Privacy policy

This page contains our Notice of Privacy Practices and our Website Privacy Policy.

Notice of Privacy Practices

Effective date: November 3, 2026

This notice describes how Be You Medical Aesthetics protects the confidentiality of your medical information and the rights you have regarding it under California law. Please review it carefully.

Be You Medical Aesthetics, doing business as Be You Medical ("we," "us," or "our"), is a licensed healthcare provider. We are required by the California Confidentiality of Medical Information Act (CMIA, California Civil Code section 56 and following) and other applicable California law to maintain the privacy of your medical information, to provide you with this notice of our duties and privacy practices, and to notify you if your medical information is subject to a security breach or unauthorized access, use, or disclosure, as required by California law. We are required to follow the terms of the notice currently in effect. This notice applies to all records of your care generated by our practice.

How we may use and disclose your medical information

These categories summarize the main ways we use and disclose medical information under California law.

For treatment. We use and disclose your medical information to provide, coordinate, and manage your care. For example, providers and staff involved in your care may share information to plan a treatment, and we may share information with a compounding pharmacy or laboratory that fills a prescription or processes a specimen for you.

For payment. We use and disclose your medical information to bill and collect payment for services. For example, we may share information with your payment card processor, or provide information needed to verify or reconcile a transaction.

To operate our practice. We use and disclose your medical information to run our practice. For example, we may use information to review the quality of care, train staff, and manage our business.

Appointment reminders and health-related communications. We may use your contact information and treatment history to remind you of appointments and to tell you about our own treatments, products, services, and memberships. We do not receive payment from any third party for these communications. If we ever would, we will first obtain your written authorization. You may opt out of promotional communications at any time (see 'Your choices about communications').

Individuals involved in your care. We may share medical information directly relevant to a person's involvement in your care or payment with a family member, other relative, domestic partner, close personal friend, or other person you identify, if you agree or do not object when given the chance. If you are not present or cannot agree because of incapacity or an emergency, we may share it if we determine in our professional judgment that doing so is in your best interest.

Uses and disclosures that require your written authorization

Under the CMIA, the default rule is that we will not disclose your medical information without your written authorization. The following uses and disclosures will be made only with your authorization:

Marketing communications for which we receive any direct or indirect payment or other economic benefit from a third party, and any use of your medical information to market a third party's products or services
Disclosures that constitute a sale of your medical information
Any other disclosure of your medical information, unless California law (including Civil Code section 56.10(b) or (c)) requires or permits it without authorization

We will not share your medical information with advertising platforms (such as social media or search advertising services) without your written authorization. Any authorization we request will meet the requirements of California Civil Code section 56.11, and we will give you a copy.

You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it. Instructions for revoking an authorization are available by emailing info@beyouthful.com.

Uses and disclosures permitted or required without your authorization

We may use or disclose your medical information without your authorization in the following circumstances, as permitted or required by California law:

As required by law
Public health activities, such as reporting disease, injury, and vital events
Victims of abuse, neglect, or domestic violence
Health oversight activities, such as audits and investigations
Judicial and administrative proceedings, in response to a valid order, subpoena, or similar process
Law enforcement purposes, under the conditions permitted by law
Coroners, medical examiners, and funeral directors
To avert a serious threat to health or safety
Workers' compensation, to the extent necessary to comply with applicable law

Your rights regarding your medical information

You have the following rights with respect to your medical information:

Right to access. You may inspect and obtain a copy of your medical records, as provided under California Health and Safety Code section 123110. We may charge a reasonable, cost-based fee.
Right to add an addendum. If you believe your records are incorrect or incomplete, you may submit a written addendum of up to 250 words per item you dispute, as provided under California law.
Requests to limit use or disclosure. You may ask us to limit how we use or share your medical information. We will consider your request but are not required to agree, except where California law requires it. If we agree, we will honor the limit except in an emergency or as required by law.
Right to confidential communications. You may request that we communicate with you in a certain way or at a certain location.
Right to a paper copy. You may obtain a paper copy of this notice at any time, even if you agreed to receive it electronically.
Right to be notified of a breach. You have the right to be notified if your medical information is acquired, accessed, used, or disclosed without authorization, as required by California law (including California Civil Code section 1798.82).

To exercise any of these rights, submit your request in writing to info@beyouthful.com or by mail using the contact information below.

Your choices about communications

You can stop promotional emails by using the unsubscribe link, and stop texts by replying UNSUB (or STOP), or by contacting us at info@beyouthful.com. Opting out does not affect appointment reminders or communications about your care.

Our duties

We are required by California law to:

Maintain the privacy and security of your medical information
Provide you with this notice of our duties and privacy practices
Follow the terms of the notice currently in effect
Notify you of a breach involving your medical information as required by California law

We reserve the right to change this notice and to make the revised notice effective for all medical information we maintain. If we make a material change, we will post the revised notice in our office and on our website, and make paper copies available on request. The current effective date appears at the top of this notice.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us by emailing info@beyouthful.com, or with the California Attorney General. Under the CMIA, you may also have the right to bring a civil action. We will not retaliate against you for filing a complaint.

Contact

If you have questions about this notice or wish to exercise your rights, contact:

Privacy questions and requests: Be You Medical Aesthetics, Attn: Privacy Requests, 5130 Commons Dr #101, Suite 302, Rocklin, CA 95677 · info@beyouthful.com · 916-223-9361

Privacy Policy

Effective date: November 3, 2026

Introduction

This Privacy Policy explains how Be You Medical Aesthetics, doing business as Be You Medical and operating the website beyouthful.com (referred to as "Be You Medical," "we," "us," or "our"), collects, uses, discloses, and protects information about you when you visit our website, request or receive services, or otherwise interact with us.

Please read this policy carefully. By using our website or providing information to us, you agree to the practices described here. If you do not agree, please do not use the website.

How this policy relates to your medical information

Be You Medical is a licensed healthcare provider in California. Some of the information we handle is medical information protected under the California Confidentiality of Medical Information Act (CMIA, California Civil Code section 56 and following) and other applicable California law. Other information we handle, such as website analytics and general marketing data, is not medical information and is governed by this Privacy Policy and laws such as the California Consumer Privacy Act (CCPA).

This Privacy Policy governs information collected through our website and general business operations, such as contact form entries, marketing sign-ups, cookies, and analytics. It is not a substitute for our Notice of Privacy Practices.

Our Notice of Privacy Practices, which appears on this page above, describes how we protect your medical information and the rights you have regarding it under California law. If any conflict exists between this Privacy Policy and our Notice of Privacy Practices regarding medical information, the Notice of Privacy Practices controls. You can also request a paper copy by contacting us using the details at the end of this policy.

Information we collect

Information you provide to us. We collect information you submit directly, including:

Name, email address, phone number, and mailing address
Appointment requests and consultation inquiries
Account and purchase details when you buy products or memberships
Payment information you enter at checkout
Messages, feedback, and other communications you send us

Information collected automatically. When you visit our website, we and our service providers may collect:

Device and browser type, operating system, and language settings
IP address and general location
Pages viewed, links clicked, referring pages, and time spent
Cookie and similar identifiers (see Cookies and Tracking Technologies below)

Medical information. When you become a patient, complete intake forms, or receive care, we collect health information necessary to provide treatment. This information is protected under the CMIA and is handled in accordance with our Notice of Privacy Practices, not this website policy.

How we use your information

We use the information we collect to:

Respond to inquiries and schedule appointments
Provide, personalize, and improve our services and website
Process transactions and manage memberships
Send appointment reminders and service communications
Send marketing and promotional messages where you have consented or as permitted by law
Conduct analytics and measure website performance. We measure campaign performance using our own sales and booking records, not third-party tracking technologies.
Maintain the security of our systems and prevent fraud
Comply with legal obligations and enforce our terms

We do not sell your medical information, share it with advertising platforms, or use it for marketing paid for by a third party, unless you have given us a written authorization that meets California Civil Code section 56.11. We may use your contact information and service history to tell you about our own services and memberships, and you may opt out at any time.

Virtual consultations

Virtual GLP-1 consultation calls are not recorded.

Cookies and tracking technologies

Our website uses cookies and similar technologies.

We currently use only cookies necessary for the site to function, including those set by our e-commerce and booking providers. We do not use Google Analytics, Meta/Facebook pixels, or other advertising or retargeting technologies. If we add analytics in the future, it will remain off until you consent through a cookie banner.

We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information and to disable non-essential tracking.

Do Not Track: Our website does not respond to browser 'Do Not Track' signals, but we honor Global Privacy Control as described above.

We do not use advertising or retargeting pixels on our website and do not share website data with advertising platforms.

Disabling certain cookies may affect how the website functions. See Your Privacy Rights below for more on opt-out rights.

How we share your information

We share information only as described here:

Service providers and vendors. We use vendors to host our website, process payments, send communications, and provide scheduling and patient management. Vendors that handle medical information on our behalf are bound by written agreements that require them to protect that information and use it only to provide services to us.
To provide care and operate our practice. We share medical information as needed to provide and coordinate your care, process payment, and run our practice, as described in our Notice of Privacy Practices.
Legal and safety reasons. We may disclose information to comply with law, respond to lawful requests, protect our rights, or protect the safety of patients and others.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

We do not sell your medical information. We do not sell or share personal information for cross-context behavioral advertising.

Text message and email marketing

If you opt in to receive text messages or emails from us, we will send you appointment information, offers, and updates. Message and data rates may apply for text messages. You can opt out of texts at any time by replying UNSUB (or STOP). For help, call us at 916-223-9361 or reply to any message with your question. You can unsubscribe from marketing emails using the link in any message. Opting out of marketing does not stop transactional or treatment-related communications.

Payment processing

Payments are processed by third-party payment processors. We do not store full payment card numbers on our systems. Your payment information is handled in accordance with the processor's security standards, including the Payment Card Industry Data Security Standard (PCI DSS).

Data security

We maintain physical, electronic, and administrative safeguards designed to protect the information we hold, including medical information, against unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by California law.

Your privacy rights

Your medical information rights. With respect to your medical records, you have rights under California law that include the right to inspect and obtain a copy of your records and to add a written addendum. These rights and how to exercise them are described in our Notice of Privacy Practices.

California residents. Under the California Consumer Privacy Act, as amended, you have the right to:

Know what personal information we collect, use, and disclose
Request access to and a copy of your personal information
Request correction of inaccurate personal information
Request deletion of your personal information
Opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not currently sell or share personal information)
Limit the use of sensitive personal information
Not be discriminated against for exercising your rights

Medical information governed by the CMIA is exempt from certain CCPA requests. We will apply the protections required by whichever law provides the greater protection.

Residents of other states. If you live in a state with a comprehensive privacy law, you may have similar rights. Contact us to exercise them and we will respond as required by applicable law.

How to exercise your rights. To make a request, contact us using the details at the end of this policy. We will verify your identity before fulfilling your request and will respond within the time frame required by law. You may designate an authorized agent to act on your behalf where permitted.

Data retention

We retain information for as long as needed to provide services, comply with our legal and regulatory obligations (including medical record retention requirements), resolve disputes, and enforce our agreements. Retention periods for medical records are set by applicable law, including California law and professional licensing requirements.

Children's privacy

Our services are intended for adults 18 and older. Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the website. If you believe a child has provided us information through the website, please contact us so we can address it.

Links to other websites

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any site you visit.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. If we make material changes, we will post the updated policy with a new effective date and display a notice on our homepage for at least 30 days.

Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, contact: