Privacy Policy

1. Introduction

Better Off Med Spa ("Better Off," "we," "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you visit our website, book services, or receive care at our Encinitas clinic. When you receive healthcare services from us, certain information about you is protected health information (PHI) subject to federal and California health privacy laws, including HIPAA. Our Notice of Privacy Practices describes those protections in detail and is available at our clinic and on request.

2. Information We Collect

• Identity and contact details: name, phone, email, date of birth, address.
• Health information: medical history, medications, lab results, treatment notes, and other information you share during consultations and care. This is PHI when it relates to your healthcare.
• Payment information: billing details processed securely by our payment processor (Stripe). We do not store full card numbers on our website.
• Website usage data: pages visited, device and browser information, and cookies/analytics that help us improve the site.
• Communications: messages you send through forms, email, text, or phone.

3. How We Use Your Information

• To provide and coordinate your medical care, including consultations, prescriptions, lab orders, and follow-ups.
• To schedule appointments and send reminders.
• To process payments for services and products.
• To respond to your questions and requests.
• To send promotional offers and updates, only with your consent (you may opt out at any time).
• To meet legal, regulatory, and medical recordkeeping obligations.

4. Your Health Information and HIPAA

As a healthcare provider, we treat the privacy of your medical information seriously. PHI is used and disclosed only for treatment, payment, and healthcare operations, or as otherwise permitted or required by law. We maintain administrative, technical, and physical safeguards to protect it, and we require the vendors who handle PHI on our behalf (such as labs, pharmacies, and telehealth platforms) to do the same under written agreements.

You may request to access, correct, or receive a copy of your medical records, request restrictions on certain uses, and receive an accounting of certain disclosures, as described in our Notice of Privacy Practices. To make a request, contact our privacy officer using the details below.

5. Information Sharing

We do not sell your personal information. We share information only with:

• Vendors who help run our practice (scheduling, billing, labs, pharmacy fulfillment, telehealth), under agreements that require them to protect your data.
• Authorities when required by law.
• Others only with your consent.

6. Data Security

We use appropriate technical and organizational safeguards — including encryption in transit, access controls, and secure payment processing — to protect your information. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.

7. Your Rights

Depending on the information and applicable law, you may:

• Access or receive a copy of your data.
• Request corrections.
• Request deletion (subject to medical recordkeeping requirements).
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Opt out of marketing communications.

For requests about your medical records, see Section 4.

8. Children

Our services are intended for adults. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

10. Contact / Privacy Officer

If you believe your privacy rights have been violated, you may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.