PRIVACY POLICY

PRIVACY POLICY

Effective date: January 1, 2026
Business: INJX by Nat Aesthetics (“INJX,” “we,” “us,” or “our”)
Website: https://www.injxbynat.com
Contact: injxbynat@gmail.com

​

1) Scope

This Privacy Policy explains what information we collect, how we collect it, how we use and share it, and your choices. It applies to our website, online forms, scheduling tools, in-office intake, and SMS communications.

 

If you are a patient, some information we handle may be Protected Health Information (PHI) under HIPAA. See “HIPAA Notice of Privacy Practices” below.

​

2) What we collect

Information you provide directly

• Contact & identifiers: name, email, phone number, mailing address, social handles.

• Appointment & account data: preferred location, dates/times, treatment interests.

• Payment details: limited billing information (processed by our PCI-compliant processor).

• Health information (PHI): medical history, treatment history, photos you upload or share, and forms completed in connection with care.

• SMS consent preferences: your opt-in/opt-out choices.

 

Information collected automatically

• Usage & device data: IP address, browser type, pages viewed, referring/exit pages, timestamps, approximate location, and similar analytics (via cookies, pixels, and tags).

• Scheduling/Forms tools: metadata from embedded services we use to run our site and bookings.

 

Information from third parties

• Vendors & platforms: we may receive limited data from scheduling, payment, communications, or analytics partners to operate the service (see “How we share”).

 

3) How we use information

We use information to:

• Provide services: schedule visits, deliver care, send appointment reminders, and manage your account.

• Communicate: respond to inquiries, send transactional messages (e.g., confirmations, reminders), and send marketing messages if you opt in.

• Improve and secure our services: analytics, troubleshooting, and fraud prevention.

• Comply with law: legal, regulatory, and safety obligations.

 

We do not sell personal information.

 

4) How we share information

We share information only as needed to operate our practice:

• Service providers/“business associates”: scheduling, EHR, payments, secure messaging, marketing platforms, cloud hosting, and analytics. Where PHI is involved, we use vendors that agree to safeguard it and, where required, sign a Business Associate Agreement (BAA).

• Legal & safety: to comply with law, respond to lawful requests, protect rights and safety.

 

SMS and phone numbers: Your SMS consent and phone number are not shared with third parties or affiliates for their marketing or promotional purposes. We do not sell, rent, or share mobile numbers for such uses.

 

5) SMS disclosures (TCR-compliant)

By consenting to receive SMS from INJX by Nat Aesthetics, you agree to receive [appointment reminders, scheduling updates, and optional marketing messages] via text.

• Reply STOP to opt out; reply HELP for help.

• Message & data rates may apply.

• Messaging frequency may vary.

• SMS consent is not a condition of purchase or treatment.

 

No sharing: SMS consent and phone numbers are not shared with third parties or affiliates, except vendors we use solely to send and manage our messages on our behalf.

 

6) Cookies & analytics

We use cookies and similar technologies for site functionality and analytics. You can control cookies through your browser settings. Some features may not work without them.

 

7) Your choices

• SMS: Reply STOP to any text to opt out.

• Email: Use unsubscribe links in marketing emails.

• PHI: See the HIPAA section below for rights regarding your medical information.

• Cookies/Tracking: Adjust browser or device settings.

 

8) Data security

We use administrative, technical, and physical safeguards designed to protect personal information and PHI, including encryption in transit, access controls, and staff training. No system is 100% secure; please use caution when sharing information online.

 

9) Data retention

We retain information as needed to provide services, meet legal obligations, resolve disputes, and maintain business records. Medical records are retained in accordance with HIPAA and applicable state laws.

 

10) Children’s privacy

Our services are for adults. We do not knowingly collect personal information from children under 13 without parental consent consistent with applicable law.

 

11) HIPAA Notice of Privacy Practices

When we provide clinical services, your information may be PHI governed by HIPAA. Our Notice of Privacy Practicesexplains how we use and disclose PHI, your rights (access, amendment, restrictions, confidential communications), and how to exercise them. You may request a copy at our office.

 

12) Changes to this Policy

We may update this Policy. Material changes will be posted with a new “Effective date.”

 

13) Contact us

Questions or requests about privacy, SMS, or PHI rights:
INJX by Nat Aesthetics
injxbynat@gmail.com