Privacy Policy & HIPAA Notice of Privacy Practices

18402 U.S. Hwy 281 N., Ste 257, San Antonio, TX 78259

Privacy Policy

Last updated: July 31, 2026

Your privacy is important to Glow Skin Lab. This policy explains what information we collect through https://www.glowskinlabsa.com, why we collect it, and how you can exercise your rights regarding that information.

Information We Collect

When you visit our website or interact with us online, we may collect:

  • Information you provide directly, such as your name, email address, phone number, date of birth, or message content when you fill out a contact form, request a consultation, book an appointment, join our membership or text list, or sign up for our mailing list.

  • Technical information collected automatically, such as browser type, device type, pages visited, and referring website, gathered through analytics and tracking tools (for example, Google Analytics, Google Tag Manager, and social media advertising pixels).

  • Payment and transaction information when you purchase products, services, packages, or memberships. Card details are processed by our payment processor and are not stored by us.

  • Information submitted through our online booking system, patient portal, mobile app, intake forms, or consent forms, which is collected and stored in our HIPAA compliant practice management and electronic medical record platform, Zenoti, and is handled under our HIPAA Notice of Privacy Practices below.

How We Use Your Information

We use the information we collect to:

  • Respond to consultation requests, appointment requests, and contact form submissions

  • Schedule appointments and send appointment reminders and confirmations

  • Process payments, memberships, gift cards, and product orders

  • Send promotions, specials, event invitations, and other updates you have signed up to receive

  • Understand how visitors use our website so we can improve it

  • Meet legal and regulatory requirements

We do not sell your personal information, and we do not use or disclose it for targeted advertising or profiling. We share information with third parties only as described in the section below, as required by law, or with your consent.

Third Party Service Providers

We use a small number of trusted vendors to operate our website and our practice. The most significant of these is Zenoti, a secure third party software partner that we use to process online appointments, store electronic medical records including intake forms, clinical notes, and before and after photographs, and handle billing and payments. Any vendor that creates, receives, maintains, or transmits protected health information on our behalf is required to sign a Business Associate Agreement obligating it to safeguard that information under HIPAA.

Our public website is hosted on a general purpose website platform that is not a HIPAA business associate. For that reason, please do not include medical details, treatment history, photographs, or other health information in a website contact form or general email. Use the booking portal, patient portal, or a phone call for anything clinical.

Text Messages and Email

If you provide your mobile number, you may receive appointment reminders, confirmations, and, where you have opted in, promotional messages from us. Message and data rates may apply. You can opt out of promotional text messages at any time by replying STOP, and you can unsubscribe from marketing emails using the link at the bottom of any email. Opting out of marketing does not stop appointment related messages tied to your care.

Photographs and Social Media

Clinical photographs, including before and after images, are treated as protected health information and are covered by our HIPAA Notice below. We will never post, share, or use your photographs for marketing, social media, education, or advertising without your separate written authorization, and you may revoke that authorization at any time by contacting us in writing. Revoking authorization does not undo uses that already occurred, and content already shared publicly may remain in circulation outside our control.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to understand site usage and improve the visitor experience. Where required, we present a consent banner that lets you accept or decline non-essential cookies, including analytics and advertising cookies, before those cookies are loaded. You can also disable cookies through your browser settings, though this may affect some website features. We honor recognized browser based opt out signals, such as Global Privacy Control, where applicable.

We do not place third party advertising or analytics trackers on pages where you log in, complete an intake or consent form, or select and book a specific clinical service. Tracking is limited to our general informational pages.

Your Privacy Rights

Depending on where you live, you may have the right to:

  • Confirm whether we are processing your personal data, and request access to it

  • Correct inaccurate personal data

  • Request deletion of your personal data

  • Receive a copy of your data in a portable format

  • Opt out of the sale of your data, targeted advertising, or profiling (where applicable)

f you are a Texas resident, these rights are provided under the Texas Data Privacy and Security Act. Residents of other states may have comparable rights under their own laws. These rights apply to information collected through our website and marketing. Your medical records and other protected health information are governed by HIPAA and by Texas law, and are addressed in the HIPAA Notice below.

These rights apply to information collected through our website and marketing. Your medical records and other protected health information are governed by HIPAA and by Texas law, and are addressed in the HIPAA Notice below.

To exercise any of these rights, contact us using any method below. We will respond within the timeframe required by applicable law.

Children

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from them. Patients under 18 are treated only with the consent and involvement of a parent or legal guardian.

How to Contact Us

If you have questions about this policy or wish to exercise your privacy rights, please contact us by:

Changes to This Policy

We may update this policy from time to time. The 'last updated' date above reflects the most recent changes. Continued use of our website after changes constitutes acceptance of the updated policy.

HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Glow Skin Lab is required by law to maintain the privacy of your protected health information (PHI), to provide you with this notice describing our privacy practices, and to follow the terms of this notice.

How We May Use and Share Your Health Information

We may use and share your health information to:

  • Provide, coordinate, or manage your treatment and related services

  • Obtain payment for services we provide to you, including billing and any insurance claims

  • Support our healthcare operations, such as quality improvement, chart review, and staff training

  • Comply with legal or regulatory requirements, including reporting adverse events involving medications or devices

  • Contact you about appointment reminders, treatment alternatives, or other health related information

We will not use or share your health information for any other purpose without your written authorization, which you may revoke at any time. Marketing uses, the sale of your health information, and the use of your photographs or treatment results in advertising all require your separate written authorization.

Photographs and Treatment Records

We photograph treatment areas as part of your clinical record to plan care, document results, and support your safety. These images are part of your protected health information and are stored securely. We will not use them for marketing, social media, education, or any purpose outside your care without your written authorization.

How Your Records Are Stored

Your intake forms, clinical consents, treatment history, and before and after photographs are created and stored electronically in Zenoti, our HIPAA compliant electronic medical record and practice management platform, under role based access controls that limit each staff member to the information needed for their role. Intake forms and consents are delivered to you through secure links sent by email or text message from that platform, and completed forms return directly into your chart. We maintain a Business Associate Agreement with Zenoti and with any other vendor that handles your protected health information on our behalf.

Your Rights Regarding Your Health Information

You have the right to:

  • Request to inspect and receive a copy of your health information

  • Request a correction to your health information

  • Request a list of certain disclosures we have made of your health information

  • Request restrictions on certain uses or disclosures. We are not required to agree to every request, but we must agree to a request to withhold information from a health plan when you have paid for that service in full out of pocket

  • Request confidential communications by an alternate method or location

  • Receive a paper copy of this notice upon request

  • File a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

Our Responsibilities

We are required by law to maintain the privacy of your health information, provide you with this notice, abide by its terms, and notify you if a breach occurs that may have compromised your information.

Changes to This Notice

We reserve the right to change this notice and to make the revised notice effective for health information we already have as well as any information we receive in the future. The current notice will always be available on our website and at our office.

Contact Information

If you have questions about this notice or wish to exercise any of your rights, please contact us at: