acceptance of the revised policy.
10. Contact Us
For questions, concerns, or to exercise your privacy rights:
Glow Up MD PLLC 1227 Grand West Blvd, Suite B210 Katy, TX 77449 Phone: (832) 947-5826 Email: info@glowupmdspa.com