Last Updated: October 4, 2025
At BodyLuxe PLLC (“BodyLuxe,” “we,” “us,” or “our”), we value your privacy. This Consumer Health Data (CHD) Privacy Policy explains how we collect, use, share, and protect consumer health data when you use our websites, forms, chat, scheduling tools, and other online services, or receive services from us.
This Policy is intended to satisfy Washington’s My Health My Data Act (RCW 19.373) and Nevada SB 370 (NRS 603A.400–.550). It supplements our general Privacy Policy. This Policy does not apply to the protected health information that you may provide to BodyLuxe PLLC in connection with BodyLuxe PLLC’s provision of healthcare services. For more information about our privacy practices relating to those activities, please review the relevant Notice of Privacy Practices provided to you. If there are any inconsistencies between the Notice of Privacy Practices and this Policy, the Notice of Privacy Practices will control.
BodyLuxe PLLC is not a “covered entity” under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments from time to time (collectively, “HIPAA”). Any medical or health information that you provide that is subject to specific protections under applicable state laws (“Protected Information”) will be used and disclosed only in accordance with such applicable laws. However, any information that does not constitute Protected Information under applicable laws may be used or disclosed in any manner permitted under this Policy. Protected Information does not include information that has been de-identified in accordance with applicable laws.
This Policy applies when we collect CHD from people located in Washington or Nevada (including persons whose CHD is collected in those states) and, more broadly, to CHD we process in ways covered by those laws.
We may collect the following categories of CHD (examples are illustrative):
Health status & treatment details (e.g., conditions, diagnoses, prior surgeries/procedures, medications, symptoms, measurements, photos/notes you upload in inquiry or intake forms).
Inferences about health drawn from other information (e.g., interest in a procedure suggesting a condition or goal).
Scheduling & care‑coordination context (e.g., appointment requests, preferred clinic, communications about procedures).
Technical identifiers linked to health context (e.g., IP address, device ID, browsing of procedure pages), when such identifiers are used to identify or infer a consumer’s health status or interest in health services.
We do not treat de‑identified/aggregated analytics as CHD unless it is re‑identified.
Directly from you: web forms (consult requests, candidacy/inquiry or “health profile”), messages/chats, calls, emails, in‑clinic paperwork.
Automated technologies: cookies, pixels, and similar tools on our sites/apps; see our Cookie Policy ([cookie‑policy URL]).
Third parties: scheduling vendors, referral sites, advertising platforms, social media, and analytics service providers (consistent with your consents).
We use CHD for the following purposes:
Provide and improve services: evaluate candidacy, schedule consults, prepare for care, and personalize your experience.
Customer support & operations: respond to inquiries, process transactions you request, troubleshoot, maintain our services.
Quality, safety, and development: de‑identify and analyze trends to improve our services and education.
Technical & administrative notices: send important updates about features or changes.
Marketing with your opt‑in consent: send information about services or offers we believe may interest you; you can opt out at any time.
We will not collect or use additional CHD categories or purposes beyond what’s disclosed here without first updating this Policy and obtaining your affirmative consent where required.
We may share all categories of CHD listed above—but only as described here, consistent with your choices and applicable law.
We disclose CHD in these situations:
Affiliates (we have none currently)
Service providers (“processors”) under written contracts (hosting, scheduling, EHR/intake tools, analytics) who may only process CHD to perform services for us.
Advertising/measurement partners, only with your opt‑in consent, to deliver or measure advertising related to our services.
Business transfers (e.g., merger, acquisition, reorganization, bankruptcy).
With your direction or additional consent.
Legal and safety: if required by law, subpoena, or court order, or to protect rights, property, safety, or investigate illegal activity.
Third‑party collection across sites. Some third parties may collect CHD over time and across websites/apps (e.g., via pixels) when you use our services; see Cookie Policy and “Your Choices” below.
Opt‑in consent (collection & sharing). Where required, we obtain your affirmative, voluntary opt‑in consent before collecting CHD (unless strictly necessary to provide a product/service you requested) and a separate opt‑in before sharing CHD. Consent requests disclose what we collect, why, with whom we share, and how to withdraw consent. Dark‑patterns are prohibited.
Sale of CHD. We do not sell CHD. If we ever propose to sell CHD, we would first obtain a separate, signed authorization that includes the specific data, seller/buyer identities, purpose, your right to revoke, non‑condition of services, one‑year expiration, and we would give you a copy and keep it on file (minimum six years).
Geofencing. We do not use geofences around in‑person health care locations to identify/track consumers, collect CHD, or send ads/messages based on CHD.
You (or your authorized agent) may exercise the rights below. We provide a secure method that does not require creating a new account (we may ask you to use an existing account, if you have one). We will not discriminate against you for exercising your rights.
Rights you can exercise
Confirm & Access: Learn whether we collect/share/sell your CHD and access it, including a list of all third parties and affiliates with whom we shared/sold your CHD and a contact method for each.
Delete: Ask us to delete your CHD. We will instruct our affiliates, processors, contractors, and other third parties to delete it as well. Deletion from backups may be delayed up to six months.
WA timeline: within 45 days of receipt (one extension of up to 45 days if reasonably necessary).
NV timeline: act within 45 days after authentication of your request (one extension of up to 45 days if reasonably necessary).
Withdraw consent: Withdraw consent for collection and/or sharing going forward.
Cease collection/sharing (NV): Ask us to stop collecting/sharing/selling your CHD.
Correction (if available): Request correction of CHD you believe is inaccurate (if our systems support it).
How to submit a request or appeal a decision
Submit: Write to Privacy Department, BodyLuxe PLLC, 875 N Michigan Ave Ste 3620, Chicago, IL 60611
Authenticate: We may request limited information to verify your identity/authority.
Fees: We provide responses free of charge up to twice per year unless a request is manifestly unfounded, excessive, or repetitive.
Appeal: If we refuse your request, you may appeal using the same channels. We will respond in writing within 45 days with our decision and reasons. If we deny the appeal, we will provide a method to contact your Attorney General to submit a complaint.
We limit access to CHD to staff, processors, and contractors with a need to know, and we maintain administrative, technical, and physical safeguards appropriate to the volume and sensitivity of CHD.
We engage processors under written contracts that limit use of CHD to our instructions and require assistance with security and rights requests consistent with applicable law.
We retain CHD only as long as necessary for the purposes described above (or as required by law), then delete or de‑identify it. If you have authorized the sale of CHD (we do not sell), we would retain the signed authorization for six years from signature or last effective date, whichever is later.
Cookies and similar technologies on our services may be used by us and by third‑party partners to collect information—including CHD in context—about your interactions over time and across websites. See our Cookie Policy ([cookie‑policy URL]) for details and controls (including browser settings, consent banners, and partner‑specific opt‑outs).
For further information about the matter covered by this Notice, or to make a complaint, please contact our Privacy Officer at: (312) 999-5505 or fill in the online form at https://bodyluxe.com/contact-us. You may also write to us at BodyLuxe PLLC, 875 N Michigan Ave, Suite 3620, Chicago IL 60611.
We may update this Policy from time to time. We will change the “Last Updated” date above and will provide additional notice for material changes when required by law. We will maintain an effective date here and a prominent homepage link to this Policy. Washington guidance also expects this link to be separate and distinct from other links.
This CHD Policy applies to consumer health data as defined under Washington and Nevada law and supplements our broader Privacy Policy.
The leaves are changing, and so can you. This Fall, BodyLuxe invites you to harvest your confidence and reveal your most sculpted self.
Take up to $4,200 off our most-loved procedures — FormSculpt® Lipo, Brazilian Butt Lift, Fat Transfer (to Breasts or Hands), Skin Tightening, or a Mini Tummy Tuck — and step into sweater weather feeling sleek, sculpted, and radiant.
This limited-time Fall Into Luxe offer ends November 30, and appointments are booking fast.
🍁 Tap below to reserve your consultation and let BodyLuxe shape the look you’ll love showing off all season long.
