Runway ("we," "us," or "our") is committed to protecting your personal privacy and maintaining the confidentiality of your health information. This policy describes how we collect, use, protect, and share your personal and medical information when you visit our website, schedule consultations, or receive medical aesthetic services (including Botox and injectables) at our clinic.

1. Information We Collect

• Personal Details: Name, email address, phone number, billing address, and payment information.

• Protected Health Information (PHI): Medical history, treatment records, consent forms, aesthetic goals, contraindications, and before/after treatment photos necessary to safely provide Botox and medical aesthetic treatments.

• SMS Communication Data: Phone numbers collected for text messaging. Message and data rates may apply. Frequency varies. Reply HELP for support or STOP to unsubscribe at any time.

• Automated Technical Data: IP address, browser type, device details, and site usage metrics gathered through cookies to maintain website functionality.

2. How We Use Your Information & Health Data

We process your information to:

• Evaluate treatment candidacy, deliver safe injectable/aesthetic procedures, and manage medical charts.

• Send appointment reminders, pre/post-treatment care instructions, and clinical updates.

• Process payments and manage booking schedules.

• Send promotional communications (you may opt out at any time).

• Comply with state medical board recordkeeping and healthcare laws.

3. HIPAA & Medical Privacy Safeguards

Your Protected Health Information (PHI) is safeguarded in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state privacy laws.

• Use & Disclosure: We use and disclose your PHI strictly for treatment, payment, and healthcare operations.

• Business Associates: Any software provider or vendor handling your PHI (e.g., electronic health record systems or secure booking portals) is contractually bound by HIPAA Business Associate Agreements (BAAs) to enforce strict privacy controls.

• Authorization: We will not use or disclose your PHI or treatment photos for marketing or public display without your explicit written authorization.

4. Sharing & Data Sale Restrictions

• No Selling of Data: We do not sell, rent, or trade your personal information or PHI to third parties.

• SMS Protection: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

• Third-Party Vendors: Personal non-medical data is shared only with trusted operational partners (payment processors, web host) bound by confidentiality terms.

• Legal Requirements: We may disclose information if required by court order, subpoena, or applicable public health reporting laws.

5. Patient Rights

Subject to HIPAA and applicable state laws, you have the right to:

• Inspect and receive a copy of your medical and billing records.

• Request corrections to inaccurate or incomplete medical records.

• Request restrictions on how your PHI is used or shared.

• Request deletion of non-medical personal data (subject to mandatory medical record retention laws).

• Revoke prior consents or marketing authorizations at any time.

6. Contact & Compliance

If you have questions about this policy, wish to exercise your rights, or wish to report a privacy concern, please contact our Privacy Officer:

Runway

1608 20th Street NW, Floor 1, Washington, DC 20009

Phone: +1 (208) 289-0244

Email: info@runway.haus