Privacy Policy

Last updated: 10/18/2026

Glow Wilco ("us," "we," or "our") operates glowwilco.com and glowwilcowellness.com (the "Sites"). This policy explains how we collect, use, and disclose information we receive from visitors to the Sites. It also explains where to find our HIPAA Notice of Privacy Practices, which describes how we protect your health information.

Two Kinds of Information

This policy covers (1) information collected through our Sites, such as contact details, browsing data, and cookies, and (2) protected health information ("PHI"), which is health information we create Privacy Policy or receive while providing care. PHI is governed by the Health Insurance Portability and Accountability Act ("HIPAA") and is described in the section "Protected Health Information, HIPAA, and How We Ensure Compliance" and in our Notice of Privacy Practices.

Information Collection and Use

While using our Sites, we may ask you to provide personally identifiable information that can be used to contact or identify you, such as your name, email address, phone number, and the details of any appointment request or message you submit ("Personal Information"). We use Personal Information to respond to you, schedule and manage appointments, provide and improve our services and Sites, and send communications you have agreed to receive. By using the Sites, you agree to the collection and use of information in accordance with this policy.

Please do not send health details through website forms, email, or text. Contact forms, general email, and text messages are not a secure way to share medical information. Please share symptoms, diagnoses, medications, and test results only through our secure client portal or directly with your provider.

Log Data

Like many site operators, we collect information that your browser sends whenever you visit our Sites ("Log Data"). This Log Data may include your computer's Internet Protocol ("IP") address, browser type and version, the pages you visit, the time and date of your visit, the time spent on those pages, and other statistics.

We may use third-party services such as Google Analytics to collect, monitor, and analyze this information in order to understand how the Sites are used and improve them. These third-party providers have their own privacy policies describing how they use such information.

Third-Party Services

Our Sites and online booking rely on trusted service providers, including Squarespace (website hosting), Zenoti (scheduling, client records, and payments), and Google Analytics (site statistics). These providers may only use information to perform services for us. Vendors that handle PHI for us are required to protect it under a written agreement as HIPAA requires.

Communications

With your permission, we may use your contact information to send newsletters, marketing or promotional materials, and other information about our services. You can opt out at any time by using the unsubscribe link in any email or by replying STOP to any text message. We will not sell your Personal Information or your PHI. We will not use or disclose your PHI for marketing without your written authorization, except as HIPAA allows.

Cookies

Cookies are small files that may include an anonymous unique identifier. They are sent to your browser from a website and stored on your device. Like many sites, we use cookies to collect information and to understand how the Sites are used. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Sites.

Protected Health Information, HIPAA, and How We Ensure Compliance

Glow Wilco is a health care provider subject to HIPAA. We comply with the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule, along with applicable state privacy law. We do this by:

Following the written privacy and security policies and procedures of our practice, and reviewing them periodically.
Using administrative, physical, and technical safeguards to protect PHI, including access controls to our clinical and billing platform.
Limiting access to PHI to workforce members who need it for their jobs and training them on privacy and security.
Signing written business associate agreements with vendors that create, receive, maintain, or transmit PHI for us.
Using or disclosing only the minimum PHI necessary for a permitted purpose, other than for treatment.
Notifying affected individuals and, when required, federal regulators if a breach of unsecured PHI occurs.
Designating a Privacy Officer: {{name, title}}, {{phone}}, {{email}}.

You have rights over your PHI, including the right to access and request a copy, request corrections, request confidential communications, request restrictions, and receive an accounting of certain disclosures. These rights are explained in our Notice of Privacy Practices. If you believe your privacy rights were violated, you may complain to us or to the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

State Privacy Laws

We comply with the privacy laws of the state of Tennessee, where we provide services. Where state law gives you greater privacy protection than HIPAA, we follow the stricter rule.

Children's Privacy

The Sites are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Security

The security of your information is important to us. We use commercially reasonable administrative, technical, and physical safeguards to protect it. However, no method of transmission over the Internet or method of electronic storage is 100% secure, so we cannot guarantee its absolute security.

Changes to This Privacy Policy

This Privacy Policy is effective as of 10/20/2026 and remains in effect except with respect to any changes in its provisions in the future, which take effect immediately after being posted on this page. We may update this policy at any time, and you should review it periodically. Your continued use of the Sites after we post modifications means you acknowledge and agree to the modified policy.

If we make material changes, we will notify you by email at the address you provided or by placing a prominent notice on our Sites. Changes to our Notice of Privacy Practices will be handled as HIPAA requires.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact our Privacy Officer at {{name}}, {{phone}}, {{email}}, {{mailing address}}, or use our contact page.

Notice of Privacy Practices

Effective date: 10/20/2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Your Rights

You have the right to:

Get a copy of your paper or electronic medical record. We will provide a copy or summary, usually within 30 days of your request, and may charge a reasonable, cost-based fee.
Ask us to correct your record if you think it is incorrect or incomplete. We may say no, but we will tell you why in writing, usually within 60 days.
Request confidential communications, such as contact at a different phone number or address. We will say yes to all reasonable requests.
Ask us to limit what we use or share. We are not required to agree, except when you pay for a service out of pocket in full and ask us not to share that information with your health insurer.
Get a list of those with whom we have shared your information in the six years before your request, with some exceptions.
Get a copy of this notice, on paper or electronically, at any time.
Choose someone to act for you, such as a medical power of attorney or legal guardian. We will confirm the person has this authority before we act.
File a complaint if you feel your rights are violated, by contacting our Privacy Officer ({{name, phone, email}}) or the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Your Choices

For certain information, you can tell us your choices about what we share. You may tell us to share information with family, close friends, or others involved in your care. If you are not able to tell us your preference, for example if you are unconscious, we may share information if we believe it is in your best interest or needed to lessen a serious and imminent threat to health or safety.

We never sell your information. We will get your written permission before using or sharing your information for marketing purposes or sharing psychotherapy notes.

Our Uses and Disclosures

We typically use or share your health information in these ways:

Treat you. We can use your information and share it with other professionals who are treating you, including pharmacies and compounding pharmacies we send prescriptions to.
Run our organization. We can use and share your information to run our practice, improve your care, and contact you when necessary.
Bill for services. We can use and share your information to bill and get payment from health plans or other entities.
Help with public health and safety issues. For example, preventing disease, reporting adverse reactions to medications, and reporting suspected abuse, neglect, or domestic violence.
Do research. We can use or share your information for health research as HIPAA permits.
Comply with the law. We will share information if state or federal laws require it, including with the Department of Health and Human Services when it checks our compliance.
Respond to other requests. We can respond to organ and tissue donation requests, work with a medical examiner or funeral director, address workers' compensation, law enforcement, and other government requests, and respond to lawsuits and legal actions, as HIPAA permits.

Our Responsibilities

We are required by law to maintain the privacy and security of your protected health information.
We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
We must follow the duties and privacy practices described in this notice and give you a copy of it.
We will not use or share your information other than as described here unless you tell us we can in writing. You may change your mind at any time by telling us in writing.

Changes to the Terms of This Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request, in our office, and on our websites.