Legal · Effective 09/01/2026
Privacy Policy
Important information about your privacy, appointments, deposits, and policies at Forever Ageless Inc.
01 / Forever Ageless Inc. Privacy Policy
Forever Ageless Inc. Privacy Policy
Privacy Policy Forever Ageless Inc. Newport Beach, California
Effective Date: January 1, 2026 Last Revised: June 2026
Introduction Forever Ageless Inc. ("Forever Ageless," "we," "us," or "our") operates the website foreveragelessinc.com and related digital properties. We are a medical aesthetic practice located in Newport Beach, California, founded by Dr. Joe Cerni, M.D. and operating under the medical direction of Dr. Nicole Kay, M.D.
This Privacy Policy explains how we collect, use, share, and protect information about you when you visit our website, contact us, book appointments, or otherwise interact with us online or in person. It also describes your rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively "CCPA/CPRA"), and other applicable laws.
Note regarding health information: If you are or become a patient of Forever Ageless, your medical and health information is also protected under our separate Notice of Privacy Practices, which governs Protected Health Information (PHI) as defined under HIPAA. This Privacy Policy covers our general data practices; the Notice of Privacy Practices governs your health records specifically.
Information We Collect We collect the following categories of personal information: Information You Provide Directly Category Examples Identifiers Name, email address, phone number, mailing address Professional / demographic Age, date of birth, gender Health and medical information Treatment history, consultation notes, skin concerns, medications (when voluntarily provided via forms or consultations) Financial information Payment card details, billing address (processed through our payment processor) Communications Messages you send us via contact forms, email, text, or chat Appointment and booking data Appointment requests, treatment preferences, visit history
Information Collected Automatically When you visit our website, we and our service providers may automatically collect:
Category Examples Device and usage data IP address, browser type and version, operating system, pages viewed, time spent on pages, referring URLs Location data General geographic location inferred from IP address Cookies and tracking technologies Session cookies, analytics cookies, advertising pixels (see Cookie section below)
Information from Third Parties We may receive information about you from third-party sources, including:
Booking platforms (such as Zenoti) when you schedule appointments Review platforms if you leave a review that is publicly shared Social media platforms if you interact with our social media pages Referral partners if another provider or patient refers you to us
How We Use Your Information We use the information we collect for the following purposes:
Appointment scheduling and patient care coordination Responding to inquiries submitted through our website, phone, email, or text Sending appointment confirmations, reminders, and follow-up communications Processing payments for services and products Sending promotional communications about treatments, special offers, and events — where you have opted in or where permitted by law Improving our website and services through analytics and user behavior analysis Complying with legal obligations, including HIPAA, CCPA/CPRA, California Medical Board requirements, and tax laws Enforcing our Terms and Conditions and protecting our legal rights Fraud prevention and security
We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you.
Cookies and Tracking Technologies Our website uses cookies and similar tracking technologies. These may include:
Strictly necessary cookies — required for basic site functionality (e.g., session management, form submission). These cannot be disabled. Analytics cookies — used to understand how visitors interact with our site (e.g., Google Analytics). These collect anonymized or aggregated data. Marketing/advertising pixels — used to measure the effectiveness of advertising campaigns and, where applicable, to serve relevant ads (e.g., Meta Pixel, Google Ads).
You may control cookies through your browser settings or via our cookie consent manager. Note that disabling certain cookies may affect site functionality.
Do Not Track: California law requires us to disclose how we respond to Do Not Track ("DNT") signals. We currently do not respond to DNT signals at the browser level, but we honor opt-out requests as described in the Your Rights section below.
How We Share Your Information We do not sell your personal information to third parties. We may share your information in the following circumstances: Service Providers We share information with third-party vendors who assist us in operating our business, including:
Practice management and electronic medical record platforms (e.g., Zenoti) Payment processors Email and SMS marketing platforms Website hosting and analytics providers IT support and cybersecurity vendors
All service providers are contractually required to protect your information and use it only for the purposes we specify. Where required by HIPAA, we maintain a Business Associate Agreement (BAA) with each applicable vendor. Professional and Legal Disclosures We may disclose your information:
To comply with applicable law, regulation, legal process, or government request To enforce our Terms and Conditions or protect our rights To prevent fraud, security incidents, or harm In connection with a merger, acquisition, or sale of all or substantially all of our assets (in which case you will be notified) With Your Consent We may share your information for any other purpose with your explicit consent.
Data Retention We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with California law, which generally requires retention for a minimum of seven (7) years from the date of service, or until the patient's 19th birthday (if a minor), whichever is longer.
Your California Privacy Rights (CCPA/CPRA) As a California resident, you have the following rights: Right to Know You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the purposes for collection, and the categories of third parties with whom we share it. Right to Delete You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (e.g., where the information is needed to complete a transaction, comply with a legal obligation, or detect security incidents). Right to Correct You have the right to request correction of inaccurate personal information we maintain about you. Right to Opt Out of Sale or Sharing We do not sell personal information. We do not share personal information for cross-context behavioral advertising without your consent. If this practice changes, we will update this Policy and provide an opt-out mechanism. Right to Limit Use of Sensitive Personal Information You have the right to request that we limit our use and disclosure of sensitive personal information (such as health data, precise geolocation, or financial account information) to what is necessary to provide services to you. Right to Non-Discrimination We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your privacy rights. How to Submit a Request To exercise any of the rights above, please contact us by:
Email: contactus@foreveragelessinc.com Phone: 949.553.0260 Mail: Forever Ageless Inc., Attn: Privacy Officer, 3620 Birch Street, Suite #100, Newport Beach, CA 92660
We will verify your identity before processing your request. We will respond within 45 days of receipt; if we need additional time, we will notify you within the initial 45-day period and may extend our response by an additional 45 days. You may designate an authorized agent to submit requests on your behalf; we will require written authorization and may verify your identity directly.
Children's Privacy Our website and services are not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 16 without verifiable parental or guardian consent as required by applicable law. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete it.
Security We implement and maintain reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS), access controls, and vendor security requirements.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.
In the event of a data breach affecting your personal information, we will notify you as required by California law (Cal. Civ. Code § 1798.82) and, where applicable, HIPAA.
Third-Party Links Our website may contain links to third-party websites, social media platforms, or services. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Privacy Policy We may update this Privacy Policy from time to time. When we make material changes, we will post the updated Policy on this page with a new "Last Revised" date. We encourage you to review this Policy periodically. Your continued use of our website following any changes constitutes your acceptance of the updated Policy.
Contact Us If you have questions about this Privacy Policy, wish to exercise your rights, or have a concern about our data practices, please contact:
Forever Ageless Inc. Attn: Privacy Officer 3620 Birch Street, Suite #100 Newport Beach, CA 92660 Email: contactus@foreveragelessinc.com Phone: 949.553.0260 Website: foreveragelessinc.com
This Privacy Policy is effective as of January 1, 2026, and supersedes all prior privacy policies of Forever Ageless Inc. and its predecessor entities.
02 / HIPAA Notice of Privacy Practices
HIPAA Notice of Privacy Practices
Notice of Privacy Practices Forever Ageless Inc. Newport Beach, California
Effective Date: January 1, 2026 Last Revised: September 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Who We Are This Notice of Privacy Practices ("Notice") applies to Forever Ageless Inc. ("Forever Ageless," "we," "us," or "our"), a medical aesthetic practice located in Newport Beach, California, founded by Dr. Joe Cerni, M.D. and operating under the medical direction of Dr. Nicole Kay, M.D.
We are required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations to maintain the privacy of your Protected Health Information ("PHI"), to provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of this Notice.
What Is Protected Health Information? Protected Health Information ("PHI") is individually identifiable health information we create, receive, maintain, or transmit in connection with providing health care services to you. This includes information about your past, present, or future physical health condition; the health care services we provide to you; and payment for those services.
How We May Use and Disclose Your Health Information Uses and Disclosures That Require Your Authorization The following uses and disclosures require your written authorization before we may proceed:
Most marketing communications. We will not use your PHI to send you marketing materials without your signed, specific authorization — even if we believe you may be interested in a particular treatment or promotion. Sale of PHI. We will never sell your PHI. Psychotherapy notes. Not applicable to our services, but included for completeness. Before-and-after photographs. Photographs taken during or in connection with your treatment are PHI. We will not use your photos in any advertising, social media, website, or promotional materials without a separate written HIPAA marketing authorization signed by you. Testimonials. We will not publish or share any statement you make about your treatment experience without your written authorization.
You may revoke any authorization you have given us at any time, in writing, except to the extent we have already acted in reliance on it. Uses and Disclosures for Treatment, Payment, and Health Care Operations We may use and disclose your PHI without your additional authorization for the following purposes:
Treatment. We may use your PHI to provide, coordinate, or manage your medical aesthetic care. For example, we may share your PHI with other treating clinicians, consulting physicians, or specialists involved in your care.
Payment. We may use and disclose your PHI to obtain payment for services we provide to you. For example, we may submit claims to your payment card, health plan, or financing provider, or contact you regarding balances owed.
Health Care Operations. We may use and disclose your PHI for our internal business operations, including quality assessment, staff training, compliance activities, scheduling, and practice management. Other Uses and Disclosures Permitted Without Authorization We may use or disclose your PHI without your authorization in the following additional circumstances:
As required by law. We will disclose your PHI when required to do so by federal, state, or local law, including in response to a court order or valid legal process. Public health activities. We may disclose PHI to public health authorities for activities such as disease reporting or adverse event monitoring as required by law. Health oversight. We may disclose PHI to government agencies conducting audits, investigations, or inspections related to health care oversight. Serious threats to health or safety. We may disclose PHI if we believe it is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public. Workers' compensation. We may disclose PHI as authorized by and to the extent necessary to comply with workers' compensation laws. Law enforcement. We may disclose PHI to law enforcement officials in limited circumstances, such as to comply with a court order or to report certain types of wounds. Decedents. We may disclose PHI to a coroner, medical examiner, or funeral director as permitted by law.
Your Rights Regarding Your Health Information You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to our Privacy Officer (contact information below). Right to Inspect and Copy You have the right to inspect and receive a copy of your PHI that we maintain in a designated record set, which generally includes your medical and billing records. We may charge a reasonable fee for copies. We will respond to your request within 30 days. Right to Request an Amendment If you believe your PHI is incorrect or incomplete, you may request that we amend it. We may deny your request in certain circumstances, and if we do, we will explain why in writing. Right to an Accounting of Disclosures You have the right to request an accounting of disclosures we have made of your PHI, other than disclosures made for treatment, payment, or health care operations, or disclosures made with your authorization. Right to Request Restrictions You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to your request unless it concerns a disclosure to a health plan for payment or operations purposes and you have paid for the service out of pocket in full. Right to Request Confidential Communications You have the right to request that we communicate with you about your PHI in a specific way or at a specific location. For example, you may request that we contact you only by text message, or only at a specific phone number. We will accommodate reasonable requests. Right to Receive Notice of Breach If a breach of your unsecured PHI occurs, we will notify you as required by HIPAA and applicable California law, including the California Confidentiality of Medical Information Act (CMIA). Right to a Paper Copy of This Notice You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically. Please contact our office to request one.
California-Specific Privacy Rights California law provides additional protections for your health information beyond HIPAA.
California Confidentiality of Medical Information Act (CMIA). Under the CMIA, we may not disclose your medical information without your written authorization except as permitted by law. This includes prohibition on disclosing your information to employers, marketers, or data brokers without your consent.
Minor Patients. California law grants certain minors the right to consent to specific medical services. In those circumstances, the minor — not a parent or guardian — controls the confidentiality of records related to those services.
Sensitive Services. California law provides heightened protections for certain categories of sensitive health information, including mental health, reproductive health, and substance use. We will apply these protections to the extent applicable to our services.
Our Duties We are required by law to:
Maintain the privacy and security of your PHI; Provide you with this Notice of our privacy practices; Follow the terms of this Notice currently in effect; Notify you if we discover a breach of your unsecured PHI.
We reserve the right to change our privacy practices and this Notice. If we make a material change, we will post the revised Notice on our website at foreveragelessinc.com and make it available at our office. The new Notice will apply to all PHI we maintain.
Complaints If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.
To file a complaint with HHS: U.S. Department of Health and Human Services 200 Independence Avenue, S.W. Washington, D.C. 20201 Toll-free: 1-877-696-6775 Website: hhs.gov/hipaa
Contact Our Privacy Officer For questions about this Notice, to exercise your rights, or to file a complaint with us:
Forever Ageless Inc. Attn: Privacy Officer 3620 Birch Street, Suite #100 Newport Beach, CA 92660 Email: contactus@foreveragelessinc.com Phone: 949.553.0260
This Notice is effective as of January 1, 2026. Forever Ageless Inc. reserves the right to amend this Notice at any time. The most current version will always be available on our website and at our office.
03 / Forever Ageless Inc. General Office Policies
Forever Ageless Inc. General Office Policies
See our office policies below:
04 / New Patient Deposits
New Patient Deposits
All new patients require a $100 deposit to secure their appointment. The deposit is applied toward treatment and is refundable with at least 24 hours’ notice. Cancellations or rescheduling within 24 hours, or no-shows, will result in forfeiture of the deposit.
05 / Laser Treatment Deposits
Laser Treatment Deposits
Laser appointments require a $100 deposit for appointments under 45 minutes and a $250 deposit for appointments 45+ minutes. Deposits are applied toward treatment and forfeited for cancellations or rescheduling within 24 hours or no-shows.
06 / Previous No-Call/No-Show Deposits
Previous No-Call/No-Show Deposits
Patients with a no-call/no-show within the past 12 months require a $100 deposit for injectable appointments or a $250 deposit for laser appointments 45+ minutes. Deposits are applied toward treatment and forfeited for cancellations or rescheduling within 24 hours or no-shows.