Last Updated: October 2026
This Privacy Policy describes how Flower Mound Med Spa (“we,” “us,” or “our”) collects, uses, and shares your personal information when you visit https://medspafm.com (the “Site”), submit a form, request an appointment, or otherwise communicate with us.
Flower Mound Med Spa is a medical practice owned by a licensed physician, and our services are provided by licensed healthcare providers. As a result, health information we maintain about our patients is protected by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and related regulations.
This Privacy Policy covers information collected through the Site and our marketing and communication channels. Once you become a patient, your protected health information (“PHI”) is also governed by our Notice of Privacy Practices, available at our office and upon request. If this Privacy Policy and our Notice of Privacy Practices ever conflict regarding PHI, the Notice of Privacy Practices controls.
Information We Collect
Information you provide to us. When you fill out a form, request or book an appointment, sign up for offers, or contact us by phone, email, text, or chat, we may collect:
- Your name, email address, and phone number
- Your preferred appointment date, time, and location
- The services or treatments you are interested in
- Any information you include in a message to us
- Payment information, which is processed by our third-party payment processor
We refer to this as “Contact Information.”
Information collected automatically. When you visit the Site, we automatically collect certain information about your device, including your browser type, IP address, time zone, referring website, pages viewed, and how you interact with the Site. We refer to this as “Device Information.” We collect Device Information using:
- Cookies, which are small data files placed on your device that often include an anonymous unique identifier. To learn how to disable cookies, visit http://www.allaboutcookies.org.
- Log files, which record actions on the Site, including IP address, browser type, internet service provider, referring and exit pages, and date and time stamps.
- Pixels, tags, and web beacons, which are small electronic files that record how you browse the Site.
Please do not submit detailed medical history through our website forms. Your provider will review your health history with you during your consultation.
How We Use Your Information
We use Contact Information to:
- Respond to your inquiries and schedule, confirm, or reschedule appointments
- Send appointment reminders and follow-up communications
- Provide customer support
- Process payments and send receipts
- Send text messages if you opt in, as described below
- Send information about our services and promotions, when consistent with your preferences and applicable law
- Screen for potential fraud or misuse
We use Device Information to maintain and improve the Site, understand how visitors use it, screen for fraud, and measure the performance of our marketing.
We will not use your health information for marketing purposes without your written authorization, except as permitted by HIPAA.
Health Information and HIPAA
Flower Mound Med Spa is a HIPAA covered entity. We are required by law to maintain the privacy and security of your protected health information, to provide you with notice of our legal duties and privacy practices, and to notify you following a breach of unsecured PHI.
How we protect health information. We use and disclose PHI only for treatment, payment, and healthcare operations, or as otherwise permitted or required by law, as described in our Notice of Privacy Practices. Any other use or disclosure requires your written authorization, which you may revoke at any time in writing.
Information you share before your first visit. We treat information you send us about your health, symptoms, or the treatments you are interested in as confidential, and we handle it with the same safeguards we use for PHI.
Tracking technologies. We do not use cookies, pixels, or similar technologies to disclose PHI to advertising or analytics platforms without your authorization. Where we use these tools, they are configured to exclude form contents and health-related details.
We do not sell PHI.
Your rights regarding PHI. As a patient, you have the right to:
- Inspect and receive a copy of your health records
- Request corrections to your health records
- Request restrictions on certain uses and disclosures
- Request that we communicate with you by alternative means or at an alternative location
- Receive an accounting of certain disclosures
- Receive a paper copy of our Notice of Privacy Practices
- Be notified of a breach of your unsecured PHI
To exercise these rights, contact our Privacy Officer using the information in the “Contact Us” section below.
Complaints. If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services Office for Civil Rights at https://www.hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.
SMS / Text Messaging
If you provide your mobile number and opt in to receive text messages from Flower Mound Med Spa, we may send appointment confirmations and reminders, responses to your inquiries, and service updates. If you opt in separately, we may also send promotional messages.
- Consent to receive text messages is not a condition of purchase or of receiving care.
- Message frequency varies.
- Message and data rates may apply.
- Reply STOP to any message to opt out at any time.
- Reply HELP for help, or contact us using the information below.
- Carriers are not liable for delayed or undelivered messages.
- Our text messaging program is intended for individuals 18 years of age and older. By opting in, you confirm you are at least 18 and are the subscriber of the mobile number provided or are authorized to enroll it.
SMS data. If you opt in, we collect and store your phone number, opt-in and opt-out status, message content, delivery confirmations, and timestamps to provide the service and keep records of your preferences.
Text message privacy. Standard text messaging is not encrypted. We limit health details in text messages, and you may ask us to contact you by another method at any time.
Mobile information sharing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors and service providers that support our services, such as customer service, messaging, and operational support. Text messaging originator opt-in data and consent will not be shared with any third parties, except as needed to provide the messaging service and as required by law.
How We Share Your Information
We do not sell your personal information or your health information. We share information only as described below.
- Service providers. We work with vendors that help us operate our practice, such as website hosting, online scheduling, electronic health records, customer relationship management, messaging, and payment processing. Vendors that handle PHI on our behalf are required to sign a Business Associate Agreement and protect that information as HIPAA requires.
- Legal requirements. We may disclose information to comply with applicable laws, respond to a subpoena, court order, or other lawful request, or protect our rights, our patients, and others.
- Business transfers. If our practice is sold, merged, or transferred, information may be transferred as part of that transaction, subject to applicable law.
Analytics and Advertising
We use Google Analytics to understand how visitors use the Site. You can read how Google uses information at https://policies.google.com/privacy and opt out at https://tools.google.com/dlpage/gaoptout.
We may use advertising platforms such as Meta (Facebook and Instagram) and Google to show ads about our services and measure their results. These tools may use cookies and pixels to record general browsing activity on the Site. We configure them so that form contents, appointment details, and health information are not sent to these platforms.
You can opt out of personalized advertising here:
- Meta: https://www.facebook.com/adpreferences
- Google: https://myadcenter.google.com
- Microsoft: https://account.microsoft.com/privacy/ad-settings
- Digital Advertising Alliance: https://optout.aboutads.info
- Network Advertising Initiative: https://optout.networkadvertising.org
Do Not Track
We do not currently change our data collection practices in response to Do Not Track signals from your browser.
Data Security
We use administrative, technical, and physical safeguards designed to protect your information from loss, theft, misuse, and unauthorized access, including access controls and secure technologies, as required by HIPAA. No method of internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.
Data Retention
We keep Contact Information and Device Information for as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Medical records are retained for the periods required by Texas law and the Texas Medical Board.
Your Rights and Choices
Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, and to learn how we collect, use, and share it. Medical records are subject to legal retention requirements and may not be deleted on request. To make a request, contact us using the information below. We may need to verify your identity first.
- Marketing emails: Use the unsubscribe link in any email, or contact us.
- Text messages: Reply STOP at any time.
Texas residents. We do not sell your personal data or your sensitive data, including health information.
Children’s Privacy
The Site is not directed to children under 13, and we do not knowingly collect personal information from children through the Site. Treatment of minors requires the consent of a parent or legal guardian.
Changes to This Policy
We may update this Privacy Policy to reflect changes to our practices or for legal, operational, or regulatory reasons. The “Last Updated” date at the top shows when it was last revised.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or would like to file a complaint, please contact our Privacy Officer:
Flower Mound Med Spa
Attn: Privacy Officer
2601 Lakeside Pkwy #180
Flower Mound, TX 75022
Phone: (972) 874-0008