PRIVACY POLICY

Effective Date: September 17, 2026

Last Updated: September 17, 2026

True VIP Aesthetics LLC dba SeRVe Wellness & Aesthetics (“SeRVe,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide when visiting our website, communicating with our practice, scheduling services, purchasing products, or otherwise interacting with us.

This Privacy Policy explains what information we may collect through our website, how we may use and disclose that information, and the choices available to you.

This Privacy Policy applies to serveaesthetics.com and other webpages or online services operated by SeRVe that link to this Policy.

This Website Privacy Policy is separate from our Notice of Privacy Practices, which describes how protected health information may be used and disclosed in connection with healthcare services.

1. INFORMATION WE MAY COLLECT

Depending upon how you interact with our website, we may collect the following categories of information.

Information You Provide Directly

You may voluntarily provide information such as:

• Name;
• Email address;
• Telephone number;
• Mailing or billing address;
• Date of birth when required;
• Appointment requests;
• Service or treatment interests;
• Messages submitted through contact forms;
• Information submitted through consultation or intake forms;
• Photographs or other files you choose to submit;
• Product orders or purchase information;
• Payment or transaction information;
• Marketing preferences;
• Reviews, testimonials, survey responses, or other communications; and
• Other information you voluntarily provide.

If you provide medical or health-related information through our website or another SeRVe communication system, that information may also be subject to additional privacy protections and SeRVe’s Notice of Privacy Practices where applicable.

2. HEALTH INFORMATION

Our website contains information regarding medical aesthetic and wellness services and may provide ways to contact our office, request an appointment, or access patient-related services.

Information you provide in connection with receiving healthcare services may become part of your medical record.

Where information constitutes protected health information (“PHI”) under applicable law, SeRVe handles that information in accordance with applicable healthcare privacy requirements and our Notice of Privacy Practices.

This Website Privacy Policy does not replace our Notice of Privacy Practices.

We encourage clients to use the secure communication methods provided by SeRVe when sending sensitive medical information, detailed treatment concerns, medical photographs, or other confidential health information.

Please do not use a general website contact form, social media message, or ordinary email for a medical emergency.

If you are experiencing a medical emergency, call 911 or seek immediate emergency medical care.

3. INFORMATION COLLECTED AUTOMATICALLY

When you visit our website, certain information may be collected automatically by our website, hosting provider, security services, analytics providers, or other technology used to operate the site.

This information may include:

• Internet Protocol (IP) address;
• Browser type;
• Device type;
• Operating system;
• General geographic information derived from an IP address;
• Referring website;
• Pages viewed;
• Date and time of visits;
• Links clicked;
• Time spent on pages;
• Website navigation and interaction information;
• Device identifiers;
• Cookie identifiers;
• Other technical information used to operate, secure, troubleshoot, or improve the website.

We may use this information to understand website performance, improve the user experience, detect security threats, troubleshoot technical problems, and better understand how visitors interact with our website.

4. COOKIES & SIMILAR TECHNOLOGIES

Our website may use cookies, pixels, tags, scripts, analytics tools, and similar technologies.

Cookies are small files placed on a device that may help a website remember preferences, understand website activity, maintain security, or provide functionality.

We may use cookies or similar technologies for purposes such as:

• Website functionality;
• Security and fraud prevention;
• Remembering user preferences;
• Measuring website traffic;
• Understanding which pages are most frequently visited;
• Improving website design and performance;
• Measuring marketing effectiveness; and
• Providing or evaluating advertising where permitted by law.

Some cookies may be provided by third parties whose services are incorporated into our website.

You may be able to control cookies through your browser settings or through a cookie-preference tool if one is made available on our website.

Blocking certain cookies may affect the functionality of portions of the website.

5. ANALYTICS, ADVERTISING & TRACKING TECHNOLOGIES

We may use third-party tools to understand website traffic and measure the effectiveness of our online presence.

Depending upon the tools enabled on our website, these may include analytics, search-engine, advertising, social-media, security, performance, or website-management technologies.

We do not intentionally use advertising or tracking technologies to disclose protected health information for advertising purposes in violation of applicable healthcare privacy law.

We take particular care with webpages, forms, patient portals, appointment systems, and other technologies that may collect health-related or patient-identifying information.

The presence of a cookie banner or consent mechanism does not replace any healthcare authorization or privacy protections that may otherwise be required by law.

6. HOW WE USE INFORMATION

We may use personal information for legitimate business and healthcare-related purposes, including to:

• Respond to inquiries;
• Schedule, confirm, change, or cancel appointments;
• Provide requested information about our services;
• Communicate regarding consultations or treatments;
• Provide appropriate pre-treatment or post-treatment information;
• Provide customer service;
• Process orders and transactions;
• Maintain business and patient records;
• Manage memberships, packages, credits, or accounts;
• Send administrative communications;
• Send marketing communications when permitted and when you have provided any consent required by law;
• Operate and improve our website;
• Analyze website usage and performance;
• Maintain website and information security;
• Prevent fraud or misuse;
• Comply with legal, regulatory, licensing, or professional obligations;
• Establish, exercise, or defend legal rights; and
• Carry out other purposes disclosed to you at the time information is collected.

7. MARKETING EMAILS & TEXT MESSAGES

If you separately choose to receive newsletters, promotions, specials, marketing emails, or marketing text messages from SeRVe, we may use your contact information for those purposes.

Consent to marketing communications is not a condition of receiving treatment or purchasing services from SeRVe.

You may opt out of marketing communications at any time using the unsubscribe or opt-out method provided in the communication.

Opting out of marketing messages does not prevent SeRVe from contacting you regarding:

• Appointments;
• Treatment;
• Follow-up care;
• Billing;
• Account matters;
• Safety information;
• Other non-marketing communications reasonably related to your care or relationship with SeRVe.

Our separate Electronic Communication & Standard Text Messaging Consent may apply to treatment-related communications.

8. HOW WE MAY SHARE INFORMATION

We may share personal information with third parties when reasonably necessary to operate our practice, website, or services.

These may include:

• Website hosting providers;
• WordPress and website-management providers;
• Website designers or developers;
• Security and fraud-prevention services;
• Scheduling or practice-management providers;
• Payment processors;
• Email or communication service providers;
• Analytics providers;
• Information-technology providers;
• Cloud-storage or data-hosting providers;
• Professional advisers such as attorneys, accountants, insurers, or compliance consultants;
• Vendors assisting with business operations; and
• Government, regulatory, licensing, law-enforcement, or other entities when disclosure is permitted or required by law.

When a vendor receives protected health information on behalf of SeRVe and applicable law requires a Business Associate Agreement or other contractual privacy protection, SeRVe will use appropriate agreements and safeguards as required.

9. SALE OF PERSONAL INFORMATION

SeRVe does not sell protected health information.

We do not sell personal information in exchange for money as part of our ordinary business operations.

Certain state privacy laws may define terms such as “sale,” “sharing,” or “targeted advertising” more broadly than an ordinary monetary sale.

If our use of advertising or analytics technology becomes subject to a state law requiring an opt-out or other consumer choice, we will provide the legally required mechanism.

10. APPOINTMENT BOOKING & THIRD-PARTY SERVICES

Our website may provide links to or integrate with third-party services used for functions such as:

• Appointment scheduling;
• Patient forms;
• Payments;
• Financing;
• Loyalty programs;
• Product purchases;
• Social media;
• Maps;
• Video consultations;
• Other services.

When you leave SeRVe’s website or interact directly with a third-party service, that provider may collect information under its own privacy policy and terms.

We encourage you to review the privacy practices of any third-party service you use.

Where a third-party provider handles protected health information on SeRVe’s behalf, additional healthcare privacy requirements may apply.

11. PAYMENT INFORMATION

When you make a payment online, payment-card information may be processed directly by a third-party payment processor.

SeRVe may receive information regarding the transaction, such as:

• Your name;
• Amount paid;
• Transaction date;
• Payment status;
• Limited payment-card information such as the last four digits of a card.

We do not intend to collect or store full payment-card numbers through ordinary website forms unless specifically necessary and appropriately secured.

Payment processors maintain their own privacy and security practices.

12. SOCIAL MEDIA

SeRVe may maintain profiles on social-media platforms such as Instagram, Facebook, TikTok, or other platforms.

Information you publicly post, comment, tag, send, or otherwise disclose through a social-media platform may be governed by that platform’s privacy practices.

Please do not send confidential medical information through public comments or social-media posts.

A social-media interaction does not create authorization for SeRVe to publicly disclose your medical information, clinical photographs, or treatment information.

Use of client photographs, videos, testimonials, or identifiable treatment information for SeRVe marketing is governed by our separate Photo, Video, Marketing & Educational Authorization when applicable.

13. VIRTUAL CONSULTATIONS

SeRVe may offer virtual consultations using third-party communication technology.

Information collected during a virtual healthcare consultation may become part of your medical record and may be subject to applicable healthcare privacy protections.

Our Virtual Consultation & Telehealth Consent provides additional information regarding virtual consultations, privacy considerations, technology limitations, and patient responsibilities.

14. WEBSITE FORMS

Information entered into a website form is transmitted electronically.

While SeRVe uses reasonable safeguards designed to protect information, no internet transmission or electronic storage method can be guaranteed to be completely secure.

For that reason, please avoid submitting highly sensitive medical information through a general website contact form unless the form is specifically identified as a secure method for providing such information.

For detailed medical questions or photographs, please use the secure communication method recommended by SeRVe.

15. INFORMATION SECURITY

SeRVe uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

These measures may include:

• Access controls;
• Password protections;
• Secure hosting;
• Software updates;
• Security monitoring;
• Encryption where appropriate;
• Restricted employee access;
• Vendor-management practices.

However, no website, electronic system, internet transmission, or storage environment can be guaranteed to be completely secure.

16. DATA BREACHES

If SeRVe discovers a breach or security incident involving personal information, we will investigate the incident and provide notices to affected individuals, regulators, or others when required by applicable law.

Arizona law contains specific notification requirements for certain security breaches involving Arizona residents’ personal information.

Healthcare information may also be subject to additional federal or state breach-notification requirements.

17. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing services;
• Maintaining business records;
• Complying with healthcare record-retention obligations;
• Fulfilling financial and tax requirements;
• Resolving disputes;
• Enforcing agreements;
• Meeting legal, regulatory, insurance, licensing, or professional requirements.

Different categories of information may be subject to different retention periods.

Requests to delete information may therefore be limited when SeRVe is legally or professionally required to retain the information.

18. YOUR PRIVACY CHOICES

Depending upon your relationship with SeRVe and applicable law, you may be able to request that we:

• Confirm whether we maintain certain personal information about you;
• Provide access to certain personal information;
• Correct inaccurate information;
• Update your contact information;
• Change communication preferences;
• Stop sending marketing communications;
• Delete certain information when retention is not otherwise required or permitted by law.

Rights regarding your medical records and protected health information are described separately in SeRVe’s Notice of Privacy Practices.

We may need to verify your identity before processing certain privacy requests.

19. STATE PRIVACY RIGHTS

Residents of certain states may have additional privacy rights under state law.

To the extent such laws apply to SeRVe or your information, we will honor applicable legally required rights and requests.

Nothing in this Privacy Policy is intended to limit rights that cannot legally be waived.

Certain healthcare information may be exempt from some general consumer privacy laws because it is separately regulated under healthcare privacy laws.

20. ARIZONA RESIDENTS

SeRVe Wellness & Aesthetics is located in Scottsdale, Arizona.

Arizona law provides protections relating to personal information and establishes requirements for notification of certain data breaches involving Arizona residents.

SeRVe will comply with applicable Arizona privacy, healthcare-record, and data-breach requirements.

21. CHILDREN’S PRIVACY

Our website and elective aesthetic services are not directed toward children under age 13.

We do not knowingly seek to collect personal information online directly from children under age 13 without appropriate parental or legal authorization where required.

If you believe a child has submitted information through our website improperly, please contact us.

Treatment of minors, when permitted, is subject to separate clinical, parental/guardian, and legal requirements.

22. THIRD-PARTY LINKS

Our website may contain links to websites or services operated by other organizations.

SeRVe is not responsible for the privacy practices, security, content, or policies of websites that we do not control.

A link to another website does not constitute an endorsement of that website’s privacy practices.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

23. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices;
• Website functionality;
• Technology;
• Vendors;
• Applicable law;
• Privacy and security practices.

The current version will be posted on our website with an updated “Last Updated” date.

Material changes will be communicated as required by applicable law.

24. CONTACT US

If you have questions about this Privacy Policy or wish to submit a privacy-related request, please contact:

True VIP Aesthetics LLC dba SeRVe Wellness & Aesthetics
3295 North Drinkwater Boulevard, Suite 6
Scottsdale, Arizona 85251

Phone: 480-625-6157
Email: truevipbeauty@gmail.com
Website: serveaesthetics.com

For questions involving your medical records or protected health information, please also review our Notice of Privacy Practices or contact SeRVe’s designated Privacy Officer.