Privacy Policy

Who we are and what this policy covers

Beyond Wellness LLC, trading as Beyond Wellness, operates a functional wellness clinic and IV lounge at 1770 Newport Blvd, Suite B, Costa Mesa, California 92627. In this policy, "we", "us" and "our" mean Beyond Wellness LLC.

This policy explains what information we collect through this website, how we use it, who we share it with, and the choices you have. It applies to beyondwellness.io, to the Beyond Wellness mobile app, and to the booking, scheduling, messaging and enquiry tools we link to or embed.

It does not cover your medical records. Health information created when we assess or treat you is protected health information, and it is handled under the Health Insurance Portability and Accountability Act. How we use and disclose that information is described separately in our Notice of Privacy Practices. Where the two overlap, the Notice governs your health information and this policy governs the website.

Information we collect

Information you give us. Your name, email address, telephone number, and anything you choose to write when you contact us, request a consultation, request peptides, join a mailing list, buy a gift card, or message us through the app. If you book an appointment you also give us the date, the service and any notes you add.

Information collected automatically. When you visit the site, our hosting, analytics and advertising tools record your IP address, browser and device type, operating system, the pages you view, the site or advertisement you arrived from, general location inferred from your IP address, and the date and time. Some of this is collected through cookies and similar technologies, and it is described in section 7.

Information from booking and payment. Appointments, memberships, packages and payments are processed by Momence. We receive the resulting booking and purchase records. We do not receive or store your full card number, which is held by the payment processor.

Health information. Health information you provide in the clinic, on intake forms, during a consultation, through the app messaging system, or through laboratory testing is handled under HIPAA and our Notice of Privacy Practices, not under this policy. Please read section 5 before you send us anything clinical.

How we collect it

• Directly from you, in the clinic, by phone, by email, through the app, or through a form on this site.
• Automatically, through cookies, pixels, tags and server logs, as described in section 7.
• From our service providers, such as our booking platform, when you transact with us through them.

How we use your information

We use the information above to:

• respond to enquiries and requests you send us;
• schedule, confirm, remind you about and change appointments;
• provide the services you book, and to bill for them;
• administer memberships, packages, credits and gift cards;
• operate, secure, maintain and improve the website and the app;
• measure how our advertising performs, and show you advertising for our services on other platforms, where the law and your choices allow;
• send you marketing messages where you have asked to receive them, which you can stop at any time; and
• meet our legal, regulatory and professional obligations.

We do not use automated decision-making or profiling to make decisions about your care.

We do not use protected health information for marketing without your written authorisation, and we do not sell protected health information.

Protected health information, and which channels are secure

As a healthcare provider, we are a covered entity under HIPAA. Protected health information we hold about you is used and disclosed only as HIPAA and California law permit: to provide your care, to obtain payment, to run the practice, and where the law requires it.

Our Notice of Privacy Practices sets out your rights over that information in full, including your right to inspect and copy your records, to request corrections, to request restrictions on disclosure, and to receive an accounting of disclosures. It is available at the clinic and on request.

Where your records are held. Your medical records, appointment history, intake forms, clinical notes and messages with us are processed and stored in Momence, the platform we use to run the practice. Momence handles that information on our behalf and under our instructions, and sets out how it handles data in its own privacy policy.

Not every channel is the same, and this matters.

• Messaging through the Beyond Wellness app and our booking platform is handled in a HIPAA compliant environment. This is the right place to send anything clinical.
• Forms on this website are not. Our contact and request forms are delivered through Tally, which is not a HIPAA compliant channel, and ordinary email is not secure either.

Please do not put detailed medical information, diagnoses, medications or laboratory results into a website form or an email. If you need to tell us something clinical before your appointment, message us through the app, call us on (949) 886-4024, or bring it with you.

Information you type into a website form before you become a patient, such as a general enquiry about a service, may not be protected health information under HIPAA. We still treat it as confidential, but it does not carry the same legal protection.

Laboratory results by email. You may choose to have results sent to the email address you give us. Email does not meet HIPAA security standards, and if you choose it, you accept that risk. You may decline and review your results with us in person instead. This choice is recorded on your Informed Consent and Release of Claims and you can change it at any time.

How and when we share information

We share information only in the circumstances below.

Service providers who work for us. Booking, payments, records and messaging (Momence), consultation scheduling (Cal.com), forms (Tally), website hosting (Vercel), email delivery, and analytics and advertising (Google, Meta). They may use your information only to perform that service for us, except where section 7 says otherwise.

Clinical partners, where your care requires it. Laboratories that run testing you have agreed to, and pharmacies or compounding pharmacies that dispense a prescription written for you.

Advertising and analytics partners. See section 7. Under California law some of this activity is treated as "sharing" your personal information even though we receive no money for it, and you can opt out.

Where the law requires it. In response to a subpoena, court order, or lawful request from a public authority, or where disclosure is necessary to protect someone from serious harm.

If the business changes hands. If the practice is sold or merged, records may transfer to the new owner, subject to the protections that applied before.

We do not sell your personal information for money.

Cookies, analytics and advertising technologies

We use cookies, tags and pixels to keep the site working, remember your preferences, understand how the site is used, and measure our advertising.

What is running on this site:

• Google Tag Manager, which loads and manages the tags below.
• Google Analytics, which measures how the site is used.
• The Meta advertising pixel, which measures how our advertising performs on Facebook and Instagram and allows us to show advertising to people who have visited this site.

Embedded content. Some pages embed content hosted by other companies: a Google map on the contact page, video from YouTube on the privacy-enhanced youtube-nocookie.com domain, a Cal.com scheduler, and the Momence booking tool. When one of these loads, that company receives your IP address and can set its own cookies, exactly as if you had visited its site directly.

What this means. The Meta pixel and Google Analytics receive information about the pages you visit on this site, including pages about specific services. We do not send them your name, your medical records, or anything you write to us clinically. Under the California Consumer Privacy Act, using an advertising pixel in this way counts as "sharing" personal information for cross-context behavioural advertising, so we describe it as sharing and we give you a way to opt out.

How to opt out. Email us at hello@beyondwellness.io or call (949) 886-4024 and tell us you want to opt out of advertising and analytics sharing. We will action it and confirm.

Your browser. Most browsers let you refuse or delete cookies. Blocking them may stop parts of the site working.

Your choices

Marketing email. Every marketing email has an unsubscribe link. You can also email us and we will remove you.

Text messages. If you have given us your number, we may text you about your appointments. If you have opted in to promotional texts, you can stop them at any time by replying STOP, or by telling us. Message and data rates may apply.

Advertising and analytics. To opt out of the sharing described in section 7, email us at hello@beyondwellness.io or call (949) 886-4024. Tell us the email address and, if you have one, the device or browser you use, so we can apply it properly.

Cookies. You can refuse or delete cookies in your browser settings.

Your records. You can ask us to correct or delete information we hold about you, subject to anything the law requires us to keep. See section 9.

Your California privacy rights

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the following rights over personal information that is not covered by HIPAA:

• To know what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to.
• To delete personal information we hold about you, subject to exceptions, including records we are required by law to keep.
• To correct personal information that is inaccurate.
• To opt out of the sale or sharing of your personal information. We do not sell your personal information for money, but we do share it for cross-context behavioural advertising as described in section 7, and you may opt out of that.
• To limit the use of sensitive personal information, where we use it beyond the purposes the law permits without a choice.
• Not to be discriminated against for exercising any of these rights. We will not refuse you service, charge you a different price, or give you a lower standard of care because you made a request.

Medical information governed by HIPAA and by California's Confidentiality of Medical Information Act is exempt from these rights, and is instead covered by the rights in our Notice of Privacy Practices.

Making a request. Call (949) 886-4024 or email hello@beyondwellness.io. We will verify your identity before we act. We will confirm receipt within 10 business days and respond within 45 days, and we may extend that by a further 45 days where the law allows, in which case we will tell you. You may use an authorised agent, and we may ask that agent for proof of your permission.

Rights in other US states

If you live in a state with a comprehensive privacy law, you may have similar rights to access, correct, delete and opt out, and in some states a right to appeal a decision we make about your request. Use the contact details in section 16 and tell us which state you live in, and we will apply the rights that state gives you.

How long we keep information

Your medical records are yours. We keep them available to you for as long as you want them kept. If you ask us to delete your records, we will, subject to anything the law requires us to retain. Your records are held in Momence, and you can ask us at any time for a copy or for deletion.

For everything else:

• Booking, membership and payment records are kept for the periods required by tax and accounting rules.
• Website analytics are kept for the retention period set in our analytics tools.
• Marketing contact details are kept until you unsubscribe.
• Enquiries and form submissions are kept for as long as we need them to answer you, and then removed.

We do not keep personal information indefinitely.

How we protect information

We use administrative, physical and technical safeguards intended to protect information against loss, misuse and unauthorised access. These include access controls, encryption of data in transit, and written agreements with the service providers who handle information for us.

No system is completely secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you as HIPAA and California law require.

Children's privacy

This website is intended for adults. We do not knowingly collect personal information online from children under 13. If you believe a child has given us information, contact us and we will delete it.

Third party services we use

Each of these receives some information about your visit or your transaction, and each has its own privacy policy that governs what it does with it.

Where a provider may receive protected health information, we put a business associate agreement in place before that happens.

Changes to this policy

We may update this policy as our services or the law change. When we do, we will change the effective date at the top of the page. If a change materially affects how we handle information we already hold about you, we will take reasonable steps to tell you before it takes effect.

This policy was last updated on August 19, 2026.

How to contact us about privacy

Beyond Wellness LLC
1770 Newport Blvd, Suite B
Costa Mesa, CA 92627
(949) 886-4024
hello@beyondwellness.io