Privacy Policy – Mabelle Wellness Aesthetic

Who we are

Ma Belle Wellness and Aesthetics (“Ma Belle Wellness and Aesthetics,” “we,” “us,” “our,” or the “Company”) is a physician-owned professional medical entity. M Ma Belle Wellness and Aesthetics holds all physician and provider relationships and is responsible for clinical oversight and for the Good Faith Examinations performed through our network. Health Covers Inc. is a separate management services organization that provides administrative, credentialing, technology, and billing services to Ma Belle Wellness and Aesthetics. Health Covers Inc. does not practice medicine, does not provide medical advice, and does not control clinical decision-making. All clinical decisions are made by licensed providers exercising independent professional judgment. This Privacy Policy explains what information we collect through our websites, platform, and services (together, the “Services”), how we use it, who we share it with, and the choices you have. By using the Services, you agree to this Policy.

Read this first

We do not sell your personal information, and we do not share it with advertisers. We do not use protected health information for marketing. Good Faith Examination records, including video recordings, are never sold, licensed, or disclosed for advertising or commercial purposes.

Scope of this Policy

This Policy applies to information collected through the Services. It does not apply to other websites you may reach from our Services, which have their own policies. Two categories of information are treated differently:

Protected Health Information (PHI)

Patient health information created or received in connection with a Good Faith Examination. PHI is governed by HIPAA and by the Notice of Privacy Practices, not by the general commercial terms below.

Website and account information

Information collected from clinic staff, prospective clients, and general website visitors.

Information we collect

Information you give us

Name, email address, phone number, and mailing address
Clinic or practice name, role, and state of operation
Account credentials
Billing contact and payment information (processed by our payment processor; we do not store full card numbers)
Messages, support requests, and information you submit through forms

Information collected automatically

Browser, device, and operating system information
IP address and general location derived from it
Pages viewed, time on page, and referring page
Cookie and similar identifiers

Patient health information

When a Good Faith Examination is performed, licensed providers collect health information from the patient, including medical history, current medications, allergies, and treatment history, and may record the examination on video. This is PHI. It is collected for the purpose of the examination and for the medical record. See “Health information and HIPAA” below.

What we do not collect

We do not collect Social Security numbers, driver’s license numbers, or credit history, and we do not obtain consumer reports about you. If you are ever asked for these through our Services, do not provide them and contact us immediately.

How we use information

We use information to:

Provide, operate, and improve the Services
Create and administer accounts
Facilitate and document Good Faith Examinations
Process payments and send invoices
Respond to questions and provide support
Send service and account communications
Detect and prevent fraud and abuse
Comply with legal, regulatory, and recordkeeping obligations

We may send marketing communications to clinic and business contacts about our services. You can opt out at any time using the unsubscribe link or by contacting us. We do not send marketing communications to patients, and we do not use PHI to market anything.

Health information and HIPAA

Good Faith Examinations are performed by licensed healthcare providers. Information created in the course of an examination is PHI and is handled in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state health privacy law. We maintain administrative, physical, and technical safeguards for PHI, including encryption in transit and at rest, role-based access controls, audit logging, and workforce training. Where a vendor handles PHI on our behalf, we enter into a Business Associate Agreement requiring equivalent safeguards. PHI is never sold, and is never disclosed for marketing or advertising. Video recordings of Good Faith Examinations are retained as part of the medical record and are disclosed only to the patient, the treating clinic, the performing provider, the supervising medical director, and as otherwise required or permitted by law. For a full description of your rights regarding PHI, see the Notice of Privacy Practices.

When we share information

We share information only in these circumstances:

WHO	WHAT	WHY
Licensed providers in our network	Patient intake and health information	To perform the Good Faith Examination
The treating clinic	The treating clinic	So the clinic knows whether the patient was cleared
The supervising medical director	Charts selected for review	Clinical oversight and quality review
Health Covers Inc.	Account, billing, and credentialing information	Administrative and management services
Service providers	Only what is needed for their function	Hosting, payment processing, email delivery, analytics. Bound by contract; bound by a BAA where PHI is involved.
Legal and regulatory authorities	As required	Where compelled by law, subpoena, or regulatory obligation, or to protect rights and safety
An acquirer	As part of a transaction	In a merger, acquisition, or sale of assets. We will provide notice, and PHI transfers remain subject to HIPAA.

We do not sell personal information. We do not share personal information with advertisers or data brokers. We do not permit third parties to use our data for their own marketing.

Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember preferences, measure traffic, and improve the Services. Analytics and performance cookies are set only after you acknowledge our cookie banner. You can set your browser to refuse cookies. The Services remain usable, though some features may not work as intended. We do not run advertising or retargeting pixels on any page where patient health information is collected or displayed.

Security

We use industry-standard safeguards including encryption, secure servers, role-based access controls, and periodic review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If personal information is compromised in a security breach, we will investigate, notify affected individuals and regulators as required by law, and take corrective steps.

How long we keep information

We keep account and business information for as long as your account is active and thereafter as needed for legal, tax, and audit purposes. Medical records, including Good Faith Examination records and recordings, are retained for the period required by the law of the state in which the examination was performed, and in no case for less than the applicable minimum retention period. You may request deletion of account information by contacting mabellspa@gmail.com. Note that we cannot delete medical records where retention is required by law.

Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you
Correct inaccurate information
Request deletion, subject to legal retention requirements
Receive a copy of your information in a portable format
Opt out of marketing communications
Opt out of the sale or sharing of personal information (we do not sell or share, so there is nothing to opt out of, but you may still submit a request)

To exercise any of these rights, email mabellspa@gmail.com. We will verify your identity before acting on a request. We will not discriminate against you for exercising these rights. Patients seeking access to a medical record should contact the treating clinic or submit a request under the Notice of Privacy Practices.

California residents

Under the California Consumer Privacy Act, as amended, California residents have the rights described above.

Category collected	Source	Purpose	Disclosed to
Identifiers (name, email, phone, address, IP)	Directly from you; cookies	Provide the Services; communicate with you; security	Service providers; Health Covers Inc.; legal authorities as required
Commercial information (transactions, invoices)	Directly from you	Billing and account administration	Payment processor; Health Covers Inc.
Internet activity (pages viewed, device)	Cookies and analytics	Improve the Services	Analytics service providers
Geolocation (city and state, derived from IP)	Cookies	Determine provider licensure requirements	Service providers
Audio and visual (Good Faith Exam recordings)	Directly from the patient during the exam	Medical record; clinical oversight	The patient, the clinic, the performing provider, the medical director. Never disclosed to advertisers or marketing partners.
Professional information (clinic, role, license)	Directly from you	Credentialing and account setup	Hosting, payment processing, email delivery, analytics. Bound by contract; bound by a BAA where PHI is involved.

We have not sold or shared personal information for cross-context behavioral advertising in the preceding twelve months, and we do not intend to. Medical information governed by HIPAA or the California Confidentiality of Medical Information Act is exempt from CCPA and is handled under those laws instead. You may designate an authorized agent to submit a request on your behalf. We will require proof of authorization.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. Where a patient is a minor, the examination is conducted through the clinic under applicable law and with the consent of a parent or legal guardian. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this Policy

We may update this Policy. Material changes will be posted here with a revised effective date, and where required by law we will provide additional notice. Continued use of the Services after a change takes effect means you accept the updated Policy.