HIPAA & Health Information Privacy Notice

Our Status Under HIPAA

Bodenvy and its independently owned franchise locations do not bill insurance or government healthcare programs and are therefore not “covered entities” or “business associates” under the Health Insurance Portability and Accountability Act (HIPAA).

Because clients may share health-related information during consultations, we voluntarily follow HIPAA-aligned privacy and security safeguards to protect the information you provide. This Notice explains our privacy practices, your rights, and the limits of our obligations.

Information We Collect

We may collect health-related information you voluntarily provide, including:

• Consultation forms, treatment interests, medical history, or images

• Scheduling, payment, and transaction data

• Notes related to recommendations or candidacy evaluations

• Communication history with Bodenvy team members

• Information provided via phone, SMS, website forms, or in-person conversations

All information is collected directly from you and used only for legitimate operational purposes.

How Your Information Is Used

We use health-related information solely to:

• Confirm candidacy for treatments

• Schedule consultations or services

• Coordinate with licensed providers or medical personnel involved in your care

• Perform quality assurance, customer support, and operational improvements

• Maintain records as required by applicable law

We do not use your health information for insurance, medical claims, or external marketing by third parties.

Disclosure of Information

1. To Licensed Medical Professionals

Information may be shared with Bodenvy-associated physicians, nurse practitioners, or medical staff for evaluation, treatment recommendations, or required documentation.

2. When Required by Law

We may disclose information to comply with:

• Court orders

• Subpoenas

• Health or safety requirements

• Federal or state regulatory inquiries

3. With Your Written Authorization

Any other use or disclosure requires your explicit written authorization, which you may revoke at any time.

4. No Sale of Health Information

We do not sell, rent, or exchange health-related data under any circumstances.

Safeguards & Security Practices

Although not legally obligated under HIPAA, Bodenvy applies industry-standard and HIPAA-aligned measures, including:

• Data encryption in transit and at rest

• Role-based access controls and authentication

• U.S.-based secure servers aligned with HIPAA standards

• Confidentiality and privacy training for staff

• Minimum seven-year record retention

• Continuous monitoring and periodic security reviews

No system is completely immune from unauthorized access, but we apply commercially reasonable safeguards to protect your information.

Your Rights

Subject to certain limitations, you may:

• Request to review your information

• Request corrections for inaccurate information

• Request restrictions on use (where permissible)

• Request a copy of information you provided

Submit requests to jim@bodenvy.com or call 1-800-BODENVY.
Requests may require identity verification for security.

Accessibility, Alternative Formats & Non-Discrimination

You may request this Notice or any health-privacy information in an alternative format or request a reasonable modification to access services.

Bodenvy does not discriminate on the basis of disability, health condition, age, or any protected characteristic.

Requests may be sent to jim@bodenvy.com or 1-800-BEST-BOD.

Limitations, Safe-Harbor Protections & Disclaimer of Duties

Not a Covered Entity

Because Bodenvy is not a HIPAA-covered entity, this Notice does not create HIPAA obligations, warranties, or rights beyond applicable law.

Voluntary Compliance Statement

Any privacy or security practices exceeding legal requirements are provided voluntarily and do not create additional enforceable obligations.

No Medical Advice or Provider Relationship

Information provided by Bodenvy is for wellness and cosmetic treatment purposes only and does not establish a doctor-patient relationship outside of licensed provider consultations.

No Warranty of Perfect Privacy or Security

While Bodenvy employs robust safeguards, we do not guarantee uninterrupted, error-free, or breach-proof systems.

Limitation of Liability

To the fullest extent permitted by law:

• Bodenvy’s total liability for any privacy or data-related claim shall not exceed $100 or the amount paid for services within the previous six months, whichever is greater.

• Bodenvy is not liable for indirect, incidental, special, punitive, or consequential damages.

• Liability does not apply to circumstances beyond Bodenvy’s reasonable control, including cyberattacks, outages, or third-party failures.

Arbitration & Dispute Resolution

All disputes—including those relating to privacy, data handling, or communications—must be resolved by binding individual arbitration in Orange County, Florida, under the Federal Arbitration Act.

Participants waive:

• Jury trial

• Class actions

• Representative or collective proceedings

Independent Franchise Operations

Each Bodenvy location is independently owned and operated. Locations may maintain their own records, policies, or procedures. Bodenvy Franchising LLC is not responsible for privacy practices or incidents arising from independently operated franchise locations.