Privacy Policy

WEBSITE PRIVACY POLICY 

Yuvan LLC d/b/a Specialty Wellness and Specialty MedSpa 
SpecialtyMedSpa.com 
Effective Date: August 24, 2026 

At Specialty Wellness, your privacy matters to us. This Website Privacy Policy (“Privacy Policy”) explains how Yuvan LLC, doing business as Specialty Wellness and Specialty MedSpa (“Specialty Wellness,” “Specialty MedSpa,” “we,” “us,” or “our”), collects, uses, discloses, and protects information when you visit or interact with SpecialtyMedSpa.com and related webpages, forms, booking tools, and online services (collectively, the “Site”). 

This Privacy Policy applies primarily to information collected through the Site and related digital interactions. 

Health information collected or maintained in connection with healthcare services may also be subject to our separate Notice of Privacy Practices and applicable federal and Texas healthcare privacy laws. 

This Privacy Policy applies to SpecialtyMedSpa.com and does not serve as the Website Privacy Policy for MySpecialtyMD.com or Koteshwara Nadipalli, PLLC d/b/a Specialty Primary Care and Wellness. 

 INFORMATION WE MAY COLLECT

Depending on how you interact with our Site, we may collect information directly from you, automatically through technology, or from service providers assisting us. 

Information You Provide 

You may provide information such as: 

  • name; 
  • telephone number; 
  • email address; 
  • mailing address; 
  • date of birth, when applicable; 
  • appointment preferences; 
  • services or treatments of interest; 
  • messages or questions; 
  • consultation requests; 
  • account or booking information; 
  • payment or transaction information; 
  • photographs or documents you choose to submit; 
  • health, treatment, or wellness information you voluntarily provide; 
  • communication preferences; and 
  • other information you submit through the Site. 

                              Please do not submit emergency medical information through website forms. 

                               INFORMATION COLLECTED AUTOMATICALLY

                              When you visit the Site, certain information may be collected automatically through cookies, server logs, pixels, software development kits, analytics technologies, or similar tools. 

                              Depending on our Site configuration, this information may include: 

                              • IP address; 
                              • browser type; 
                              • device type; 
                              • operating system; 
                              • approximate geographic location derived from IP address; 
                              • referring website; 
                              • pages viewed; 
                              • links clicked; 
                              • date and time of visits; 
                              • time spent on pages; 
                              • Site navigation activity; 
                              • advertising interactions; 
                              • cookie or device identifiers; and 
                              • technical information concerning Site performance. 

                                                        We use such information as permitted by applicable law for purposes such as operating the Site, maintaining security, understanding Site performance, improving user experience, measuring marketing effectiveness, and preventing fraud or misuse. 

                                                        HEALTH AND MEDICAL INFORMATION

                                                        Because Specialty Wellness provides physician-guided aesthetic and wellness services, information you submit through certain Site features may concern your health, treatment interests, medical history, symptoms, medications, photographs, or other potentially sensitive matters. 

                                                        Do not assume that every general website form, advertising form, chat feature, or ordinary email channel is intended for transmission of detailed medical information. 

                                                        When health information is collected in connection with healthcare services and is subject to HIPAA or another healthcare privacy law, we will handle that information in accordance with applicable law and our Notice of Privacy Practices. 

                                                        Where health information is protected by other applicable federal or Texas privacy laws, we will handle it in accordance with those requirements. 

                                                        HOW WE USE INFORMATION

                                                        We may use information collected through the Site for lawful purposes including to: 

                                                        • respond to questions and inquiries; 
                                                        • process consultation or appointment requests; 
                                                        • schedule, confirm, or manage appointments; 
                                                        • communicate regarding requested services; 
                                                        • provide customer and patient support; 
                                                        • facilitate treatment-related communications where appropriate; 
                                                        • maintain and improve the Site; 
                                                        • personalize Site functionality; 
                                                        • process transactions; 
                                                        • maintain records; 
                                                        • prevent fraud and unauthorized activity; 
                                                        • protect Site and information security; 
                                                        • perform analytics; 
                                                        • understand general interest in our services; 
                                                        • improve our services and patient experience; 
                                                        • comply with legal and regulatory requirements; 
                                                        • enforce our Terms and Conditions; and 
                                                        • send marketing communications when permitted by law and consistent with applicable consent requirements. 

                                                                                          We may also use information for other purposes, as disclosed to you when it is collected, or with your authorization or consent where required. 

                                                                                          ZENOTI AND ONLINE BOOKING

                                                                                          Specialty Wellness currently uses Zenoti for functions such as electronic records, appointment scheduling, online booking, practice management, communications, payments, forms, and related services. 

                                                                                          When you interact with Zenoti-enabled functionality on our Site or via a linked Zenoti interface, the information you provide may be processed by Zenoti systems. 

                                                                                          Depending on the interaction, this may include: 

                                                                                          • contact information; 
                                                                                          • appointment information; 
                                                                                          • treatment or service selections; 
                                                                                          • forms; 
                                                                                          • transaction information; 
                                                                                          • communication preferences; 
                                                                                          • photographs; 
                                                                                          • treatment-related information; and 
                                                                                          • other information you provide. 

                                                                                                          Zenoti’s processing of information may also be subject to contractual privacy and security requirements and its applicable privacy documentation. 

                                                                                                          Where Zenoti acts as a Business Associate under HIPAA, appropriate HIPAA requirements apply to that relationship. 

                                                                                                          COOKIES AND SIMILAR TECHNOLOGIES

                                                                                                          Our Site may use cookies and similar technologies to provide functionality, remember preferences, maintain security, analyze Site performance, and understand how visitors interact with the Site. 

                                                                                                          Cookies may include: 

                                                                                                          Essential Cookies 

                                                                                                          Necessary for Site functionality, security, navigation, or requested services. 

                                                                                                          Functional Cookies 

                                                                                                          Used to remember preferences or enhance Site functionality. 

                                                                                                          Analytics Cookies 

                                                                                                          Used to understand Site traffic, page usage, visitor interactions, and Site performance. 

                                                                                                          Advertising Technologies 

                                                                                                          Where legally and appropriately implemented, certain technologies may help measure advertising effectiveness or deliver relevant advertising. 

                                                                                                          The specific technologies used may change as our Site and vendors change. 

                                                                                                          Where required by applicable law, we will provide appropriate choices or consent mechanisms concerning non-essential cookies or similar technologies. 

                                                                                                          GOOGLE SERVICES

                                                                                                          We may use Google services such as Google Analytics, Google Ads, Google Tag Manager, or related Google technologies to understand Site activity, measure advertising performance, and improve our digital presence. 

                                                                                                          Depending on how these technologies are configured, Google may receive technical or online identifiers, such as cookie information, device information, IP-derived information, page interaction data, or advertising event data. 

                                                                                                          We do not intend to disclose PHI or identifiable sensitive medical information to Google for advertising purposes in a manner prohibited by applicable law. 

                                                                                                          Our use and configuration of Google technologies should be evaluated in light of applicable healthcare privacy requirements and Google’s applicable policies. 

                                                                                                          META AND SOCIAL MEDIA TECHNOLOGIES

                                                                                                          We may maintain pages, advertisements, or other digital activities on social media platforms such as Facebook and Instagram. 

                                                                                                          Where appropriately configured, our Site may use Meta or other social-media technologies for advertising measurement or related functions. 

                                                                                                          Social-media companies may independently collect information when you use their platforms or interact with their services, subject to their own privacy policies. 

                                                                                                          We do not intend to transmit PHI or identifiable sensitive medical information to Meta or other social-media advertising platforms in a manner prohibited by applicable law. 

                                                                                                          Health-related pages, appointment flows, patient portals, forms, and authenticated areas require particular care when advertising or tracking technologies are used. 

                                                                                                          IMPORTANT NOTICE REGARDING TRACKING TECHNOLOGIES AND HEALTH INFORMATION

                                                                                                          We recognize that information about an individual’s healthcare interests, appointments, conditions, treatments, or interactions with healthcare websites may be sensitive. 

                                                                                                          Accordingly, we seek to use analytics and advertising technologies in a manner consistent with applicable privacy law and healthcare privacy obligations. 

                                                                                                          We do not authorize third-party advertising technologies to intentionally collect PHI from authenticated patient areas, medical records, treatment forms, or other locations where such collection would violate applicable law. 

                                                                                                          The presence of a cookie banner or disclosure in this Privacy Policy does not, by itself, authorize a use or disclosure of health information that is otherwise prohibited by law. 

                                                                                                          TEXT MESSAGES AND SMS COMMUNICATIONS

                                                                                                          If you provide a mobile telephone number, we may send communications regarding inquiries, appointments, transactions, services, or care, where permitted by law. 

                                                                                                          Marketing or promotional text messages will be sent only in accordance with applicable consent requirements. 

                                                                                                          Where required, consent to receive marketing text messages is: 

                                                                                                          • voluntary; 
                                                                                                          • not a condition of purchasing goods or receiving healthcare services; and 
                                                                                                          • subject to applicable opt-out rights. 

                                                                                                              Message and data rates may apply. 

                                                                                                              You may follow applicable opt-out instructions provided in a message, such as replying STOP, where supported. 

                                                                                                              Consent requirements and practices for SMS communications may also be addressed in separate SMS Terms and Conditions. 

                                                                                                              EMAIL COMMUNICATIONS

                                                                                                              We may use your email address for communications concerning inquiries, appointments, transactions, services, educational information, or marketing where permitted. 

                                                                                                              You may unsubscribe from promotional emails through the unsubscribe mechanism provided in applicable communications. 

                                                                                                              Unsubscribing from marketing emails may not prevent us from sending non-marketing communications reasonably necessary for appointments, transactions, care, safety, or legal purposes. 

                                                                                                              Ordinary email may not always provide the same level of security as a designated healthcare communication platform. 

                                                                                                              PAYMENT INFORMATION

                                                                                                              If you purchase services, memberships, products, gift cards, or other offerings online, payment information may be processed by Zenoti or another authorized payment processor. 

                                                                                                              We may receive transaction-related information without necessarily receiving or storing complete payment-card details. 

                                                                                                              Payment processors maintain their own security, privacy, and compliance responsibilities. 

                                                                                                              Please review applicable checkout disclosures when completing transactions. 

                                                                                                              HOW WE MAY DISCLOSE INFORMATION

                                                                                                              We may disclose information where permitted by law to parties such as: 

                                                                                                              • technology and hosting providers; 
                                                                                                              • Zenoti and other practice-management providers; 
                                                                                                              • payment processors; 
                                                                                                              • communication providers; 
                                                                                                              • analytics providers; 
                                                                                                              • cybersecurity and fraud-prevention providers; 
                                                                                                              • professional advisers; 
                                                                                                              • legal and accounting providers; 
                                                                                                              • contractors supporting our business; 
                                                                                                              • governmental or regulatory authorities when required by law; and 
                                                                                                              • other parties with your authorization or at your direction. 

                                                                                                                                  Where a vendor processes PHI as our Business Associate, we will use appropriate contractual safeguards when required by HIPAA. 

                                                                                                                                  We do not permit service providers to use protected health information for purposes inconsistent with applicable law or applicable contractual restrictions. 

                                                                                                                                  SALE OF PERSONAL AND HEALTH INFORMATION

                                                                                                                                  Specialty Wellness does not sell patient medical records or PHI. 

                                                                                                                                  We do not sell PHI in violation of HIPAA or applicable Texas healthcare privacy law. 

                                                                                                                                  Certain consumer privacy laws define terms such as “sale,” “sharing,” or “targeted advertising” more broadly than an ordinary exchange of information for money. To the extent such laws apply to our activities, we will provide required disclosures and applicable consumer rights. TARGETED ADVERTISING

                                                                                                                                  We may use permitted digital advertising to inform consumers about Specialty Wellness services. 

                                                                                                                                  Where applicable law provides a right to opt out of processing personal data for targeted advertising, sale, or certain profiling, we will honor valid requests when the law applies to the information and processing activity. 

                                                                                                                                  We do not intend to use PHI or identifiable medical information for targeted advertising in violation of healthcare privacy law. 

                                                                                                                                  THIRD-PARTY WEBSITES AND SERVICES

                                                                                                                                  The Site may contain links to websites or services operated by third parties, including: 

                                                                                                                                  • Zenoti; 
                                                                                                                                  • financing providers; 
                                                                                                                                  • payment processors; 
                                                                                                                                  • social-media platforms; 
                                                                                                                                  • product manufacturers; 
                                                                                                                                  • educational resources; and 
                                                                                                                                  • other external services. 

                                                                                                                                              Once you leave our Site or interact directly with a third-party service, that party’s privacy practices may apply. 

                                                                                                                                              We are not responsible for the privacy or security practices of independent third-party websites. 

                                                                                                                                              We encourage you to review their privacy policies before providing information.

                                                                                                                                              DATA SECURITY

                                                                                                                                              We use reasonable administrative, physical, and technical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. 

                                                                                                                                              Safeguards may include, as appropriate: 

                                                                                                                                              • access controls; 
                                                                                                                                              • authentication; 
                                                                                                                                              • secure technology systems; 
                                                                                                                                              • employee training; 
                                                                                                                                              • vendor-management practices; 
                                                                                                                                              • security monitoring; and 
                                                                                                                                              • policies governing access to sensitive information. 

                                                                                                                                                          However, no website, internet transmission, email system, or electronic storage system can be guaranteed to be completely secure. 

                                                                                                                                                          You should use caution when transmitting sensitive information through ordinary internet or email channels. 

                                                                                                                                                           DATA RETENTION

                                                                                                                                                          We retain information for periods reasonably necessary to: 

                                                                                                                                                          • provide requested services; 
                                                                                                                                                          • maintain business and healthcare records; 
                                                                                                                                                          • satisfy legal and regulatory requirements; 
                                                                                                                                                          • resolve disputes; 
                                                                                                                                                          • maintain security; 
                                                                                                                                                          • enforce agreements; and 
                                                                                                                                                          • fulfill other legitimate purposes. 

                                                                                                                                                                      Medical and healthcare records may be subject to specific retention requirements under applicable law and professional standards. 

                                                                                                                                                                      Information may be retained longer where required by law, litigation hold, regulatory obligation, or another legitimate legal requirement.

                                                                                                                                                                      CHILDREN’S PRIVACY

                                                                                                                                                                      The Site is not designed to solicit personal information directly from children under 13. 

                                                                                                                                                                      Parents or legal guardians may provide information concerning minors when seeking legally permissible services on their behalf. 

                                                                                                                                                                      If we learn that personal information has been collected directly from a child in a manner inconsistent with applicable law, we will take appropriate action. 

                                                                                                                                                                      Certain services may have separate age, consent, or parental-authorization requirements. 

                                                                                                                                                                       TEXAS PRIVACY RIGHTS

                                                                                                                                                                      Depending upon the information involved, our legal status, applicable exemptions, and the purpose for which information is processed, Texas residents may have rights under applicable Texas privacy laws. 

                                                                                                                                                                      Where the Texas Data Privacy and Security Act or another applicable law provides rights concerning covered personal data, those rights may include the ability to request: 

                                                                                                                                                                      • confirmation of whether covered personal data is being processed; 
                                                                                                                                                                      • access to covered personal data; 
                                                                                                                                                                      • correction of inaccuracies; 
                                                                                                                                                                      • deletion of certain personal data; a portable copy of certain personal data; and 
                                                                                                                                                                      • opt-out from certain targeted advertising, sale of personal data, or qualifying profiling. 

                                                                                                                                                                                Not all information or organizations are subject to these provisions. Health information regulated by healthcare privacy laws and certain healthcare entities or activities may be subject to exemptions or different requirements. 

                                                                                                                                                                                We will evaluate privacy requests according to the law applicable to the particular information and processing activity. 

                                                                                                                                                                                HOW TO EXERCISE APPLICABLE PRIVACY RIGHTS

                                                                                                                                                                                To submit a privacy request, please contact us using the information provided below. 

                                                                                                                                                                                We may need to verify your identity before processing certain requests. 

                                                                                                                                                                                Where permitted by law, an authorized agent may submit certain requests on your behalf, subject to verification of the agent’s authority and your identity. 

                                                                                                                                                                                If we deny a request and applicable law provides a right to appeal that decision, we will provide information concerning the applicable appeal process. 

                                                                                                                                                                                We will not unlawfully discriminate against you for exercising a privacy right. 

                                                                                                                                                                                DO NOT TRACK AND PRIVACY PREFERENCE SIGNALS

                                                                                                                                                                                Web browsers and devices may provide privacy controls such as “Do Not Track” or other preference signals. 

                                                                                                                                                                                Because technologies and legal requirements continue to evolve, our Site will respond to legally recognized browser-based opt-out or universal preference mechanisms where required by applicable law and technically applicable to our processing activities. 

                                                                                                                                                                                Browser settings may also allow you to block or delete cookies. 

                                                                                                                                                                                Blocking certain cookies may affect Site functionality. 

                                                                                                                                                                                ARTIFICIAL INTELLIGENCE AND AUTOMATED TECHNOLOGIES

                                                                                                                                                                                We may use artificial intelligence, automated tools, chat technologies, algorithms, or other technology-assisted systems for appropriate purposes such as: 

                                                                                                                                                                                • administrative support; 
                                                                                                                                                                                • website assistance; 
                                                                                                                                                                                • scheduling; 
                                                                                                                                                                                • communications; 
                                                                                                                                                                                • analytics; 
                                                                                                                                                                                • educational content; 
                                                                                                                                                                                • workflow support; or 
                                                                                                                                                                                • other lawful functions. 

                                                                                                                                                                                              When such systems process health information or other sensitive information, applicable privacy and security requirements will be considered. 

                                                                                                                                                                                              We do not intend for a general website chatbot or automated website tool to replace individualized medical evaluation by a licensed healthcare professional. 

                                                                                                                                                                                              Please avoid submitting unnecessary sensitive medical information through general-purpose website AI or chat tools unless the tool is specifically designated for that purpose. 

                                                                                                                                                                                              CHANGES TO THIS PRIVACY POLICY

                                                                                                                                                                                              We may revise this Privacy Policy from time to time to reflect changes in: 

                                                                                                                                                                                              • our Site; 
                                                                                                                                                                                              • technologies; 
                                                                                                                                                                                              • vendors; 
                                                                                                                                                                                              • services; 
                                                                                                                                                                                              • privacy practices; or 
                                                                                                                                                                                              • applicable law. 

                                                                                                                                                                                                        The Effective Date at the top identifies the current version. 

                                                                                                                                                                                                        Material changes will be communicated or presented as required by applicable law. 

                                                                                                                                                                                                        We encourage you to periodically review this Privacy Policy. 

                                                                                                                                                                                                        RELATIONSHIP TO OUR NOTICE OF PRIVACY PRACTICES

                                                                                                                                                                                                        This Website Privacy Policy and our Notice of Privacy Practices (“NPP”) serve different purposes. 

                                                                                                                                                                                                        The Website Privacy Policy primarily explains how information is handled in connection with SpecialtyMedSpa.com and related digital interactions. 

                                                                                                                                                                                                        The NPP explains applicable practices and rights concerning health information maintained in connection with healthcare services. 

                                                                                                                                                                                                        If health information is subject to HIPAA or another healthcare privacy requirement and there is a conflict between this general Website Privacy Policy and a legally applicable NPP requirement, the applicable healthcare privacy requirement will control. 

                                                                                                                                                                                                        RELATIONSHIP TO OUR TERMS AND CONDITIONS

                                                                                                                                                                                                        Use of the Site is also subject to our Terms and Conditions. 

                                                                                                                                                                                                        The Terms and Conditions address matters such as Site use, medical disclaimers, intellectual property, appointments, payments, memberships, treatment eligibility, limitations of liability, and other conditions associated with use of the Site and Services. 

                                                                                                                                                                                                        CONTACT US

                                                                                                                                                                                                        For questions regarding this Privacy Policy or to submit an applicable privacy request, please contact: 

                                                                                                                                                                                                        Privacy Officer 

                                                                                                                                                                                                        Yuvan LLC 
                                                                                                                                                                                                        d/b/a Specialty Wellness and Specialty MedSpa 

                                                                                                                                                                                                        3800 Main Street, Suite 100 
                                                                                                                                                                                                        The Colony, Texas 75056 

                                                                                                                                                                                                        Phone: (469) 442-4442 
                                                                                                                                                                                                        Email: info@myspecialtymd.com 
                                                                                                                                                                                                        Website: SpecialtyMedSpa.com 

                                                                                                                                                                                                        For matters involving protected health information or medical records, please refer to our Notice of Privacy Practices for additional information concerning applicable patient rights and complaint procedures. 

                                                                                                                                                                                                        Yuvan LLC d/b/a Specialty Wellness and Specialty MedSpa 
                                                                                                                                                                                                        SpecialtyMedSpa.com 
                                                                                                                                                                                                        Website Privacy Policy 
                                                                                                                                                                                                        Effective August 24, 2026