REVIVO AESTHETICS, PLLC

NOTICE OF PRIVACY PRACTICES

Protecting your private information is our priority. This Statement of Privacy applies to Revivo Aesthetics, PLLC, a Florida professional limited liability company (the "Company") and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to the Company refer to Revivo Aesthetics, PLLC, a Florida professional limited liability company. Revivo Aesthetics' web presence at: https://www.revivoconcierge.com is website and/or an e-commerce and aesthetics service site. By using the Revivo Aesthetics website, you consent to the data practices described in this statement. These Privacy Practices (the "Practices" or the "Policy(ies)") describe how we collect, use, disclose, and safeguard your information when you visit our staff or practitioner(s), use our services, or interact with our website.

These Practices apply to information collected through:

1. Our website
2. Online booking platforms
3. Patient intake forms
4. Text messaging and email communications
5. Visits with and treatment services provided by our staff or practitioner(s)

1. INFORMATION WE COLLECT

We may collect the following categories of information:

i) Personal Information

1. Name, address, phone number, email address
2. Date of birth
3. Driver's license or other identification information
4. Emergency contact information

ii) Health and Medical Information ("Protected Health Information" / "PHI")

1. Medical history
2. Treatment records
3. Photographs (before/after images)
4. Consent forms
5. Prescription information
6. Allergies and medication history
7. Payment and billing information

PHI is collected and maintained in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

iii) Payment Information

1. Credit/debit card information
2. Billing address
3. Insurance information (if applicable)

Payment information may be processed through secure third-party payment processors.

iv) Website and Technical Information

When you visit our website, we may collect:

1. IP address
2. Browser type
3. Device information
4. Pages visited
5. Cookies and tracking data

2. HOW WE USE YOUR INFORMATION

We use collected information to:

1. Provide aesthetic and medical services
2. Schedule appointments
3. Communicate about treatments
4. Process payments
5. Maintain medical records
6. Send appointment reminders
7. Improve our website and services
8. Comply with legal and regulatory obligations

We may use photographs for treatment documentation. We will only use identifiable photos for marketing with your written authorization.

3. HIPAA AND PROTECTED HEALTH INFORMATION

As a healthcare provider, Revivo Aesthetics, PLLC complies with HIPAA and applicable Florida healthcare privacy laws.

Your PHI may be used or disclosed for:

1. Treatment
2. Payment
3. Healthcare operations of the Company
4. As required by law

A separate Notice of Privacy Practices describes your rights under HIPAA, including:

1. The right to access your records
2. The right to request corrections
3. The right to request restrictions
4. The right to request confidential communications
5. The right to file a complaint

You may request a copy of our Notice of Privacy Practices at any time.

4. TEXT MESSAGING AND ELECTRONIC COMMUNICATIONS

If you opt in to receive text messages or emails:

1. Messages may include appointment reminders and treatment communications.
2. Standard messaging rates may apply.
3. You may opt out at any time by replying STOP (for text messages) or unsubscribing via email.

We do not share mobile opt-in data with third parties for marketing purposes.

By providing your mobile number, you agree to receive text messages from Revivo Aesthetics, PLLC related to appointments, services, and/or promotions. Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP. For assistance, reply HELP. Consent is not a condition of purchase. View our Privacy Policy here https://www.revivoconcierge.com.

5. DISCLOSURE OF INFORMATION

We may share information with:

1. Medical professionals involved in your care
2. Payment processors
3. Electronic medical record providers
4. IT service providers
5. As may be required by law

All service providers handling PHI are required to sign Business Associate Agreements (BAAs) where required by HIPAA.

We do not sell your personal information.

6. DATA SECURITY

We implement reasonable administrative, physical, and technical safeguards to protect your information, including:

1. Secure electronic medical records systems
2. Password protection and encryption
3. Restricted staff access
4. Secure document disposal

However, no method of transmission over the internet is 100% secure and you assume liability for any.

7. RETENTION OF INFORMATION

We retain medical records in accordance with Florida law and applicable professional regulations. Generally, adult patient records are maintained for at least five (5) years from the last patient contact unless a longer retention period is required.

8. CHILDREN'S PRIVACY

We do not knowingly collect personal information from children under 18 without parental or legal guardian consent.

9. YOUR PRIVACY RIGHTS

Depending on applicable law, you may have the right to:

1. Access your personal information
2. Request corrections
3. Request deletion (subject to medical record retention laws)
4. Withdraw consent for marketing communications

To exercise your rights, please contact us using the information below.

10. THIRD-PARTY LINKS

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Updates will be posted on our website with a revised effective date. The Company reserves the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our website, and/or by updating any privacy information. Your continued use of the website and/or Services available after such modifications will constitute your: (a) acknowledgment of the modified Privacy Policy; and (b) agreement to abide and be bound by that Policy.

12. ELECTRONIC COMMUNICATIONS; ASSUMPTION OF RISK

Patient acknowledges that Revivo Aesthetics, PLLC utilizes reasonable administrative, physical, and technical safeguards designed to protect the confidentiality of Protected Health Information ("PHI") in compliance with applicable law, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Patient understands that certain methods of communication, including but not limited to standard email, text messaging (SMS), and mobile communications, may not be fully secure and may present some risk of unauthorized access, interception, or disclosure despite the Practice's reasonable safeguards.

By electing to communicate with the Company via email and/or text message, Patient knowingly and voluntarily accepts these inherent risks. Patient agrees that, provided the Company has implemented reasonable safeguards and has not engaged in willful misconduct or gross negligence, the Company shall not be liable for unauthorized access, interception, or disclosure of information transmitted through such electronic communications.

Patient may withdraw consent to electronic communications at any time by providing written notice to the Company.

13. RIGHTS

You have the right to:

1. Get a copy of your medical record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide a copy or a summary, usually within 30 days of your request. We may charge a reasonable, cost-based fee as permitted by law.
2. Ask us to correct your record. You can ask us to correct health information that you believe is incorrect or incomplete. We may say "no" to your request, but we will tell you why in writing within 60 days.
3. Request confidential communications. You can ask us to contact you in a specific way (for example, home or office phone, email, or text) or to send mail to a different address. We will accommodate reasonable requests.
4. Ask us to limit what we use or share. You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to all requests, but we will consider them. If you pay in full for a service out of pocket, you can ask us not to share that information with your health plan for payment or operations; we will say "yes" unless a law requires us to share that information.
5. Get a list of those with whom we've shared information. You can ask for an accounting of certain disclosures of your health information for up to six years before the date of your request. This list will not include disclosures made for treatment, payment, and health care operations, and certain other disclosures (such as those you authorized).
6. Get a copy of this Notice. You can ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically.
7. Choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information, as allowed by law.
8. File a complaint. If you believe your privacy rights have been violated, you can file a complaint with us and with the U.S. Department of Health and Human Services (HHS). You will not be retaliated against for filing a complaint.

14. CONTACT INFORMATION

The Company welcomes your questions or comments regarding this Statement of Privacy. If you believe that The Company has not adhered to this Statement, please contact us at:

Effective as of March 1, 2026

Consumer information is not shared with third parties for marketing purposes.