Last Updated: 11/29/2025
This Privacy Policy describes how Ambrosia Center for Holistic Beauty (“Ambrosia,” “we,” “our,” or “us”) collects, uses, protects, and shares your information when you use our website, online scheduling tools, patient portal, telehealth platforms, or any services connected to our practice (“Services”).
This Privacy Policy applies to both website users and patients, though certain sections apply only to individuals who become clinical patients.
By accessing or using any part of the Services, you agree to this Privacy Policy.
1. Information We Collect
We collect several types of information depending on how you engage with Ambrosia:
A. Information You Provide Directly
When using our website, requesting an appointment, completing intake forms, or participating in telehealth, you may provide:
- Name, date of birth, contact information
- Address and demographic details
- Medical history, symptoms, medications, allergies
- Photos or videos of relevant conditions
- Payment information
- Insurance information (if applicable)
- Messages sent through Spruce or portal systems
Patients also provide required clinical consents (HIPAA authorization, telehealth consent, communication consent, etc.) as part of the onboarding process.
B. Information Automatically Collected
When you visit the website or use digital tools, we may automatically collect:
- IP address
- Browser type
- Device type
- Operating system
- Time and date of access
- Pages viewed and referring URLs
- Cookies and usage analytics
This information is used for website security, performance, and improving user experience.
C. Protected Health Information (PHI)
When you become a patient, your health information is protected under the Health Insurance Portability and Accountability Act (HIPAA) and applicable state confidentiality laws.
PHI includes:
- Clinical notes
- Telehealth visit records
- Uploaded files or images
- Medication history
- Lab results
- Treatment plans
PHI is handled according to HIPAA rules regardless of the platform used (CharmEHR, Doxy.me, Spruce, or others).
2. How We Use Your Information
Ambrosia uses your information for the following purposes:
A. To Provide Clinical Care
- Evaluate health conditions
- Deliver telehealth visits
- Prescribe medications
- Coordinate care with labs, pharmacies, or consultants
- Maintain accurate medical records
- Document visits, including AI-assisted documentation (with your consent)
B. To Operate & Improve Our Services
- Maintain website functionality and security
- Optimize scheduling and telehealth systems
- Improve clinical workflows and patient education
- Analyze usage to improve user experience
C. To Communicate With You
- Appointment confirmations and reminders
- Patient portal messages
- Follow-up instructions
- Administrative or billing messages
- Updates on policy changes
Communication preferences follow your Communication Consent.
D. To Process Payments
- Memberships
- Visit fees
- Deposit payments
- Medication or lab fees (if applicable)
Payment information is not stored on our servers and is handled by encrypted third-party processors.
3. How We Share Your Information
We do not sell your information.
We share your information only as permitted under HIPAA or with your explicit authorization.
A. With Healthcare Partners
- Pharmacies
- Laboratories
- Imaging centers
- Consulting clinicians
Information shared is limited to what is necessary for your care.
B. With Third-Party Service Providers
We use secure third-party vendors for:
- Scheduling (Calendly)
- Patient portal (CharmEHR)
- Telehealth visits (Doxy.me)
- Secure messaging (Spruce)
- Payment processing
- Email communication
- Website hosting
- AI-assisted documentation systems (with consent)
These vendors may access information necessary to perform their functions but may not use it for other purposes.
C. When Required by Law
We may disclose information:
- To public health authorities
- To comply with a court order or subpoena
- For mandatory reporting (e.g., abuse or certain communicable diseases)
- To prevent imminent harm
D. With Your Authorization
Certain disclosures—such as releasing records to another provider or to yourself—require a signed Release of Records authorization.
4. Cookies & Analytics
Our website may use cookies, beacons, and analytics tools to:
- Improve website performance
- Track user activity
- Personalize site content
- Analyze traffic patterns
Users may disable cookies in their browser settings, though some features may not function properly.
5. Data Security
Ambrosia uses administrative, technical, and physical safeguards to protect your information.
These safeguards include:
- Encrypted telehealth platforms
- HIPAA-compliant EHR and messaging systems
- Secure user authentication
- Limited staff access
- Audit logs
- Encrypted backups
No system can guarantee absolute security, but we use industry-standard protections aligned with HIPAA requirements.
6. Your Rights (HIPAA Patients Only)
If you become a clinical patient, you have HIPAA-protected rights, including:
- The right to access your medical records
- The right to request amendments
- The right to request restrictions
- The right to request confidential communication
- The right to receive a list of disclosures
- The right to revoke authorizations
- The right to receive a paper copy of this policy
To exercise these rights, contact us at the information below.
7. Children’s Privacy
Ambrosia does not knowingly collect information from children under 13 through the website.
Minor patients may receive clinical care consistent with state laws, but online scheduling and consent must be completed by a parent or legal guardian.
8. External Links
The website may link to external sites (labs, pharmacies, educational resources).
Ambrosia is not responsible for their content, privacy practices, or security.
9. Changes to This Privacy Policy
We may update this Policy periodically.
Updates will be posted on this page with a revised “Last Updated” date.
Continued use of the Services after changes constitutes acceptance of the updated Policy.
10. Contact Information
For questions about this Privacy Policy or your privacy rights, contact:
Ambrosia Center for Holistic Beauty
Email: [email protected]
Phone: (575) 551-7544
Las Cruces, NM
www.ambrosiacenter.com