Privacy Policy / Notice of Privacy Practices

Effective Date: 10/16/2025

This Privacy Policy / Notice of Privacy Practices (“Policy”) describes how Airship Electrolysis (“we,” “us,” “our” or “the Clinic”) collects, uses, discloses, stores, and protects personal and health-related information. It also describes your rights regarding your information.

By using our website (https://www.airshipelectrolysis.com/) or obtaining services from us, you consent to the practices described herein, subject to any more specific agreements (e.g. intake forms, consent forms) you sign.

1. Definitions

- “Protected Health Information” (PHI): Information about your past, present, or future physical health or condition (including gender‑affirming care, treatment history, etc.) that can identify you (name, address, contact, etc.).

- “Personal Information / Personal Data”: Information that identifies you or can reasonably be used to identify you (e.g. name, email, phone, address, date of birth).

- “Business Associate / Service Provider”: A third party performing services for us that may receive or handle PHI or Personal Information under agreement to protect your privacy.

- “Use”: When we access, handle, apply, analyze, or otherwise work with information within Airship Electrolysis.

- “Disclosure / Disclosure to”: When we share, transmit, release, or make available your information to a third party.

2. Information We Collect

We may collect and maintain the following categories of information:

a) Information You Provide to Us

- Contact data: name, address, telephone number, email address

- Demographic data: date of birth, gender identity, pronouns

- Clinical / treatment data: skin type, hair growth history, medical/health history relevant to electrolysis

- Appointment or scheduling data

- Payment and billing data (if applicable)

- Communications: messages, forms, consultation notes, images/photos related to treatment area

b) Information We Collect Automatically / Technologically

Website analytics: IP address, device type, browser, pages visited

Cookies, tracking technologies (for website operation, performance metrics, user experience)

Log data (time stamps, referral source, errors)

3. Use of Information

We use your information for these purposes:

- To provide, coordinate, and manage your care (scheduling, treatment planning, follow‑ups)

- To communicate with you (reminders, confirmations, updates)

- To bill and collect payment (if relevant)

- To maintain records and documentation

- To improve our services, perform internal analytics, track outcomes

- To comply with legal, regulatory, or ethical obligations

- To send you marketing communications or newsletters (with your consent)

- To protect safety, legal rights, or for emergency purposes

4. Disclosures of Information

We may disclose your PHI / personal data in the following circumstances:

- Disclosure Type Recipients / Purposes

- Treatment & care coordination To clinicians, staff, or other providers involved in your care (if you consent)

- Business associates / service providers Entities helping us operate (IT, billing, software vendors), under confidentiality obligations

- Legal / regulatory obligations Courts, government agencies, law enforcement when required by law

- Emergencies / safety To prevent threat to health or safety of you or others

With your authorization We will obtain your written consent before using or disclosing PHI for purposes not otherwise permitted

If a disclosure is made under this Policy, we will limit it to the minimum necessary to achieve the purpose.

5. Your Rights Regarding Your Information

You have certain rights under privacy laws:

Access / Copy: You may request access to your PHI / personal data and obtain copies (in paper or electronic form).

Amend or Correct: You may request corrections to incorrect or incomplete information.

Request Restriction: You may ask us to restrict uses or disclosures (though we are not always legally obligated to comply).

Accounting of Disclosures: You can request a list of disclosures of your PHI we’ve made (except disclosures for treatment, payment, operations, or with authorization).

Right to Withdraw Consent: You can revoke your consent (in writing) for certain uses or disclosures, except where action has been taken already.

Right to Confidential Communications: You may request to receive communications by alternate means (e.g. email instead of phone) or at alternate locations.

Right to File Complaint: You can file a complaint if you believe your privacy rights have been violated.

To exercise these rights, please contact us using the information below. We may require a written request and reasonable identification.

6. Technical & Organizational Safeguards

We adopt administrative, physical, and technical safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. Examples include:

Access controls (passwords, role-based permissions)

Encryption of data in transit and at rest (when feasible)

Secure storage (locked files, secure servers)

Regular staff training and confidentiality policies

Periodic review of our security practices

7. Data Retention

We retain your PHI / personal data as long as needed to fulfill its intended purpose, or as required by law, whichever is longer. After that, we will securely destroy or de-identify it.

8. Children & Minors

We do not knowingly collect health information from children under [choose age, e.g., 13] without parental or guardian consent. If you believe we have collected data from a minor without permission, please contact us to have it removed.

9. Cookies & Tracking / Website Use

Our site uses cookies and similar technologies to:

Provide core functionality

Analyze and improve site performance

Understand user behavior and trends

You may disable or block cookies through your browser settings, though this may impact website functionality.

10. Changes to This Policy

We may update this Policy from time to time (e.g., when legal requirements change). When we do, we’ll update the “Effective Date” and post the revised version on our website. Continued use of our services after changes indicates your acceptance.

11. Contact & Privacy Officer

If you have questions, concerns, or wish to exercise your rights, please contact:

Airship Electrolysis

airshipelectrolysis.com

3101 Telegraph Ave, Berkeley, CA 94705

[email protected]

(510) 812-7084

12. Notice That This Is Not a HIPAA “Notice of Privacy Practices” (Unless You Are a Covered Entity)

Important note: Whether we are bound by HIPAA depends on whether we qualify as a “covered entity” or “business associate.” If you are subject to HIPAA, additional provisions may be required (e.g. breach notification rules, special patient rights). For health privacy regulation, we recommend consulting with a healthcare attorney to confirm whether Airship Electrolysis must fully comply with HIPAA or state medical privacy laws such as your state’s health information statutes.