Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, information collected automatically when you use our website, and information obtained from third-party sources.

1.1 Information You Provide Directly

When you interact with M Health, you may provide us with the following categories of personal information:

• Contact Information: Your name, email address, phone number, and mailing address.
• Account Information: If you create an account or register for membership, your login credentials, membership preferences, and communication preferences.
• Health and Medical Information: Health history, current medications, allergies, treatment preferences, photographs (including before-and-after images), lab results, and other information necessary for the safe delivery of medical and wellness services. This information is also subject to our HIPAA Notice of Privacy Practices.
• Payment Information: Credit card numbers, billing addresses, and financial account information necessary to process payments. Payment information is processed through secure, PCI-DSS compliant third-party payment processors and is not stored on our servers.
• Communication Records: Information you provide when you contact us via phone, email, text message, online chat, or contact forms, including the content of those communications.
• Appointment Information: Date, time, service type, and provider preferences when you schedule appointments through our website or booking system (Boulevard).
• Feedback and Reviews: Testimonials, reviews, or survey responses you voluntarily provide.

1.2 Information Collected Automatically

When you access our website, we may automatically collect certain information about your device and usage patterns, including:

• Device Information: Browser type and version, operating system, device type, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time spent on each page, links clicked, scroll depth, and navigation patterns.
• Location Data: General geographic location based on your IP address (city/state level). We do not collect precise GPS location data through our website.
• Referral Information: The website or search engine that referred you to our site, search terms used, and advertising campaign identifiers (UTM parameters).
• Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar tracking technologies to collect usage data, remember your preferences, and support our marketing efforts. See Section 5 for details on our cookie practices.

1.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

• Booking Platform: Appointment and registration data from Boulevard, our third-party booking and patient management system.
• Analytics Providers: Aggregated website usage data from Google Analytics, Microsoft Clarity, and similar analytics services.
• Marketing Platforms: Information about your interactions with our advertisements on platforms such as Google Ads and Meta (Facebook/Instagram).
• Review Platforms: Publicly available reviews you post about M Health on Google, Yelp, or similar platforms.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Improve Our Services

• Scheduling and managing your appointments.
• Delivering medical, aesthetic, wellness, and bodywork services safely and effectively.
• Maintaining your health records and treatment history as required by applicable law.
• Processing payments and managing your membership account.
• Communicating with you about your appointments, treatment plans, and follow-up care.
• Improving our website, services, and patient experience based on usage data and feedback.

2.2 For Marketing and Communication

• Sending appointment reminders and confirmations via email and SMS.
• Sending promotional communications about our services, special offers, and events (with your consent where required by law). You may opt out of marketing communications at any time.
• Displaying targeted advertisements on third-party platforms based on your website activity and interests.
• Analyzing the effectiveness of our marketing campaigns to allocate resources efficiently.

2.3 For Legal and Safety Purposes

• Complying with applicable federal, state, and local laws, regulations, and legal processes.
• Enforcing our Terms and Conditions and other agreements.
• Protecting the rights, safety, and property of M Health, our patients, staff, and the public.
• Detecting, preventing, and responding to fraud, security incidents, and technical issues.

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who perform services on our behalf, including our booking platform (Boulevard), payment processors, email and SMS marketing providers, website hosting services, analytics providers, and IT support. These providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.
• Medical Purposes: Protected health information (PHI) may be used and disclosed for treatment, payment, and healthcare operations as described in our HIPAA Notice of Privacy Practices. This includes sharing information with referring providers, laboratories, and other healthcare professionals involved in your care, with your authorization or as permitted by law.
• Legal Requirements: We may disclose your information when required to do so by law, regulation, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.
• With Your Consent: We may share your information for other purposes when you provide us with your explicit consent to do so.

4. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include:

• Encryption of data in transit using SSL/TLS protocols (HTTPS) across our entire website.
• Secure storage of electronic records with access controls limited to authorized personnel.
• Regular security assessments and updates to our systems and software.
• Staff training on data privacy and security best practices.
• Business Associate Agreements (BAAs) with all third-party vendors who access protected health information.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your data, but we are committed to using industry-standard protections.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site performance, and support our marketing efforts. The categories of cookies we use include:

5.1 Essential Cookies

These cookies are necessary for the website to function properly. They enable core features such as page navigation, access to secure areas, and booking functionality. These cookies do not collect personal information and cannot be disabled.

5.2 Analytics Cookies

We use analytics tools including Google Analytics 4 and Microsoft Clarity to understand how visitors interact with our website. These tools collect anonymized data about page views, session duration, scroll depth, click patterns, and traffic sources. This data helps us improve our website design, content, and user experience. Analytics cookies do not identify you personally.

5.3 Marketing Cookies

We use marketing cookies and tracking pixels from Google Ads and Meta (Facebook/Instagram) to measure the effectiveness of our advertising campaigns and to deliver relevant advertisements to you on third-party platforms. These cookies may track your browsing activity across websites to build a profile of your interests.

5.4 Managing Your Cookie Preferences

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, accept only certain cookies, or alert you when a cookie is being placed. Please note that disabling cookies may affect the functionality of certain features on our website, including the online booking system.

You can also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative's opt-out page at optout.networkadvertising.org.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

6.1 General Rights

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to certain legal exceptions (for example, we are required to retain medical records for a minimum period under Texas and federal law).
• Opt-Out of Marketing: You may opt out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email, or by contacting us directly. You may opt out of promotional SMS messages by replying STOP to any text message. Please note that opting out of marketing communications does not affect transactional communications such as appointment confirmations and reminders.
• Do Not Track: Our website does not currently respond to "Do Not Track" browser signals. However, you may manage your tracking preferences through the cookie settings described in Section 5.

6.2 Texas Privacy Rights

If you are a Texas resident, you may have additional rights under the Texas Data Privacy and Security Act (TDPSA), including the right to access, correct, delete, and obtain a copy of your personal data, as well as the right to opt out of the sale of personal data, targeted advertising, and certain profiling. To exercise these rights, please contact us using the information in Section 10.

6.3 Protected Health Information

Your rights regarding protected health information (PHI) are governed by HIPAA and are described in our separate HIPAA Notice of Privacy Practices, available at mworldhealth.com/hipaa and upon request at our facility.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Medical Records: Retained for a minimum of seven (7) years from the date of last treatment, or longer as required by Texas law and federal regulations.
• Financial Records: Retained for a minimum of seven (7) years for tax and audit purposes.
• Marketing Data: Retained until you opt out of marketing communications or request deletion, unless required for legal compliance.
• Website Analytics Data: Aggregated analytics data is retained indefinitely. Individual user session data is retained for up to twenty-six (26) months in accordance with our analytics provider's retention settings.

8. Children's Privacy

Our website and online services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 through our website. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly. If you believe a child under 13 has provided us with personal information through our website, please contact us at privacy@mworldhealth.com.

M Health does provide certain wellness, bodywork, and rehabilitation services to minors (such as sports rehabilitation for high school athletes). When providing in-person services to a minor, we obtain consent from a parent or legal guardian, and any health information collected is handled in accordance with our HIPAA Notice of Privacy Practices.

9. Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by M Health. This includes our booking platform (Boulevard), social media profiles, review platforms, and content resources. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of our website and services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: