Privacy & PHI policy
Effective date: July 28, 2026
Tenora ("Tenora," "we," "us") is operated by Tenora Strategies, LLC, doing business as Tenora, located at 1322 W Loop 1604 N, Suite 104, San Antonio, TX 78251. This policy explains how we collect, use, and protect information about you when you visit our website, book services, or receive treatment at our studio.
Scope
Tenora provides laser hair removal and laser tattoo removal services performed under physician delegation. We are not, in most cases, a "covered entity" under the federal Health Insurance Portability and Accountability Act (HIPAA). However, Texas law casts a wider net than HIPAA: the Texas Medical Records Privacy Act (Texas Health & Safety Code Chapter 181, commonly called "HB 300") applies to businesses that assemble, collect, analyze, use, evaluate, store, or transmit protected health information (PHI), even if they are not HIPAA-covered entities. Because we collect intake information about your skin, hair, tattoos, and relevant medical history to plan safe treatment, we treat that information with the same care HB 300 requires.
Information we collect
Contact and account information: name, email, phone number, address, birthdate.
Intake and treatment information: skin type, hair/tattoo characteristics, relevant medical history, medications, allergies, and other information you provide so your provider can plan treatment safely.
Photos: before/after or progress photos taken with your separate, specific consent (see "Photos and Testimonials" below).
Scheduling and service data: appointment history, service selections, and related records, processed through our scheduling platform (Zenoti).
Payment information: processed through third-party payment and financing partners (including Cherry, CareCredit, and PatientFi). Tenora does not store full payment card numbers; those are handled directly by our processors.
Website and device data: IP address, browser type, pages visited, and cookies used for site functionality and analytics.
How we use your information
To evaluate whether treatment is appropriate for you and to plan and provide services safely.
To schedule, confirm, and manage appointments.
To process payments and financing applications through our third-party partners.
To communicate with you about your appointments, aftercare, and (with your consent) promotional offers.
To comply with recordkeeping obligations under Texas Medical Board rules and Texas law.
To improve our website and services.
How we share your information
We do not sell your personal information. We may share information with:
The supervising physician and trained staff involved in your care.
Service providers who help us operate (scheduling software, payment processors, financing partners), under confidentiality obligations.
Government agencies or regulators when required by law, subpoena, or to protect health and safety.
A successor entity in the event of a sale or reorganization of the business.
Photos and testimonials
Before/after photos, video, and testimonials are used only with your separate written consent, which you may withdraw at any time as described in that consent form. Withdrawal does not affect photos already published before your withdrawal request, though we will make reasonable efforts to remove them upon request.
Data retention
Treatment-related records are retained consistent with Texas Medical Board recordkeeping requirements (generally a minimum of seven years from the date of last treatment for adult patients). Website analytics data is retained only as long as necessary for the purposes described above.
Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Your rights
You may request access to, or correction of, your intake and treatment records by contacting us at [CONTACT EMAIL/PHONE]. You may also file a complaint with the Texas Medical Board at [TMB complaint link] or the Texas Attorney General's office if you believe your information has been mishandled.
Cookies and analytics
Our website uses cookies and similar technologies for functionality and analytics. You can control cookies through your browser settings; disabling them may affect site functionality.
Children
Our services and website are not directed to individuals under 18. We do not knowingly collect information from minors without parental or guardian consent required for treatment.
Changes to this policy
We may update this policy from time to time. The "Effective date" above will reflect the most recent revision. Material changes will be noted on this page.
Contact us
Questions about this policy: Contact Us
Tenora Strategies, LLC, 1322 W Loop 1604 N, Suite 104, San Antonio, TX 78251