Privacy Policy

INNOVAES LLC – A Life Optimization Center
Last Updated: September 6, 2026

At INNOVAES LLC – A Life Optimization Center (“INNOVAES,” “we,” “us,” or “our”), we respect your privacy and are committed to protecting the information entrusted to us.

This Privacy Policy explains how INNOVAES collects, uses, discloses, and protects personal information when you visit our website, submit a form, request information, communicate with our team, schedule an appointment, make a payment, or otherwise interact with INNOVAES through our website and related digital services.

Because INNOVAES provides services that may involve health optimization, regenerative aesthetics, wellness, and other services involving sensitive personal information, we recognize the importance of maintaining appropriate privacy and security safeguards.

1. Information We Collect

Depending on how you interact with INNOVAES, we may collect information that you voluntarily provide, information generated through your use of our website, and information necessary to provide our services.

Information You Provide

You may provide personal information when you:

• Submit a website contact or inquiry form

• Request information about our services

• Request or schedule a consultation or appointment

• Become a client

• Communicate with our team by email, telephone, text, or other channels

• Complete forms, questionnaires, or assessments

• Make a payment

• Subscribe to communications

• Otherwise provide information directly to us

This information may include:

• Name

• Email address

• Telephone number

• Mailing address

• Date of birth or age, where relevant

• Appointment and scheduling information

• Communication preferences

• Information about your goals, interests, or areas of concern

• Health, wellness, lifestyle, or treatment-related information that you voluntarily provide

• Payment and transaction information

• Other information you choose to provide

Health-Related Information

Depending on the services you request, you may voluntarily provide information concerning your health, wellness, medical history, medications, treatments, lifestyle, goals, or other personal circumstances.

Because this information may be sensitive, we seek to limit its collection, use, disclosure, and access to legitimate purposes and authorized individuals.

Please do not submit highly sensitive medical information through a general website contact form unless specifically requested by INNOVAES. When sensitive information is required for a consultation or service, INNOVAES may provide a more appropriate or secure method for submitting that information.

2. Information Collected Automatically

When you visit our website, certain technical and usage information may be collected automatically.

This may include:

• IP address

• Browser type and version

• Device type

• Operating system

• Pages visited

• Date and time of visits

• Referring website or source

• General geographic information

• Website interactions and navigation patterns

• Other technical information associated with your visit

We may use this information to maintain website functionality and security, understand how visitors use our website, improve our digital experience, and evaluate the effectiveness of our communications.

3. How We Use Personal Information

INNOVAES may use personal information to:

• Respond to inquiries and requests

• Communicate with prospective and existing clients

• Schedule and manage appointments

• Provide requested services

• Understand your goals and needs

• Support consultations and individualized recommendations

• Process payments and transactions

• Send appointment confirmations and service-related communications

• Provide educational information or resources you have requested

• Improve our website, services, and client experience

• Maintain business and client records

• Protect the security and integrity of our systems

• Prevent fraud, misuse, or unauthorized activity

• Comply with applicable legal and regulatory requirements

• Send marketing communications where permitted and consistent with your preferences

We do not use personal information for purposes materially inconsistent with those described in this Privacy Policy without providing appropriate notice or obtaining consent where required.

4. Health Information and HIPAA

INNOVAES recognizes that information relating to an individual’s health, treatment, wellness, or medical history may be highly sensitive.

Where HIPAA applies to the services and information involved, INNOVAES maintains administrative, technical, and organizational safeguards designed to protect Protected Health Information (“PHI”) in accordance with applicable requirements of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations.

INNOVAES has entered into a Business Associate Agreement (“BAA”) with Google for applicable Google Workspace services and has configured its Google Workspace environment with security controls intended to support the protection of PHI.

These controls include, as applicable:

• Business Associate Agreement with Google

• Transport Layer Security (TLS) enforcement for email

• SPF email authentication

• 2048-bit DKIM authentication

• DMARC protection

• Two-factor authentication (2FA)

• Data Loss Prevention (DLP) rules

• External email forwarding restrictions

• Device management controls

• Audit logging

• Google Vault retention and eDiscovery capabilities

• Enhanced phishing and security protections

• Least-privilege administrative access

INNOVAES limits access to sensitive information according to role, authorization, and legitimate business need.

Where applicable, sensitive information is transmitted, stored, and processed using systems and safeguards designed to protect its confidentiality and integrity.

HIPAA Rights

Where HIPAA applies, individuals may have rights concerning their Protected Health Information, including rights relating to access, amendment, certain restrictions, confidential communications, and accounting of certain disclosures, subject to applicable HIPAA requirements and limitations.

Where required by law, INNOVAES will provide a separate Notice of Privacy Practices describing its HIPAA-related privacy practices and individual rights.

This website Privacy Policy primarily governs information collected through the INNOVAES website and related digital interactions. It does not replace a separate Notice of Privacy Practices where one is required.

5. Secure Communications

INNOVAES uses security measures designed to protect sensitive information when it is transmitted and stored.

Our Google Workspace environment has been configured with security controls that include TLS enforcement, email authentication, multi-factor authentication, Data Loss Prevention, audit logging, phishing protection, and other security measures.

Where applicable, email communications involving sensitive information may be transmitted using TLS encryption.

Although INNOVAES maintains safeguards designed to protect information, no electronic communication, website, network, database, or storage system can be guaranteed to be completely secure.

Clients should use secure communication methods provided or recommended by INNOVAES when submitting sensitive health or personal information.

6. Website Forms

Our website may contain forms that allow you to contact INNOVAES, request information, or express interest in our services.

Information submitted through these forms may be transmitted to INNOVAES and/or technology providers used to operate the website and forms.

Please provide only the information reasonably necessary for the purpose of the form.

General website forms should not be used to submit emergency medical information, highly sensitive medical records, financial account credentials, passwords, or other information that you would not want transmitted through a standard web form.

If more sensitive information is required, INNOVAES may provide an alternative method for submitting that information.

7. Scheduling, Client Management, and Payments

INNOVAES uses Square and its related services to support certain business functions, which may include client management, appointment scheduling, communications, and payment processing.

When you schedule an appointment, make a payment, or otherwise interact with INNOVAES through a Square-powered service, information you provide may be collected and processed by Square in accordance with its own privacy practices and policies.

Information processed through these services may include:

• Name

• Contact information

• Appointment information

• Transaction information

• Payment-related information

• Other information necessary to provide the requested service

Payment card information is processed through Square’s payment infrastructure and is not intended to be stored directly by INNOVAES.

Third-party services maintain their own privacy and security practices. We encourage you to review the applicable privacy policies of third-party platforms you interact with.

8. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, analytics technologies, and similar technologies to operate and improve the website.

These technologies may help us:

• Understand website traffic and usage

• Improve website functionality

• Remember preferences

• Measure communications

• Evaluate marketing performance

• Maintain website security

• Understand how visitors interact with our content

Some technologies may be provided by third-party service providers.

Where required by applicable law, INNOVAES will provide appropriate notice and choices regarding non-essential cookies and similar technologies.

You may also adjust certain cookie settings through your browser. Disabling cookies may affect some website functionality.

9. Analytics and Third-Party Technologies

INNOVAES may use third-party technologies and service providers to support website analytics, communications, scheduling, payments, security, hosting, marketing, and other business functions.

These providers may process information on our behalf when necessary to provide their services.

Depending on the technology used, these providers may receive information such as device information, browser information, IP address, pages visited, referring sources, and interactions with the website.

INNOVAES seeks to evaluate the privacy and security implications of technologies used on our website and to avoid transmitting sensitive information to third parties through technologies where such transmission is not appropriate or authorized.

10. How We Share Information

INNOVAES does not sell your personal information.

We may disclose or share personal information when reasonably necessary to:

• Provide services you request

• Schedule or manage appointments

• Process payments

• Operate and maintain our website

• Work with service providers supporting our business

• Maintain security and prevent fraud or misuse

• Respond to lawful governmental or legal requests

• Comply with applicable laws or regulations

• Protect the rights, safety, property, or security of INNOVAES, our clients, or others

• Support a merger, acquisition, financing, restructuring, or sale of all or part of our business

We seek to limit disclosures to information reasonably necessary for the applicable purpose.

11. Marketing Communications

If you provide your contact information, INNOVAES may communicate with you regarding services, consultations, appointments, educational information, events, updates, or other information relevant to your relationship with us.

You may opt out of marketing communications at any time by following the unsubscribe instructions included in the communication or by contacting us directly.

Opting out of marketing communications will not prevent necessary service-related communications, including appointment confirmations, scheduling information, payment-related communications, or other transactional messages.

We do not condition access to services on your consent to receive marketing communications.

12. Data Security

INNOVAES maintains administrative, technical, and organizational safeguards designed to protect personal information and, where applicable, Protected Health Information from unauthorized access, use, alteration, disclosure, or destruction.

Our security practices may include:

• Encrypted transmission of information

• TLS email encryption

• Strong email authentication and domain protection

• SPF, DKIM, and DMARC

• Multi-factor authentication

• Data Loss Prevention controls

• Role-based and least-privilege access

• Managed device controls

• Security monitoring and audit logging

• Phishing and threat protection

• Restrictions on external email forwarding

• Data retention and eDiscovery controls

• Google Vault

• Vendor and service-provider agreements

• Appropriate access and security reviews

INNOVAES uses Google Workspace under a Business Associate Agreement and has implemented security configurations intended to support HIPAA requirements for applicable Protected Health Information.

Despite these safeguards, no electronic system or method of transmission can be guaranteed to be completely secure.

If INNOVAES becomes aware of a security incident involving information subject to applicable breach-notification requirements, we will respond in accordance with applicable federal and state law.

13. Data Retention

INNOVAES retains personal information for as long as reasonably necessary to:

• Provide requested services

• Maintain business and client relationships

• Fulfill legitimate business purposes

• Comply with legal or regulatory obligations

• Resolve disputes

• Enforce agreements

• Protect our legitimate business interests

Retention periods may vary depending on the type of information, the purpose for which it was collected, and applicable legal requirements.

When information is no longer reasonably required, we may securely delete, anonymize, or otherwise dispose of it in accordance with applicable law and our business practices.

14. Your Privacy Rights

Depending on where you live and applicable law, you may have certain rights concerning your personal information.

These rights may include the ability to:

• Request access to personal information we maintain about you

• Request correction of inaccurate information

• Request deletion of certain information

• Request information about how your personal information is collected or used

• Opt out of certain forms of processing or marketing

• Withdraw consent where processing is based on consent

• Exercise other rights provided by applicable law

Certain information may be exempt from deletion or other requests where INNOVAES is legally required or permitted to retain it.

To exercise an applicable privacy right, please contact us using the information provided below. We may need to verify your identity before completing certain requests.

15. State Privacy Rights

Certain U.S. states provide residents with additional privacy protections.

If a state privacy law applies to INNOVAES and to your personal information, you may have additional rights concerning the collection, use, disclosure, or processing of your information.

INNOVAES does not sell personal information for monetary consideration.

Where applicable, we will honor privacy rights provided under state law and will not discriminate against individuals for exercising applicable privacy rights.

16. Children’s Privacy

Our website and services are not directed toward children under the age of 13.

We do not knowingly collect personal information from children under 13 through our website.

If you believe a child has provided personal information to INNOVAES without appropriate authorization, please contact us so that we can take appropriate steps.

17. Third-Party Websites

Our website may contain links to third-party websites, platforms, or services.

INNOVAES is not responsible for the privacy practices, security, or content of third-party websites.

We encourage you to review the privacy policies of any third-party website or platform before providing personal information.

18. International Visitors

INNOVAES is a U.S.-based organization.

If you access our website from outside the United States, your information may be transferred to, stored in, or processed in the United States or other locations where INNOVAES or its service providers operate.

Privacy and data protection laws in those locations may differ from those in your country of residence.

By using our website and providing information to us, you acknowledge that your information may be processed in accordance with applicable U.S. law and this Privacy Policy.

19. Changes to This Privacy Policy

INNOVAES may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable laws.

When changes are made, we will update the “Last Updated” date at the beginning of this Privacy Policy.

We encourage you to review this page periodically to remain informed about how INNOVAES collects, uses, and protects personal information.

20. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact:

INNOVAES LLC – A Life Optimization Center

Email: clinical@innovaes.life
Address: 1690 30th St, Boulder, CO. 80301
Website: https://innovaes.life

We will make reasonable efforts to respond to privacy inquiries within the timeframe required by applicable law.

Important Notice

This Privacy Policy describes INNOVAES’ general website, digital, and business privacy practices. It should be read together with any applicable Notice of Privacy Practices, client agreements, consent forms, or other privacy notices provided by INNOVAES.

INNOVAES maintains security controls designed to support the protection of sensitive information and has entered into applicable Business Associate Agreements with service providers, including Google, where required for applicable services.

However, HIPAA requirements apply based on the nature of the entity, services, information, and specific activities involved. Accordingly, references to HIPAA in this Privacy Policy apply only where HIPAA is applicable.

This Privacy Policy is not legal advice and does not replace a legal review of INNOVAES’ actual data practices, technology stack, contractual arrangements, state privacy obligations, healthcare regulatory status, or security policies.