Website Privacy Policy
Effective Date: October 7, 2026. Last Updated: October 7, 2026.
1. Who We Are
Luxus Aesthetics LLC ("Luxus," "we," "us," or "our") is a nurse-practitioner-led medical aesthetics practice owned by Dustin Bodine and Laura Bodine, DNP, FNP-BC, NP-C. We do business as Luxus Aesthetics and Wellness in Colorado Springs, Colorado, and as LUXUS Aesthetics in Happy Valley, Oregon. Our clinics are:
Luxus Aesthetics and Wellness (Colorado Springs): 11590 Ridgeline Dr, Suite 150, Colorado Springs, CO 80921 | (719) 747-6456 | luxusaestheticscolorado.com
LUXUS Aesthetics (Happy Valley): 12930 SE 162nd Ave, Suite 102, Happy Valley, OR 97086 | (971) 349-0942 | luxusaesthetics.com
This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our websites (luxusaesthetics.com and luxusaestheticscolorado.com, the "Sites"), book appointments online, communicate with us by phone, text, or email, sign up for our marketing, or otherwise interact with us online.
Relationship to our HIPAA Notice. Health information we create or receive in providing care to patients is "protected health information" ("PHI") governed by the Health Insurance Portability and Accountability Act ("HIPAA"). Our handling of PHI is described in our Notice of Privacy Practices, which appears below and is available on our Sites and at each clinic. If this Privacy Policy and our Notice of Privacy Practices conflict as to PHI, the Notice of Privacy Practices controls.
2. Information We Collect
Information you provide to us:
Contact and identity information: name, email address, phone number, mailing address, and date of birth.
Appointment and booking information: services requested, preferred clinic, provider, date and time, and any notes you submit through our online booking system.
Health-related information: information you share about your health, medical history, medications, treatment goals, intake and consent forms, and before-and-after photographs. When collected in connection with your care, this information is PHI and is protected as described in our Notice of Privacy Practices.
Payment information: card details and billing information, processed by our payment processor. We do not store full card numbers on our own systems.
Communications: messages, reviews, survey responses, and other information you send to us by web form, email, text, phone, or social media.
Marketing preferences: your opt-in or opt-out choices for email and text communications.
Information collected automatically:
Device and technical information: when you visit the Sites, our website and booking systems may automatically receive standard technical information such as your IP address, browser type, and device type, which is used to deliver, secure, and maintain the Sites.
Cookies: see Section 5.
Information from others:
We may receive information from referring providers, your other health care providers (with your authorization or as permitted by law), and our service providers (such as booking, payment, and email platforms).
3. How We Use Information
Schedule, confirm, and remind you of appointments, and manage your account and online booking.
Provide, coordinate, and document care and treatment, as described in our Notice of Privacy Practices.
Process payments, deposits, memberships, packages, and refunds.
Respond to inquiries and provide customer service.
Send appointment reminders and service-related messages by text and email.
Send newsletters, savings offers, and company news if you have opted in (see Sections 6 and 7).
Operate, maintain, and secure our Sites and services.
Detect and prevent fraud, misuse, and security incidents.
Comply with legal, regulatory, licensing, and professional obligations, and establish or defend legal claims.
We do not use PHI for marketing without your written authorization, except as permitted by HIPAA (for example, face-to-face communications).
4. How We Share Information
We do not sell your personal information, and we do not share your personal information for targeted (cross-context behavioral) advertising. We share information only as described below:
Service providers: vendors that perform services on our behalf under contracts that limit their use of the information. These include Aesthetic Record, our electronic health record and online booking vendor, which maintains HIPAA safeguards under a business associate agreement with us; Stripe (payment processing); Mailchimp (marketing email; we do not send PHI through Mailchimp); our appointment-reminder messaging, website hosting, and IT providers; and our accounting and professional advisors. Any vendor that handles PHI on our behalf must sign a HIPAA business associate agreement.
Treatment and health care operations: as described in our Notice of Privacy Practices.
Legal and safety: to comply with law, subpoena, court order, or government request, and to protect the rights, property, or safety of Luxus, our patients, or others.
Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to applicable law, including HIPAA.
With your consent: for any other purpose with your consent or at your direction.
5. Cookies
Our Sites use cookies and similar technologies that are necessary for basic site functions, such as security, remembering your preferences, and online booking. You can block or delete cookies through your browser settings, but some features (such as booking) may not work properly if you do.
6. Text Messaging (SMS) Terms
If you provide your mobile number and opt in, Luxus may send you text messages, including appointment confirmations and reminders and service-related messages (such as pre- and post-treatment instructions). We send marketing text messages, such as savings offers and company news, only to clients who separately opt in to receive them.
Consent: By opting in, you agree to receive recurring automated text messages from Luxus at the number you provide. Consent to receive marketing text messages is not a condition of any purchase or service.
Frequency: Message frequency varies.
Rates: Message and data rates may apply. Check with your wireless carrier for details.
Opt-out: Reply STOP to any message to unsubscribe. You will receive one final message confirming your opt-out. You may also contact us to change your text preferences at any time.
Help: Reply HELP for help, or contact us at (719) 747-6456 (Colorado Springs) or (971) 349-0942 (Happy Valley), or luxusaesthetics@gmail.com.
Carriers: Wireless carriers are not liable for delayed or undelivered messages.
No sharing of mobile information: We do not sell, rent, or share your mobile phone number or text-messaging opt-in data with third parties or affiliates for their marketing or promotional purposes. We share this information only with service providers (such as our messaging platform) to deliver messages to you.
Privacy of health information: Text messaging is not fully secure. We limit health details in texts to what is reasonably necessary, such as appointment date, time, and location. You may ask us to use a different communication method.
7. Email Marketing
If you subscribe, we use Mailchimp to send newsletters, savings offers, and company news. You may unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by emailing luxusaesthetics@gmail.com. We may still send transactional or appointment-related emails after you unsubscribe from marketing. Mailchimp may record whether you open our emails or click links, which helps us improve our communications. We do not include PHI in marketing emails, and we do not use your treatment history to target marketing without your HIPAA authorization.
8. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit where supported, vendor due diligence, and HIPAA-compliant systems for PHI. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send sensitive health information through unsecured channels such as general email or social media direct messages.
9. Data Retention
We keep personal information for as long as needed to fulfill the purposes described in this Policy and to meet legal, accounting, and medical-records retention requirements. Medical records are retained for the periods required by Colorado and Oregon law.
10. Children and Minors
Our Sites are not directed to children under 13, and we do not knowingly collect personal information online from children under 13. If you believe a child has provided us information online, contact us and we will delete it.
We may provide services to minors with the consent of a parent or legal guardian. A parent or legal guardian may exercise the privacy rights described in this Policy and in our Notice of Privacy Practices on behalf of a minor, except where state law allows a minor to consent to their own care and to control the related information.
11. Your Privacy Rights
Depending on where you live, you may have rights regarding your personal information. Rights relating to PHI, such as access to and amendment of your medical record, are described in our Notice of Privacy Practices.
Colorado residents (Colorado Privacy Act).
To the extent the Colorado Privacy Act applies, Colorado residents may request to: (a) confirm whether we process their personal data and access it; (b) correct inaccuracies; (c) delete their personal data; (d) obtain a portable copy; and (e) opt out of the sale of personal data, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We process "sensitive data," which includes data revealing a mental or physical health condition or diagnosis, only with your consent where required. You may appeal our decision on a request by emailing luxusaesthetics@gmail.com with the subject "Privacy Appeal." If you are not satisfied with the outcome of your appeal, you may contact the Colorado Attorney General at coag.gov.
Oregon residents (Oregon Consumer Privacy Act).
To the extent the Oregon Consumer Privacy Act applies, Oregon residents may request: (a) confirmation of whether we process their personal data and the categories processed; (b) a list of the specific third parties (other than natural persons) to which we have disclosed personal data; (c) access to, correction of, and deletion of their personal data; (d) a portable copy; and (e) to opt out of the sale of personal data, targeted advertising, and certain profiling. We will not process sensitive data, including data revealing mental or physical health conditions or diagnoses and data of consumers we know are under 13, without your consent. You may appeal a denial by emailing luxusaesthetics@gmail.com with the subject "Privacy Appeal," and you may contact the Oregon Department of Justice at doj.state.or.us if concerns remain.
Consumer health data (Washington and similar laws).
"Consumer health data" means personal information that identifies, or is reasonably linkable to, a consumer's past, present, or future physical or mental health status. An example is information showing that you are interested in or searching for weight-loss, hormone, or other health-related services. Information that is PHI is governed by HIPAA and our Notice of Privacy Practices instead.
Categories collected: contact details; services you request or book; health goals or conditions you share in forms or messages; and technical information associated with your use of the Sites.
Sources: you directly, your device when you use our Sites, and our service providers.
Purposes: to respond to inquiries, schedule and provide services you request, and operate and secure our Sites. We collect and share consumer health data only with your consent or as necessary to provide a service you request.
Sharing: with service providers (processors) that act on our behalf under contract. We do not sell consumer health data and will not do so without a valid, separate signed authorization as required by law.
Geofencing: we do not use geofences around health care facilities to target or collect data from consumers.
Your rights: Washington consumers may confirm whether we collect, share, or sell their consumer health data; access it, including a list of all third parties and affiliates with which it was shared and their contact information; withdraw consent; and request deletion. You may appeal a denial by emailing luxusaesthetics@gmail.com with the subject "Privacy Appeal." If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov.
Other states.
If you live in another state with a consumer privacy law, you may have similar rights. Contact us and we will respond in accordance with applicable law.
How to submit a request.
Email luxusaesthetics@gmail.com with the subject "Privacy Request," call (719) 747-6456 (Colorado Springs) or (971) 349-0942 (Happy Valley), or write to us at 208 Dusty Hills Ct, Colorado Springs, CO 80919. We will verify your identity before responding and will respond within 45 days. We may extend that period by an additional 45 days when reasonably necessary, and we will tell you if we do. You may use an authorized agent where permitted by law. We will not discriminate against you for exercising your rights.
12. Third-Party Links and Platforms
Our Sites may link to third-party websites, social media, review sites, financing providers, or product manufacturers (for example, loyalty programs). We are not responsible for their privacy practices; please review their policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version with a new "Last Updated" date and, for material changes, provide additional notice as required by law, such as on our Sites or by email. Where required by law, we will obtain your consent before using previously collected personal data in a materially different way.
14. Contact Us
Luxus Aesthetics LLC, Attn: Privacy Officer
Mailing address: 208 Dusty Hills Ct, Colorado Springs, CO 80919
Email: luxusaesthetics@gmail.com
Luxus Aesthetics and Wellness (Colorado Springs): 11590 Ridgeline Dr, Suite 150, Colorado Springs, CO 80921 | (719) 747-6456 | luxusaestheticscolorado.com
LUXUS Aesthetics (Happy Valley): 12930 SE 162nd Ave, Suite 102, Happy Valley, OR 97086 | (971) 349-0942 | luxusaesthetics.com
HIPAA Notice of Privacy Practices
Effective Date: October 7, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This Notice applies to Luxus Aesthetics LLC, doing business as Luxus Aesthetics and Wellness in Colorado Springs, Colorado, and LUXUS Aesthetics in Happy Valley, Oregon, and to all of its nurse practitioners, clinical staff, estheticians, employees, and other workforce members at both clinics.
If you have questions about this Notice, contact our Privacy Officer (name available upon request) at luxusaesthetics@gmail.com or (719) 747-6456 (Colorado Springs) or (971) 349-0942 (Happy Valley).
Our Duties
We are required by law to:
Maintain the privacy and security of your protected health information ("PHI").
Give you this Notice of our legal duties and privacy practices with respect to your PHI.
Follow the terms of the Notice currently in effect.
Notify you promptly if a breach occurs that may have compromised the privacy or security of your unsecured PHI.
We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time by letting us know in writing.
We reserve the right to change the terms of this Notice and to make the new Notice provisions effective for all PHI we maintain, including information created or received before the change. If we change this Notice, the revised Notice will be available upon request, in our clinics, and on our websites.
How We May Use and Disclose Your Health Information
Treatment, payment, and health care operations (no authorization required):
Treatment. We use and share your PHI to provide and coordinate your care. For example, a nurse practitioner reviews your medical history and medications before an injectable, laser, or hormone therapy treatment, or we share information with a pharmacy, laboratory, or your primary care provider.
Payment. We use and share your PHI to bill and collect payment for services. For example, we process your payment through our payment processor or, if applicable, share information with a health plan or a financing company you choose to use.
Health care operations. We use and share your PHI to run our practice, improve care, and contact you when necessary. Examples include quality reviews, staff training, licensing, legal and accounting services, and business planning.
Other permitted uses and disclosures:
Appointment reminders and service communications. We may contact you by phone, text message, or email to remind you of appointments, provide pre- or post-treatment instructions, and tell you about treatment alternatives or health-related products and services we offer.
Business associates. We share PHI with vendors that perform services for us under written business associate agreements that require them to protect your information. For example, our electronic health record and online booking vendor maintains HIPAA safeguards under a business associate agreement with us.
Individuals involved in your care or payment. Unless you object, we may share relevant information with a family member, friend, or other person you identify who is involved in your care or payment for your care, or to notify them of your location or condition. If you are not present or cannot agree, we may use professional judgment to share information if it is in your best interest.
Disaster relief. We may share information with disaster-relief organizations to coordinate notification of family members.
As required by law. We will share information when federal, state, or local law requires it.
Public health and safety. We may share information to prevent disease; report adverse reactions to medications or medical devices to the FDA or manufacturers; report suspected abuse, neglect, or domestic violence; and prevent or reduce a serious threat to anyone's health or safety.
Health oversight. We may share information with agencies for audits, investigations, inspections, and licensure, such as the Colorado and Oregon State Boards of Nursing.
Lawsuits and legal actions. We may share information in response to a court or administrative order, or in response to a subpoena or other lawful process, subject to legal requirements.
Law enforcement. We may share information for law enforcement purposes as permitted by law, such as responding to a court order or warrant, or reporting a crime on our premises.
Coroners, medical examiners, and funeral directors. We may share information as necessary for them to carry out their duties.
Organ and tissue donation. We may share information with organ procurement organizations.
Research. We may use or share information for research in limited circumstances permitted by law, such as with the approval of an institutional review board or privacy board.
Workers' compensation. We may share information as authorized by workers' compensation laws.
Specialized government functions. We may share information for military, national security, protective services, or correctional institution purposes as permitted by law.
De-identified information and limited data sets. We may use or share information that has been de-identified or, under a data use agreement, a limited data set.
Uses and disclosures that require your written authorization:
Marketing communications, other than face-to-face communications or promotional gifts of nominal value.
Sale of your PHI.
Most uses and disclosures of psychotherapy notes.
Use of your photographs (including before-and-after photos) or testimonials in advertising, on our websites, or on social media.
Any other use or disclosure not described in this Notice.
You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.
Fundraising. We do not engage in fundraising.
State Law
Some Colorado and Oregon laws provide greater privacy protection than HIPAA for certain types of information, such as information about HIV/AIDS and other communicable diseases, genetic testing, mental health, substance use treatment, and minors' health care. When a state law is more protective of your privacy than HIPAA, we will follow the more protective law.
Your Rights
When it comes to your health information, you have certain rights. To exercise any of these rights, contact our Privacy Officer using the information at the end of this Notice. We may ask you to make certain requests in writing.
Get a copy of your medical record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide a copy or a summary, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
Ask us to correct your medical record. You can ask us to correct health information that you think is incorrect or incomplete. We may say "no," but we will tell you why in writing within 60 days.
Request confidential communications. You can ask us to contact you in a specific way (for example, at a particular phone number or email address) or to send mail to a different address. We will say "yes" to all reasonable requests.
Ask us to limit what we use or share. You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree, and we may say "no" if it would affect your care. If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information with your health insurer for payment or operations purposes, and we will say "yes" unless a law requires us to share it.
Get a list of those with whom we've shared information. You can ask for a list (accounting) of the times we've shared your health information for six years prior to the date you ask, who we shared it with, and why. We will include all disclosures except those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We'll provide one accounting a year for free but may charge a reasonable, cost-based fee if you ask for another within 12 months.
Get a copy of this Notice. You can ask for a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
Choose someone to act for you. If you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will verify that the person has this authority before we take any action.
Minors. We may treat minors with the consent of a parent or legal guardian. A parent or legal guardian generally exercises the rights in this Notice on behalf of a minor, except where Colorado or Oregon law allows a minor to consent to their own care and to control the related information.
Be notified of a breach. You have the right to be notified following a breach of your unsecured PHI.
Your Choices
For certain health information, you can tell us your choices about what we share, including whether to share information with your family, close friends, or others involved in your care, and whether to share information in a disaster relief situation. We never share your information for marketing purposes or sell your information unless you give us written permission. You may opt out of promotional text messages by replying STOP and out of marketing emails by using the unsubscribe link.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer (below). You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
We will not retaliate against you for filing a complaint.
Privacy Officer Contact Information
Privacy Officer, available upon request, Luxus Aesthetics LLC
Email: luxusaesthetics@gmail.com
Phone: (719) 747-6456 (Colorado Springs) | (971) 349-0942 (Happy Valley)
Mail: 208 Dusty Hills Ct, Colorado Springs, CO 80919
Effective Date
This Notice is effective October 7, 2026.