Privacy Policy

Personal Identification Information: Name, email address, phone number, date of birth, and mailing address.

Health Information: Medical history, treatment records, immunization records, prescriptions, and related clinical data provided through our patient portal. This information is considered Protected Health Information (PHI) under HIPAA.

Payment Information: Payment is processed through our secure payment provider. We do not store full credit card numbers on our servers.

Usage Data: Browser type, IP address, pages visited, and time spent on the site for analytics purposes.

Communications: Messages sent through the patient portal or by email.

To schedule and manage your appointments.

To provide clinical care and maintain accurate health records.

To send appointment confirmations, reminders, and follow-up communications.

To process payments for services rendered.

To comply with applicable laws, regulations, and licensing requirements.

To improve our services and patient experience.

To respond to your inquiries and support requests.

We are committed to maintaining the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA). Your PHI will only be used or disclosed as permitted or required by law, including for treatment, payment, and healthcare operations.

You have the right to request access to your health records, request amendments, receive an accounting of disclosures, and request restrictions on how your PHI is used. To exercise these rights, please contact us at Dana@majestic.llc.

We do not sell, trade, or rent your personal information to third parties. We may share information with:

Service Providers: Trusted vendors who assist in operating our platform (e.g., appointment scheduling, email delivery, payment processing) under strict confidentiality agreements.

Healthcare Partners: Referring providers, specialists, laboratories, or pharmacies as necessary for your care.

Legal Requirements: Government or law enforcement agencies when required by law or court order.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred with appropriate notice.

We implement industry-standard technical and organizational safeguards to protect your information, including encrypted data transmission (TLS/SSL), access controls, and secure cloud storage. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Our website may use cookies and similar tracking technologies to enhance your browsing experience and analyze site traffic. You may disable cookies through your browser settings, though some features of the site may not function properly as a result.

Depending on your jurisdiction, you may have rights including: the right to access, correct, or delete your personal data; the right to withdraw consent; and the right to data portability. To submit a request, contact us at Dana@majestic.llc.

Our services are not directed to individuals under the age of 18 without parental consent. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Majestic Glow Health & Aesthetics 305 3rd St SE, Suite 350 Cedar Rapids, Iowa 52401 Email: Dana@majestic.llc