Privacy Policy

THE GLOTOX SUITE™, a brand of Lyles Professional Medical Corporation ("we," "us," "our," or "the Practice"), is committed to protecting the privacy and security of our clients, website visitors, and prospective clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit this website, complete forms, book or receive aesthetic services, or communicate with us.

By using our website or services, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.

We collect the following types of information:

1.1 Information You Provide Directly

• Full name, email address, phone number, and mailing or service address
• Date of birth and gender
• Health history, medications, allergies, aesthetic concerns, and treatment goals shared through intake and consent forms
• Treatment records, treatment notes, and before and after photographs you consent to have taken
• Emergency contact information
• Primary care provider information
• Payment information (processed securely through our booking and payment platform; we do not store credit card numbers)
• Communications you send us via email, text, contact forms, or our client portal

1.2 Information Collected Automatically

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Referring website or source
• Cookies and similar tracking technologies

1.3 Information from Third Parties

• Information from our electronic medical record and charting platform used to document consultations and treatments
• Information from our online booking and payment platform when you schedule or pay for a service
• Information from our Medical Director or other licensed physicians who review your history and order treatment protocols
• Information from healthcare providers you authorize us to contact

We use your information for the following purposes:

• To provide aesthetic consultations and treatments, including IV hydration therapy, vitamin injections, neurotoxin injections, dermal and lip filler, and chemical peels
• To schedule appointments and conduct virtual consultations
• To obtain medical clearance and physician-cleared treatment protocols prior to treatment
• To document treatment, obtain informed consent, and monitor your results and safety
• To process payments and maintain billing records
• To communicate with you about appointments, aftercare, and service updates
• To send educational materials, promotions, and newsletters (with your consent)
• To respond to your inquiries and provide client support
• To comply with legal obligations and professional regulatory requirements
• To improve our website and services
• To protect the security and integrity of our systems

Lyles Professional Medical Corporation complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. We maintain a separate Notice of Privacy Practices that describes in detail how we protect your Protected Health Information (PHI) and your rights regarding that information.

You will receive a copy of our Notice of Privacy Practices before we begin providing services. A copy is also available upon request by contacting us at Nicole@LylesHealth.com.

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

4.1 With Your Authorization

• With our Medical Director or other licensed physicians who provide medical clearance and order treatment protocols on your behalf
• With pharmacies or suppliers as needed to obtain products used in your treatment
• With any other party you specifically authorize in writing, including the use of before and after photographs

4.2 With Service Providers

• Payment processing platforms
• Electronic medical record, charting, and consent platforms
• Online booking and scheduling platforms
• HIPAA compliant email and communication services
• HIPAA compliant telehealth video platforms
• Cloud hosting providers (HIPAA eligible services)

All service providers that handle Protected Health Information have signed Business Associate Agreements (BAAs) with us and are contractually required to protect your information.

4.3 Legal Requirements

We may disclose information when required by law, such as in response to subpoenas, court orders, or legal process, or to protect our rights, property, or safety, or the rights, property, or safety of others.

4.4 Business Transfers

If Lyles Professional Medical Corporation is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest (AES-256)
• Secure password protection and two-factor authentication
• Regular security audits and monitoring
• Access controls limiting who can view your information
• Signed Business Associate Agreements with all third-party service providers handling PHI
• Automated backups with secure storage
• Staff training on privacy and security practices

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6.1 Access and Review. You may request a copy of the personal information we maintain about you.

6.2 Correction. You may request that we correct inaccurate or incomplete information.

6.3 Deletion. You may request deletion of your information, subject to our legal and professional obligations to retain certain records.

6.4 Communication Preferences. You may opt out of marketing emails by clicking the unsubscribe link in any marketing email. Transactional and clinical communications, such as appointment reminders, consent forms, and aftercare instructions, are not subject to opt-out while you are an active client.

6.5 SMS Text Messages. You may opt out of SMS messages at any time by replying STOP to any message you receive.

6.6 Photographs. Before and after photographs are taken only with your written consent and are never used for marketing without a separate, specific authorization that you may revoke at any time.

6.7 Cookies. You can set your browser to refuse cookies or alert you when cookies are being sent. Some portions of our website may not function properly without cookies.

To exercise any of these rights, please contact us at Nicole@LylesHealth.com.

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete that information. If you believe a child has provided us with information, please contact us immediately at Nicole@LylesHealth.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we hold about you
• The right to opt out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit the use of sensitive personal information

California residents may also designate an authorized agent to make requests on their behalf. To exercise these rights, contact us at Nicole@LylesHealth.com.

Virtual consultations are provided in accordance with California Business and Professions Code Section 2290.5. Before receiving a virtual consultation, you will provide informed consent acknowledging the nature, potential benefits, and limitations of telehealth. All virtual sessions are conducted using HIPAA compliant, secure video platforms.

We retain your information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Client treatment records are retained for a minimum of seven (7) years following the end of the professional relationship, consistent with California record retention requirements for Registered Nurses.

Website analytics and marketing data may be retained for shorter periods in accordance with our data retention schedule.

Our website may contain links to third-party websites or services, including our online booking platform. This Privacy Policy does not apply to those third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

Our services are intended for residents of California, United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will provide additional notice, such as an email notification. We encourage you to review this Privacy Policy periodically.

THE GLOTOX SUITE™ provides aesthetic and wellness treatments within the scope of California Registered Nursing practice (Business and Professions Code Section 2725). All treatments are cleared by our Medical Director following medical clearance and are administered by a licensed Registered Nurse. We do not diagnose or independently prescribe. Clients are advised to maintain a relationship with a licensed primary care provider for all medical needs.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

THE GLOTOX SUITE™, a Lyles Professional Medical Corporation brand

Email: Nicole@LylesHealth.com

Website: www.LylesHealth.com

For HIPAA related questions or to request a copy of our Notice of Privacy Practices, please contact us at the email address above.