Privacy Policy

1. Introduction

Tulip Advanced Aesthetic & Medical ("Tulip," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.tulipmd.com, contact us by phone or email, or receive services at our Los Angeles medical spa.

Because we provide aesthetic and medical services, some of the personal information we handle may constitute protected health information (PHI) under applicable federal and California law, including the Health Insurance Portability and Accountability Act (HIPAA) and the California Confidentiality of Medical Information Act (CMIA). Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide Directly

We may collect the following categories of personal information when you interact with us:

• Identifying information: full name, date of birth, and gender
• Contact information: phone number, email address, and mailing address
• Medical and health information: medical history, current medications, allergies, health conditions, and treatment records
• Before-and-after photographs taken in connection with your treatments (collected with your explicit consent)
• Payment and billing information, processed securely through third-party payment processors
• Appointment and scheduling details submitted via our website contact form, phone, or email
• Communications you send us, including questions, feedback, and service inquiries

2.2 Information Collected Automatically

When you visit www.tulipmd.com, we or our service providers may automatically collect certain technical information, including:

• IP address and general geographic location
• Browser type, operating system, and device information
• Pages visited, time spent on pages, and referring URLs
• Data collected via cookies and similar tracking technologies (see Section 7 for details)

2.3 Information From Third Parties

We may receive information about you from third-party sources such as scheduling platforms, payment processors, or review sites through which you interact with our practice. All such information is handled in accordance with this Privacy Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, coordinate, and manage the aesthetic and medical services you request
• To schedule, confirm, send reminders for, and follow up on appointments
• To process payments and maintain accurate billing records
• To communicate with you about your treatments, results, and aftercare instructions
• To respond to your inquiries, questions, and requests
• To comply with applicable legal and regulatory obligations, including HIPAA and California law
• To improve our website, services, and overall patient experience
• To send promotional communications about our services where you have given consent or as permitted by law (you may opt out at any time)
• To protect the safety, security, and integrity of our practice, staff, and clients

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following limited circumstances:

4.1 Healthcare Operations and Treatment

We may share your protected health information with other healthcare providers involved in your care, as permitted or required by HIPAA, for purposes of treatment, payment, and healthcare operations.

4.2 Service Providers and Business Associates

We may share your information with trusted third-party vendors and service providers who assist us in operating our business, including:

• Electronic health record (EHR) and practice management platforms
• Appointment scheduling and reminder services
• Secure payment processors
• IT support and cybersecurity providers
• Marketing and email communication platforms (non-PHI only)

All service providers who handle PHI are required to sign a HIPAA Business Associate Agreement (BAA) and are contractually obligated to safeguard your information.

4.3 Legal Requirements

We may disclose your information when required by law, court order, subpoena, or other legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of Tulip, our clients, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our practice, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on our website.

4.5 With Your Consent

We may share your information for any other purpose with your prior written consent.

5. HIPAA & Protection of Medical Information

As a medical spa providing treatments under the supervision of licensed medical professionals, Tulip Advanced Aesthetic & Medical is committed to compliance with HIPAA and the California Confidentiality of Medical Information Act (CMIA). Your protected health information (PHI) is:

• Accessible only to authorized staff and providers directly involved in your care
• Stored in secure, access-controlled systems
• Transmitted only via encrypted or otherwise secure channels
• Never sold to third parties under any circumstances

You have the right to receive a separate Notice of Privacy Practices (NPP) that further details how we use and disclose your PHI. A copy is available upon request at our office or by contacting us at medspa@tulipmd.com.

6. Your Privacy Rights

6.1 California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, and share
• The right to request deletion of personal information we hold about you, subject to certain legal exceptions
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising any of your privacy rights

To exercise any of these rights, please contact us using the information in Section 13. We will respond to verified requests within 45 days as required by law.

6.2 HIPAA Patient Rights

With respect to your protected health information, you also have the right to:

• Access and obtain a copy of your medical records
• Request amendments or corrections to your records
• Receive an accounting of disclosures of your PHI
• Request restrictions on certain uses and disclosures of your PHI
• Request that we communicate with you via confidential means

To exercise your HIPAA rights, please contact us directly at (424) 468-7065 or medspa@tulipmd.com.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytics data. The types of cookies we may use include:

• Essential cookies: required for the website to function properly
• Analytics cookies: help us understand how visitors interact with our site (e.g., Google Analytics)
• Marketing cookies: used to deliver relevant content and measure the effectiveness of our promotions

You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit www.allaboutcookies.org.

8. Data Security

We implement a variety of administrative, technical, and physical safeguards to protect your personal and medical information, including:

• Encrypted data storage and secure transmission protocols (SSL/TLS)
• Role-based access controls that limit data access to authorized personnel only
• Regular security assessments and ongoing staff training
• Secure disposal procedures for records no longer needed

While we employ industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information to the best of our ability and will notify you of any breach as required by applicable law.

9. Data Retention

We retain personal and medical information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with California law, which generally requires a minimum retention period of ten (10) years from the date of service, or seven (7) years after a minor patient reaches the age of majority, whichever is longer.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors without verified parental or guardian consent. If you believe we have inadvertently collected information from a minor, please contact us immediately at medspa@tulipmd.com and we will take prompt steps to delete such information.

11. Third-Party Links

Our website may contain links to third-party websites or services that are not owned or controlled by Tulip Advanced Aesthetic & Medical. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently. This Privacy Policy applies solely to information collected by our practice.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify you by email or a prominent notice on our website. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to reach out:

Tulip Advanced Aesthetic & Medical
11600 Wilshire Blvd, Suite 516
Los Angeles, CA 90025
Phone: (424) 468-7065
Email: medspa@tulipmd.com
Website: www.tulipmd.com

We are committed to addressing your concerns promptly and transparently.