Book Appointment
Privacy Policy
Contact Us

Privacy Policy

Effective Date: [September, 29, 2026]
Last Updated: [September, 29, 2026]

Ashley Molina, M.D., Inc., doing business as Vigorize Health (“Vigorize Health,” “we,” “us,” or “our”) operates the website located at vigorizehealth.com (the “Website”). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit the Website, submit a form, book an appointment online, or otherwise interact with us online.

1. Your Medical Information and Our Notice of Privacy Practices

Vigorize Health is a medical practice. Once you become a patient, the health information we create or receive in the course of your care (for example, your medical history, lab results, treatment plans, and billing records) is “protected health information” under the Health Insurance Portability and Accountability Act (“HIPAA”) and “medical information” under the California Confidentiality of Medical Information Act (“CMIA”). That information is governed by our Notice of Privacy Practices, which is available [at our office / at LINK] and describes your rights regarding your health records.

This Privacy Policy covers information collected through the Website generally. If there is a conflict between this Privacy Policy and our Notice of Privacy Practices regarding your protected health information, the Notice of Privacy Practices controls.

2. Information We Collect

Information you provide to us
  • Contact form: your name, email address, phone number, preferred date, and the contents of your message.
  • Online appointment booking: when you book through our scheduling tool, you provide information such as your name, contact details, date of birth, appointment type, and reason for visit. Online booking is provided through our electronic health record and practice management vendor (see Section 4).
  • Phone and email communications: information you share when you call or email us.
  • Payment and financing: if you apply for a payment plan, you apply directly with our third-party financing partner. We do not receive or store your full credit or bank card numbers through the Website.

Please do not include detailed medical information in the Website contact form or in regular email. These channels are intended for general inquiries and scheduling. We will discuss your health information with you through secure channels once you are a patient.

Information collected automatically

When you visit the Website, we and our service providers may automatically collect certain technical information, including:

  • IP address, browser type, device type, and operating system;
  • pages viewed, links clicked, referring website, and the date and time of your visit;
  • general location derived from your IP address (such as city or region).

We collect this information using cookies, pixels, scripts, and similar technologies (see Section 5).

3. How We Use Information

We use the information we collect to:

  • respond to your inquiries and schedule, confirm, or remind you of appointments;
  • provide, coordinate, and bill for medical and aesthetic services;
  • send you information you have requested, and, with your consent where required by law, marketing about our services;
  • operate, maintain, secure, and improve the Website, including accessibility features;
  • understand how visitors use the Website;
  • detect and prevent fraud, spam, and security incidents;
  • comply with legal, regulatory, and professional obligations.

We do not sell, rent, or trade your personal information, and we do not share your personal information with other companies or third parties for their marketing or promotional purposes. We do not use or disclose your medical information for marketing without your written authorization as required by HIPAA and the CMIA.

4. How We Share Information

Mobile Opt in, SMS Consent, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes

 

Text messaging originator opt-in data and consent are excluded from all of the sharing categories below and will not be shared with any third parties.

We share other information only as described below, and only as needed to operate our practice and provide your care:

  • Service providers. We use vendors who help us operate our practice and the Website, including:
    • CharmHealth (CharmTracker) — online appointment scheduling and electronic health records;
    • Cherry — patient payment plans and financing (applications are subject to Cherry’s own privacy policy and terms);
    • Website hosting and WordPress/Elementor services — to host and operate the Website and its forms;
    • Analytics providers (such as Segment) — to understand Website usage;
    • Google Maps — to display our location;
    • Accessibility tools — to provide accessibility features on the Website.

    These service providers act only on our behalf, are not permitted to use your information for their own purposes, and do not receive it for marketing. Where a vendor handles protected health information on our behalf, we require a Business Associate Agreement as HIPAA requires.

  • Healthcare operations. With laboratories, pharmacies (including compounding pharmacies), and other providers as needed for your treatment, as described in our Notice of Privacy Practices.
  • Legal requirements. When required by law, subpoena, court order, or to protect the rights, property, or safety of our patients, staff, or others.
  • Business transfers. In connection with a merger, sale, or transfer of our practice, subject to applicable law.
  • With your consent. Any other sharing will occur only with your permission.

5. Cookies, Analytics, and Tracking Technologies

We use cookies and similar technologies to make the Website work, remember your preferences, and understand how visitors use it. Some of these technologies are provided by third parties, who may collect information about your use of the Website over time.

We configure our tracking technologies so that they are not used to transmit protected health information to third parties for advertising. We do not place third-party analytics or advertising trackers inside our patient scheduling or health record tools.

Your choices: Most browsers let you block or delete cookies through their settings. Blocking cookies may affect how some parts of the Website function.

Do Not Track: Some browsers send “Do Not Track” signals. Because there is no common industry standard for these signals, the Website does not currently respond to them. [If you honor Global Privacy Control signals, state that here.]

6. Communications and Text Messaging (SMS)

If you give us your phone number or email, we may contact you about your inquiry or appointments. You may opt out of promotional emails by using the unsubscribe link.

Text messages. If you opt in to receive text messages from Vigorize Health, we will use your mobile number to send messages such as appointment confirmations and reminders, responses to your inquiries, and [care-related updates / promotional offers]. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. Consent to receive text messages is not a condition of any purchase or service.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including the safeguards HIPAA requires for protected health information. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

8. Data Retention

We keep Website inquiries and technical data only as long as needed for the purposes described in this Policy. Medical records are retained for the periods required by California law and professional standards.

9. Your California Privacy Rights

  • Medical information: Under HIPAA and the CMIA, you have the right to access and obtain a copy of your medical records, request corrections, request an accounting of certain disclosures, and request restrictions on certain uses. See our Notice of Privacy Practices for details.
  • Shine the Light: California Civil Code § 1798.83 allows California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing.
  • Other requests: You may ask us to access, correct, or delete personal information collected through the Website (other than medical records we are legally required to retain) by contacting us using the information below. We will not discriminate against you for making a request.

10. Children’s Privacy

The Website is intended for adults 18 years of age or older. We do not knowingly collect personal information online from children under 13. If you believe a child has submitted information to us through the Website, please contact us and we will delete it.

11. Third-Party Links

The Website may link to third-party websites and services, such as our financing partner or social media pages. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. Material changes will be posted prominently on the Website.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Ashley Molina, M.D., Inc., DBA Vigorize Health
Attn: Privacy Officer
799 E. Green St., Suite 12
Pasadena, CA 91101
Phone: (626) 737-6773
Email: info@vigorizehealth.com