PRIVACY POLICY

Grow Your Hair Back™ Hair Transplant Clinic

8201 Greensboro Drive, Suite 610, McLean, Virginia 22102

Grow Your Hair Back™ Hair Transplant Clinic is a trade name of Hair Restoration Clinic of McLean Virginia, Inc., a Virginia corporation.

Effective Date: March 17, 2026 | Last Updated: March 17, 2026

---

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Scope and Applicability

This Privacy Policy describes the privacy practices of Grow Your Hair Back™ Hair Transplant Clinic ("we," "us," or "our"), located at 8201 Greensboro Drive, Suite 610, McLean, Virginia 22102. This Policy applies to all information collected through:

• growyourhairback.com
• kellyanndc.com
• offers.kellyanndc.com
• Any subdomains, landing pages, or associated forms

This Policy governs how we collect, use, disclose, and protect your personal information, including Protected Health Information (PHI) under HIPAA.

2. Information We Collect

2.1 Information You Provide Directly

• Full name
• Mailing address
• Email address
• Mobile phone number
• Gender
• Hair loss history and medical-related information
• Questions or communications submitted via our forms

2.2 Information Collected Automatically

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on site
• Website interactions and click behavior

2.3 Protected Health Information (PHI)

We may collect health-related information such as medical history, conditions, photographs, and treatment records. All PHI is handled in strict compliance with HIPAA.

3. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and schedule consultations
• Provide healthcare and hair restoration services
• Send appointment reminders and follow-up communications
• Send promotional SMS messages and emails (with your explicit consent)
• Improve our website performance and marketing effectiveness
• Comply with applicable legal and regulatory obligations

4. HIPAA Notice of Privacy Practices

4.1 Permitted Uses and Disclosures

• Treatment: To coordinate and manage your care
• Payment: For billing and collections purposes
• Operations: Quality control and administration
• Legal: When required by law
• Breach Notification: If your PHI is compromised

4.2 Uses Requiring Authorization

We obtain your written authorization for any uses or disclosures not described above.

4.3 Your HIPAA Rights

You have the right to:

• Access and receive a copy of your PHI
• Request corrections to your PHI
• Request a record of disclosures
• Request restrictions on use or disclosure
• Request confidential communications

4.4 Business Associates

We work with third-party service providers under HIPAA-compliant Business Associate Agreements.

5. SMS / Text Message Communications

5.1 Consent and Opt-In

By opting in via our website form, you consent to receive SMS messages from Grow Your Hair Back™ Hair Transplant Clinic. We operate two separate SMS programs:

• Transactional SMS: Appointment reminders, order confirmations, and account notifications
• Marketing SMS: Promotional offers, special discounts, and service updates

Consent to receive SMS messages is never required as a condition of purchase or service.

5.2 Message Frequency

Message frequency varies depending on your interactions and preferences. You may receive up to several messages per month.

5.3 Message and Data Rates

Standard message and data rates may apply depending on your mobile carrier and plan.

5.4 How to Opt Out

You may opt out of SMS communications at any time by replying STOP to any message. You will receive a confirmation and no further messages will be sent.

5.5 Help and Support

Reply HELP to any SMS message or contact us directly at (571) 316-2032 or [email protected].

5.6 Carrier Liability

Carriers are not liable for delayed or undelivered messages.

6. Cookies and Tracking Technologies

6.1 What We Use

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website performance.

6.2 Types of Cookies

• Strictly necessary cookies: Required for the website to function
• Analytics cookies: Google Analytics — helps us understand how visitors use our site
• Marketing cookies: Meta Pixel — used for advertising and remarketing

6.3 Managing Cookies

You can accept or decline cookies via our consent banner, or manage them through your browser settings at any time.

6.4 Do Not Track

We do not currently respond to Do Not Track (DNT) browser signals.

7. Sharing of Personal Information

We may share your personal information only in the following limited circumstances:

• Service providers: Vendors who assist in operating our business (GoHighLevel, ATS Design Group, Google Analytics, Meta Platforms) under strict confidentiality agreements
• Legal requirements: When required by law, court order, or government authority
• Business transfers: In the event of a merger or acquisition
• With your consent: For any other purpose with your explicit permission

We do not sell your personal information to third parties.

8. Your Privacy Rights

Virginia Residents (VCDPA)

• Access and correct your personal data
• Request deletion of your personal data
• Opt out of targeted advertising or sale of personal data

California Residents (CCPA)

• Know what personal information is collected and how it is used
• Request deletion of personal information
• Opt out of the sale of personal information

All Users

• Request access to or correction of your information
• Opt out of marketing communications at any time
• Unsubscribe from SMS messages by replying STOP

To exercise any of these rights, contact us at [email protected] or (571) 316-2032.

9. Data Security

We implement industry-standard security measures to protect your information, including:

• SSL/TLS encryption for data in transit
• Access controls and authentication protocols
• Secure systems and infrastructure
• Regular staff training on data privacy

While we take reasonable precautions, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

11. Third-Party Service Providers

We work with the following service providers who may have access to limited personal data under confidentiality agreements:

• GoHighLevel (CRM and SMS platform)
• ATS Design Group (website management)
• Google Analytics (website analytics)
• Meta Platforms (advertising)

12. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Virginia and applicable federal regulations, including HIPAA.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated date will be reflected at the top of this page. Continued use of our services after changes are posted constitutes your acceptance of the revised Policy.

14. Contact Us

Privacy Officer: Kelly-Ann Jackson
Grow Your Hair Back™ Hair Transplant Clinic
8201 Greensboro Drive, Suite 610, McLean, Virginia 22102
Phone: (571) 316-2032
Email: [email protected]