Privacy Policy

1. Overview & Scope

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you:

• Visit or use our Sites, funnels, or landing pages (including those hosted on GHL);

• Book or attend an in-person or virtual consultation;

• Communicate with us by phone, SMS/MMS, email, or social media; and

• Receive services at our clinic(s).

When you become our patient, certain information is protected by the Health Insurance Portability and Accountability Act ("HIPAA"). Our HIPAA Notice of Privacy Practices governs how we use and disclose your Protected Health Information ("PHI").

We currently operate in Utah. If you access our Sites from outside those states, you do so at your own risk and are responsible for compliance with local laws.

2. Information We Collect

2.1 Information You Provide

• Contact & Account Data: name, address, email, phone number, preferred contact method.

• Health & Treatment Information: medical history, concerns, treatment goals, forms you complete, photos or documents you upload, treatment preferences.

• Payment Information: credit or debit card details processed by third-party payment processors.

• Marketing Preferences: opt-ins/opt-outs for SMS, email, or other marketing.

2.2 Information Collected Automatically

• Device & Usage Data: IP address, browser type, device type, operating system, pages viewed, time on page, clicks, referring/exit pages.

• Cookies & Similar Tech: pixels, tags, SDKs, analytics (e.g., Google Analytics), advertising/retargeting (e.g., Meta Pixel). You can manage cookies in your browser settings or via industry tools (e.g., optout.aboutads.info).

2.3 Information From Third Parties

We may receive information from advertising networks, analytics providers, social media platforms, referral partners, or other sources when you interact with our advertisements, website, forms, or services. We do not use purchased, rented, or third-party lead lists for SMS opt-ins.

3. How We Use Information

3.1 For Treatment & Operations (HIPAA/PHI)

• Provide or coordinate care;

• Contact you about appointments, test results, and treatment follow-ups;

• Conduct quality assessment, staff training, compliance, and safety activities;

• Fulfill legal and regulatory obligations (e.g., public health reporting).

3.2 For Business & Website Purposes (Non‑PHI)

• Respond to inquiries and provide requested information;

• Send transactional communications (confirmations, reminders, follow-ups);

• Send marketing communications only if you have opted in (offers, new services);

• Analyze and improve the Sites, marketing campaigns, and user experience;

• Protect against fraud and enforce our Terms of Service.

We do not sell your PHI. We also do not "sell" personal information as defined by certain state privacy laws. If future laws define "share" or "sell" differently, we will update this Policy accordingly.

4. How We Share Information

We may disclose information to:

• Service Providers & Business Associates: hosting, SMS/email vendors, EHR/telehealth platforms, analytics, payment processors, schedulers—subject to appropriate contracts and, where applicable, Business Associate Agreements (BAAs).

• Healthcare Partners: labs, pharmacies, specialists, or supervising physicians, as allowed by HIPAA.

• Law Enforcement/Regulators: when required or permitted by law.

• Successors/Assignees: in a merger, acquisition, asset sale, or similar transaction subject to this Policy or one equally protective.

5. Your Choices & Rights

5.1 SMS/Email

SMS/Text Messaging Program. If you opt in to receive SMS/text messages from Aloe Urgent Care PLLC, we may send recurring informational, transactional, and promotional text messages to the mobile phone number you provide. Messages may include appointment confirmations, appointment reminders, requested follow-up, responses to inquiries, service-related updates, account or administrative notifications, and customer support messages.

How Users Opt In. Users may opt in to receive SMS/text messages by submitting a website form, landing page form, intake form, appointment request form, chat widget, or other approved opt-in method where SMS consent language is displayed. SMS consent is collected separately from general contact information and, where applicable, promotional SMS consent is optional and not required as a condition of purchase or receiving services.

Message Frequency. Message frequency varies based on your interaction with us, appointment activity, and the type of communications you have requested or agreed to receive. Recurring messages may be sent.

Opt-Out and Help Instructions. You may opt out of SMS/text messages at any time by replying STOP to any text message. For help, reply HELP or contact us at 435-900-7750. Message and data rates may apply.

No Sharing of SMS Opt-In Information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators, carriers, and service providers necessary to support the delivery of text messaging services. Information sharing to subcontractors in support services, such as customer service, is permitted.

Email. You may unsubscribe from marketing emails by using the unsubscribe link in the email. Transactional or administrative emails may still be sent where permitted by law.

5.2 Cookies/Tracking

Use browser/device settings or industry tools to block or delete cookies or limit targeted ads (e.g., Network Advertising Initiative opt‑out). Some features may not function properly without cookies.

5.3 HIPAA Rights (PHI)

You may request to:

• Access or receive a copy of your record;

• Request corrections;

• Restrict certain disclosures;

• Receive confidential communications;

• Request an accounting of disclosures;

• Get a paper copy of our HIPAA Notice.Submit requests using the contact details in Section 13.

5.4 State Privacy Rights

You may have additional rights under your state’s privacy laws (e.g., right to know, delete, or correct). Contact us to exercise these rights.

6. Health-Related Information (Including Stem Cell / WJ‑MSC Inquiries)

If you contact us or submit a form requesting information about hair restoration services (including WJ‑MSC / “stem cell” procedures), you may choose to provide information that could relate to your health or treatment interests. We use that information to respond to your inquiry, schedule consultations, and provide the information you request. Please avoid submitting highly sensitive medical information through unsecured web forms or standard SMS text messaging. For questions about secure communications, contact us.

7. Data Security & Retention

We use administrative, technical, and physical safeguards to protect information. However, no system is 100% secure. We retain information as long as necessary for treatment, legal, accounting, or business purposes, or as otherwise required by law.

8. Children’s Privacy

Our Sites are intended for adults. We do not knowingly collect information from children under 13 without verified parental consent. If you believe a child has provided us information, contact us and we will delete it where required by law.

9. Third‑Party Links & Tools

The Sites may link to third-party websites or include third-party features (e.g., Google Maps). We are not responsible for their privacy practices. Review their policies before using those services.

10. International Visitors

We operate in the United States. If you access the Sites from outside the U.S., you consent to the transfer and processing of your information in the U.S., which may have different data protection laws than your country.

11. Do Not Track

Our Sites currently do not respond to browser "Do Not Track" signals. You can use other mechanisms (cookies settings, ad opt-out tools) to control tracking.

12. Changes to This Policy

We may update this Policy periodically. The Effective Date above reflects the latest revision. Material changes will be posted on this page or otherwise communicated. Your continued use of the Sites or Services after changes means you accept the updated Policy.

13. Contact Us (Privacy or HIPAA Questions)

Privacy Officer – Aloe Urgent Care PLLC

Address: 1001 W CURLY HOLLOW UNIT 55, ST GEORGE, UT 84770

Phone: 435-900-7750

Email: [email protected]

For SMS help, reply HELP to any message or call 435-900-7750. To opt out of SMS, reply STOP.