1. Introduction and Scope

Body Edit, LLC ("Body Edit," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect through our website, bodyeditdakotadunes.com, and any related Body Edit pages on social media such as LinkedIn, X (formerly Twitter), Facebook, TikTok, YouTube, or Instagram (collectively, the "Website"), how we use and disclose that information, and the choices available to you.

This Privacy Policy is incorporated into and forms part of our Website Terms and Conditions. By using the Website, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Website.

This Privacy Policy applies to information collected through the Website. It does not apply to information collected offline, through channels other than the Website, or by any third party, including any third party whose website or content may be linked from the Website.

 

2. Relationship to Our Notice of Privacy Practices

This Privacy Policy is separate from, and does not replace, our Notice of Privacy Practices. To the extent Body Edit creates, receives, maintains, or transmits protected health information ("PHI") about you as a patient, that information is governed by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), its implementing regulations, applicable South Dakota law, and our Notice of Privacy Practices — not by this Privacy Policy.

Where a conflict exists between this Privacy Policy and our Notice of Privacy Practices with respect to PHI, the Notice of Privacy Practices controls. 

Please do not submit protected health information, detailed medical history, photographs of a sensitive nature, or other confidential information through the Website contact form, chat features, social media messages, or unencrypted email. These channels are not secure, and information transmitted through them may not be protected. Any information you submit through these channels is submitted at your own risk.

 

3. Information We Collect

Information you provide to us.

We collect information you voluntarily provide when you use the Website, including when you request an appointment, complete a contact or consultation-request form, subscribe to our newsletter or promotions, purchase a gift card or package, create an account, participate in a survey or promotion, or otherwise communicate with us. This information may include:

• Identifiers such as your name, postal address, email address, and telephone number;

• Appointment-request details such as your preferred date, time, provider, and the service you are interested in;

• Payment and transaction information, which is collected and processed by our third-party payment processor and is not stored in full by us;

• Account credentials, if you create an account through the Website or a booking platform we use;

• Any content you choose to submit, such as reviews, comments, photographs, or messages; and

• Any other information you elect to provide in free-text fields or correspondence.

Information collected automatically.

When you visit the Website, we and our service providers may automatically collect certain technical information, including your IP address, device identifiers, browser type and settings, operating system, referring and exit pages, pages viewed, links clicked, search terms entered, dates and times of access, and approximate geographic location derived from your IP address. We collect this information through cookies and similar technologies as described in Section 4.

Information from third parties.

We may receive information about you from third parties, including scheduling and booking platforms, payment processors, advertising and analytics providers, social media platforms on which we maintain a presence, review platforms, and third-party financing providers. The information we receive is governed by the privacy practices of those third parties in addition to this Privacy Policy.

 

4. Cookies and Similar Technologies

Our Website uses cookies, pixels, tags, web beacons, session-replay tools, software development kits, and similar technologies (collectively, "cookies"). Cookies are small data files placed on your device that allow us to recognize your browser, remember your preferences, keep you signed in, understand how the Website is used, measure the effectiveness of our marketing, and deliver advertising.

We use the following general categories of cookies:

• Strictly necessary cookies — required for the Website to function, including security, load balancing, and form submission. These cannot be disabled through our Website.

• Functional cookies — remember your preferences and settings.

• Analytics cookies — help us understand how visitors use the Website so we can improve it.

• Advertising and targeting cookies — used by us and our advertising partners to deliver and measure advertisements, including advertisements shown to you on other websites and platforms.

You can control cookies through your browser settings, including by refusing or deleting cookies. If the Website displays a cookie banner or preference center, you may also manage your choices there. Disabling cookies may affect the functionality of the Website, including online booking. Because there is no uniform industry standard for responding to "Do Not Track" browser signals, our Website does not currently respond to them. Where required by applicable law, we will honor recognized universal opt-out mechanisms such as Global Privacy Control.

 

5. Online Tracking Technologies and Health Information

We recognize that the use of tracking technologies on the website of a healthcare provider raises particular concerns. We do not intend for third-party advertising or analytics cookies to collect information that would identify you as a patient or reveal a specific treatment you have received or inquired about.

We do not disclose PHI to advertising or analytics vendors for marketing purposes without your prior written authorization where such authorization is required by HIPAA. We evaluate the tracking technologies deployed on pages that could reveal health-related information and configure or restrict them accordingly, and we enter into written agreements with vendors where required. If you prefer that no advertising or analytics technologies be applied to your visit, you may decline non-essential cookies through the mechanisms described in Section 4, or contact us by telephone rather than using the Website to request an appointment.

 

6. How We Use Information

We use the information described above for the following purposes:

• To respond to your inquiries and requests, including consultation and appointment requests;

• To schedule, confirm, reschedule, and remind you of appointments;

• To process payments, deposits, gift cards, packages, and memberships;

• To operate, maintain, secure, troubleshoot, and improve the Website and our services;

• To send you marketing and promotional communications where you have opted in to receive them, and to measure the effectiveness of those communications;

• To personalize your experience and to deliver and measure advertising, subject to Section 5;

• To conduct analytics and market research;

• To detect, investigate, and prevent fraud, abuse, security incidents, and other unlawful or prohibited activity, including breaches of our Terms and Conditions;

• To establish, exercise, or defend legal claims; and

• To comply with applicable law, regulation, subpoena, court order, or other legal process, and with requests from regulatory or licensing authorities.

 

7. How We Share Information

We do not sell your personal information for money. Depending on your jurisdiction, certain disclosures to advertising partners through cookies may be considered a "sale" or "sharing" of personal information or "targeted advertising" under applicable state privacy law; where that is the case, you may exercise the choices described in Sections 4 and 9. We do not sell, rent, or lease PHI, and we do not use or disclose PHI for marketing purposes except as permitted by HIPAA or with your written authorization.

We may disclose information as follows:

• Service providers. To vendors who perform services on our behalf, including website hosting, scheduling and booking, payment processing, email and text messaging platforms, customer relationship management, analytics, advertising, and IT support. These vendors are permitted to use the information only to provide services to us and, where they handle PHI, are engaged under a business associate agreement as required by HIPAA.

• Advertising and analytics partners. As described in Sections 4 and 5.

• Professional advisors. To our attorneys, accountants, auditors, insurers, and similar advisors.

• Business transfers. In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, or in the course of due diligence for such a transaction, subject to applicable law governing the transfer of patient records.

• Legal and safety. When we believe disclosure is required by law or legal process, or is reasonably necessary to protect the rights, property, or safety of Body Edit, our patients and clients, our personnel, or the public.

• With your direction or consent. In any other case where you direct or authorize us to share the information.

We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you.

 

8. Text Message and Email Communications

By providing your telephone number or email address, you consent to receive appointment-related, transactional, and, where you have separately opted in, marketing communications from Body Edit by phone, text message, and email. Message frequency varies, and message and data rates may apply.

No mobile information or telephone number collected for the purpose of text messaging will be sold, rented, or shared with any third party for that third party's own marketing purposes. Mobile numbers may be shared with the service providers that deliver messages on our behalf solely for that purpose.

You may opt out of marketing communications at any time by following the unsubscribe instructions in an email, replying STOP to a text message, or contacting us using the information below. Reply HELP for assistance. Opting out of marketing communications does not affect appointment reminders and other transactional messages relating to services you have scheduled, and does not affect communications that we are permitted or required to send under HIPAA or other applicable law.

 

9. Your Choices and Rights

You have the following choices with respect to information collected through the Website:

• You may decline to provide information, though this may prevent us from responding to your request or providing certain features;

• You may manage cookies through your browser settings or our cookie preference center, where available;

• You may opt out of marketing emails and text messages as described in Section 8;

• You may request that we update or correct information you have provided through the Website; and

• You may request that we delete information you have provided through the Website, subject to our legal and regulatory obligations to retain records.

Rights with respect to PHI — including the right to access, amend, restrict, request an accounting of disclosures of, and receive confidential communications of your PHI — are described in our Notice of Privacy Practices and are exercised through the process set out in that notice.

Residents of certain states have additional rights under state privacy laws, which may include the right to confirm whether we process personal information about them, to access and obtain a portable copy of that information, to correct inaccuracies, to request deletion, to opt out of targeted advertising and the sale or sharing of personal information, and to appeal a denial of a request. South Dakota has not enacted a comprehensive consumer privacy statute as of the effective date of this Privacy Policy, but we honor these requests where applicable law requires. To exercise a right, contact us using the information in Section 14. We will verify your identity before responding and will not discriminate against you for exercising a privacy right. Information governed by HIPAA is generally exempt from state consumer privacy laws and is handled under our Notice of Privacy Practices.

 

10. Data Security

We maintain administrative, technical, and physical safeguards designed to protect the information we collect against unauthorized access, disclosure, alteration, and destruction, including safeguards required by the HIPAA Security Rule with respect to electronic PHI. However, no method of transmission over the internet and no method of electronic storage is completely secure. We cannot guarantee the absolute security of information transmitted to or from the Website, and any transmission is at your own risk.

If you have reason to believe that your interaction with us is no longer secure, please notify us immediately using the contact information below.

 

11. Data Retention

We retain information for as long as necessary to fulfill the purposes described in this Privacy Policy, to operate our business, and to comply with our legal, regulatory, tax, accounting, and professional recordkeeping obligations, including obligations governing the retention of medical records under South Dakota law and HIPAA. When information is no longer needed, we dispose of it in a manner designed to prevent unauthorized access.

 

12. Children’s Privacy

The Website is intended for persons 18 years of age or older and is not directed to children. We do not knowingly collect personal information from children under 13 through the Website. If we learn that we have collected personal information from a child under 13 through the Website, we will delete it. If you believe a child has provided information to us through the Website, please contact us using the information below. Information collected in connection with services rendered to a minor patient with the consent of a parent or legal guardian is treated as PHI and governed by our Notice of Privacy Practices.

 

13. Third-Party Websites, Platforms, and Social Media

The Website may link to or integrate with websites and platforms operated by third parties, including scheduling, payment, financing, telehealth, mapping, and review platforms. We do not control and are not responsible for the privacy practices of those third parties. Information you provide directly to a third-party platform is governed by that party’s privacy policy, and we encourage you to review it.

If you interact with Body Edit on a social media platform, the platform may collect information about that interaction under its own privacy policy, and we may have access to aggregate information about our followers and visitors. Anything you post publicly on a social media page — including comments about your own treatment — is not confidential, and our ability to respond publicly is limited by HIPAA and other applicable privacy laws.

 

14. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time. The revised Privacy Policy will apply from the date it is published on the Website, and we will update the "Effective Date" and "Last Updated" dates accordingly. Where required by applicable law, we will provide additional notice of material changes. Your continued use of the Website following publication of a revised Privacy Policy constitutes your acknowledgment of the revised policy. Changes to our Notice of Privacy Practices are made separately and in accordance with HIPAA.

 

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of South Dakota, without regard to its conflict-of-law provisions, and is subject to the dispute-resolution, jurisdiction, and venue provisions set out in our Website Terms and Conditions, which provide for the exclusive jurisdiction of the state and federal courts located in or serving Union County, South Dakota.

 

16. Contact Information

If you have questions about this Privacy Policy, wish to exercise a privacy right, or would like a copy of our Notice of Privacy Practices, please contact us:

Body Edit, LLC

370 West Anchor Drive, Suite 100

Dakota Dunes, South Dakota 57049 (Union County, South Dakota)

Phone: (712) 625-7752

Email: info@bodyeditdakotadunes.com

Website: bodyeditdakotadunes.com

Complaints regarding the handling of protected health information may also be filed with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

 

ACKNOWLEDGMENT

By using this Website, you acknowledge that you have read and understood this Privacy Policy. You further acknowledge that this Privacy Policy governs information collected through the Website and does not replace our Notice of Privacy Practices, which governs your protected health information.

Last Updated: 9/2/2026