Last Updated: October 4, 2025
At BodyLuxe PLLC (“BodyLuxe,” “we,” “us,” or “our”), we value your privacy. This Consumer Health Data (CHD) Privacy Policy explains how we collect, use, share, and protect consumer health data when you use our websites, forms, chat, scheduling tools, and other online services, or receive services from us.
This Policy is intended to satisfy Washington’s My Health My Data Act (RCW 19.373) and Nevada SB 370 (NRS 603A.400–.550). It supplements our general Privacy Policy and does not apply to information that is Protected Health Information (PHI) under HIPAA; please review our HIPAA Notice of Privacy Practices for PHI. We post a prominent link to this CHD policy on our homepage as required by law.
This Policy applies when we collect CHD from people located in Washington or Nevada (including persons whose CHD is collected in those states) and, more broadly, to CHD we process in ways covered by those laws.
We may collect the following categories of CHD (examples are illustrative):
Health status & treatment details (e.g., conditions, diagnoses, prior surgeries/procedures, medications, symptoms, measurements, photos/notes you upload in inquiry or intake forms).
Inferences about health drawn from other information (e.g., interest in a procedure suggesting a condition or goal).
Scheduling & care‑coordination context (e.g., appointment requests, preferred clinic, communications about procedures).
Technical identifiers linked to health context (e.g., IP address, device ID, browsing of procedure pages), when such identifiers are used to identify or infer a consumer’s health status or interest in health services.
We do not treat de‑identified/aggregated analytics as CHD unless it is re‑identified.
Directly from you: web forms (consult requests, candidacy/inquiry or “health profile”), messages/chats, calls, emails, in‑clinic paperwork.
Automated technologies: cookies, pixels, and similar tools on our sites/apps; see our Cookie Policy ([cookie‑policy URL]).
Third parties: scheduling vendors, referral sites, advertising platforms, social media, and analytics service providers (consistent with your consents).
We use CHD for the following purposes:
Provide and improve services: evaluate candidacy, schedule consults, prepare for care, and personalize your experience.
Customer support & operations: respond to inquiries, process transactions you request, troubleshoot, maintain our services.
Quality, safety, and development: de‑identify and analyze trends to improve our services and education.
Technical & administrative notices: send important updates about features or changes.
Marketing with your opt‑in consent: send information about services or offers we believe may interest you; you can opt out at any time.
We will not collect or use additional CHD categories or purposes beyond what’s disclosed here without first updating this Policy and obtaining your affirmative consent where required.
We may share all categories of CHD listed above—but only as described here, consistent with your choices and applicable law.
We disclose CHD in these situations:
Affiliates (we have none currently)
Service providers (“processors”) under written contracts (hosting, scheduling, EHR/intake tools, analytics) who may only process CHD to perform services for us.
Advertising/measurement partners, only with your opt‑in consent, to deliver or measure advertising related to our services.
Business transfers (e.g., merger, acquisition, reorganization, bankruptcy).
With your direction or additional consent.
Legal and safety: if required by law, subpoena, or court order, or to protect rights, property, safety, or investigate illegal activity.
Third‑party collection across sites. Some third parties may collect CHD over time and across websites/apps (e.g., via pixels) when you use our services; see Cookie Policy and “Your Choices” below.
Opt‑in consent (collection & sharing). Where required, we obtain your affirmative, voluntary opt‑in consent before collecting CHD (unless strictly necessary to provide a product/service you requested) and a separate opt‑in before sharing CHD. Consent requests disclose what we collect, why, with whom we share, and how to withdraw consent. Dark‑patterns are prohibited.
Sale of CHD. We do not sell CHD. If we ever propose to sell CHD, we would first obtain a separate, signed authorization that includes the specific data, seller/buyer identities, purpose, your right to revoke, non‑condition of services, one‑year expiration, and we would give you a copy and keep it on file (minimum six years).
Geofencing. We do not use geofences around in‑person health care locations to identify/track consumers, collect CHD, or send ads/messages based on CHD.
You (or your authorized agent) may exercise the rights below. We provide a secure method that does not require creating a new account (we may ask you to use an existing account, if you have one). We will not discriminate against you for exercising your rights.
Rights you can exercise
Confirm & Access: Learn whether we collect/share/sell your CHD and access it, including a list of all third parties and affiliates with whom we shared/sold your CHD and a contact method for each.
Delete: Ask us to delete your CHD. We will instruct our affiliates, processors, contractors, and other third parties to delete it as well. Deletion from backups may be delayed up to six months.
WA timeline: within 45 days of receipt (one extension of up to 45 days if reasonably necessary).
NV timeline: act within 45 days after authentication of your request (one extension of up to 45 days if reasonably necessary).
Withdraw consent: Withdraw consent for collection and/or sharing going forward.
Cease collection/sharing (NV): Ask us to stop collecting/sharing/selling your CHD.
Correction (if available): Request correction of CHD you believe is inaccurate (if our systems support it).
How to submit a request or appeal a decision
Submit: Use [web form URL], email [email], call [phone], or write to [postal address].
Authenticate: We may request limited information to verify your identity/authority.
Fees: We provide responses free of charge up to twice per year unless a request is manifestly unfounded, excessive, or repetitive.
Appeal: If we refuse your request, you may appeal using the same channels. We will respond in writing within 45 days with our decision and reasons. If we deny the appeal, we will provide a method to contact your Attorney General to submit a complaint.
We limit access to CHD to staff, processors, and contractors with a need to know, and we maintain administrative, technical, and physical safeguards appropriate to the volume and sensitivity of CHD.
We engage processors under written contracts that limit use of CHD to our instructions and require assistance with security and rights requests consistent with applicable law.
We retain CHD only as long as necessary for the purposes described above (or as required by law), then delete or de‑identify it. If you have authorized the sale of CHD (we do not sell), we would retain the signed authorization for six years from signature or last effective date, whichever is later.
Cookies and similar technologies on our services may be used by us and by third‑party partners to collect information—including CHD in context—about your interactions over time and across websites. See our Cookie Policy ([cookie‑policy URL]) for details and controls (including browser settings, consent banners, and partner‑specific opt‑outs).
For further information about the matter covered by this Notice, or to make a complaint, please contact our Privacy Officer at: (312) 999-5505 or fill in the online form at https://bodyluxe.com/contact-us. You may also write to us at BodyLuxe PLLC, 875 N Michigan Ave, Suite 3620, Chicago IL 60611.
We may update this Policy from time to time. We will change the “Last Updated” date above and will provide additional notice for material changes when required by law. We will maintain an effective date here and a prominent homepage link to this Policy. Washington guidance also expects this link to be separate and distinct from other links.
This CHD Policy applies to consumer health data as defined under Washington and Nevada law and supplements our broader Privacy Policy. It does not apply to PHI processed under HIPAA—that information is governed by our HIPAA Notice of Privacy Practices and applicable HIPAA rules and exemptions.
Summer Smash has landed, and BodyLuxe is here to help you greet the season with a sun‑kissed silhouette! Take up to $4,300 off our most‑loved procedures—FormSculpt Lipo, Brazilian Butt Lift, Fat Transfer (to Breasts or Hands), Skin Tightening, or a Mini Tummy Tuck—and step onto the beach or boat feeling unstoppable.
This limited‑time offer runs through October 31 —and appointments are filling fast. Tap below to lock in your consultation and let BodyLuxe sculpt the look you’ll love showing off from the beach to every summer bash.
