01.Executive Summary

Seven things every person touching Luxe Rejuvenate marketing needs to know. The rest of the document is the longer version.

02.HIPAA · Patient Privacy

Why HIPAA applies to Luxe Rejuvenate

Luxe Rejuvenate is a medical practice with a Medical Director (Palumbo D.O.), a Pharmacist (Urbatchka), and an R.N. owner (Franklin). It administers IVs, peptides, and injectables, and processes payment for medical services. Even if billing is cash-only, the standard assumption for any medical practice marketing engagement is to operate as a HIPAA covered entity. Ventari becomes a Business Associate the moment we touch any PHI on Luxe's behalf, which requires a signed BAA on file.

What counts as PHI in a marketing context

• Patient names tied to a treatment received
• Before-and-after photos identifiable to a person
• Video testimonials, chart-derived results
• Appointment confirmations, booking activity, post-purchase receipts
• IP addresses combined with a visit to a specific treatment page
• Anything that ties a real person to having received care from Luxe Rejuvenate

Not PHI: aggregated and de-identified data (e.g., "300+ clients with a 5-star average Google rating"). That is a factual summary of public reviews, not a patient story.

What a valid HIPAA marketing authorization looks like

• Specific description of the information used (e.g., "before and after photos of my abdomen on [date]")
• Who is authorized to use it (Luxe Rejuvenate) and who receives it (Meta, Ventari, public web visitors)
• Each purpose of the use (Meta advertising, display on luxerejuvenate.com, etc.)
• Expiration date or expiration event
• Clear statement of the patient's right to revoke in writing, and how
• Signature and date

03.HIPAA · Online Tracking (Meta Pixel, GA)

The single largest landmine in the Luxe Rejuvenate marketing stack. HHS issued tracking-tech guidance in December 2022, expanded it in March 2024, then a Texas federal court (American Hospital Association v. Becerra, June 2024) vacated the IP-plus-condition-visit portion. The remaining guidance still applies to booking flows, patient portals, and confirmation pages.

Page Type	Tracking Risk	Recommended Posture
Home, About, generic info	Low	Standard Meta Pixel acceptable. Recommend Consent Mode or clear cookie banner per state privacy laws.
Service pages (Peptides, NAD+, Beauty IV, etc.)	Moderate	Server-side Conversions API only. Hashed, minimum-necessary data. No client-side Pixel-only firing. Suppress booking events.
Booking, confirmation, post-purchase	High	No third-party pixels. No Meta Pixel. No standard Google Analytics. Use HIPAA-compliant analytics vendor with signed BAA (Freshpaint, Aptible, Piwik PRO).
Inside logged-in patient portal	Maximum	Zero third-party tracking. Full audit. Everything fired here is PHI by default.

Recommended tracking stack for launch

• Replace standard Meta Pixel with Meta Conversions API gateway, server-side, sending only de-identified, hashed top-of-funnel events (PageView, ContentView).
• Never send Lead, Schedule, Complete Registration, or Purchase events from booking or patient flows.
• Use a HIPAA-compliant analytics tool with a signed BAA for any treatment-page or booking-page measurement. Freshpaint specifically offers a HIPAA-compliant Meta Pixel and Google Analytics layer.
• Build a documented data flow map. Have Luxe Rejuvenate's medical director sign off before launch.

04.Meta Advertising · Health & Wellness Restrictions

In January-February 2025, Meta categorized Health & Wellness brands and applied advertising restrictions across the entire category. Luxe Rejuvenate qualifies on all three Meta triggers: associated with medical conditions, specific health statuses, and provider/patient relationships.

What is restricted

• No bottom-funnel conversion optimization. Cannot optimize for Purchase, Lead, Schedule, Complete Registration, or Add to Cart at the account level. Optimization limited to Landing Page View, Engagement, Reach.
• No conversion-based audience building. Cannot build Custom Audiences from purchase or booking events.
• Personal attribute restrictions. No copy or creative that asserts or implies the viewer has a specific health condition or attribute.
• Before-and-after imagery restricted. Side-by-side comparisons implying medical outcomes are blocked.
• Lookalike audiences off PHI-derived seeds prohibited.
• Second wave (early 2026): additional restrictions on lead-gen for physician practices and behavioral health clinics, rolling out now.

Personal attribute violations (the most common rejection reason)

05.Meta Advertising · Prescription Drugs and Peptides

Meta's Drugs and Pharmaceuticals policy is layered on top of Health & Wellness. Direct-to-consumer Rx ads are allowed in the U.S., but only with appropriate licensure and LegitScript Certification when prescription drugs are named.

What requires LegitScript Certification to name in ads

• GLP-1 brand names: Ozempic, Wegovy, Mounjaro, Zepbound
• Compounded GLP-1 references: semaglutide, tirzepatide
• Any peptide meeting the drug classification (BPC-157, GHK-Cu, etc.)

Recommended copy strategy until LegitScript is in place

06.FDA · Compounded Peptides and Bulk Drug Substances

The highest-risk service line. Compounded peptides cannot be advertised, dispensed, or administered legally unless the bulk drug substance is on FDA's 503A or 503B bulks list, or is FDA-approved as a finished drug, or has a USP monograph, or is in Category 1 of the interim 503A bulks list.

Current status by substance (as of May 11, 2026)

Substance	Status	Marketing Implication
Semaglutide (compounded)	Effectively prohibited	Do not advertise. Do not list on the website. Do not name in any creative.
Tirzepatide (compounded)	Same	Same.
GLP-1 brand names	Conditional	Only if Luxe has FDA-approved product through legitimate supply chain + LegitScript Certification.
BPC-157, GHK-Cu	Category 2, pending July 2026 review	Do not market by name until FDA reclassification is final and confirmed in Federal Register.
NAD+	Legally compoundable	Allowed to market, subject to Meta Health & Wellness rules and FDA disease-claim limits.
Sermorelin	Legally compoundable	Same as NAD+.
Other Category 2 peptides not on reclassification list	Not compoundable	Do not market.

07.FDA · Structure/Function vs. Disease Claims

Even for legal-to-compound substances, what Luxe Rejuvenate can claim about them is regulated. Only an FDA-approved drug can make a disease claim. Compounded medications, dietary ingredients, and IV formulations not FDA-approved for a disease cannot make disease claims without triggering FDA misbranding and FTC deceptive-advertising risk.

Service names that imply outcomes carefully ("Athlete Recovery IV," "Beauty/Youth IV," "Immune IV," "Energy IV") are defensible. Where things break is body copy that claims to treat or cure a condition.

08.FTC · Endorsement Guides and Testimonials

The FTC revised 16 CFR Part 255 in 2023. Headline change for healthcare marketers: the "results not typical" safe harbor was removed.

• Testimonials must depict typical results, OR the ad must clearly and conspicuously state what typical results actually are.
• Material connections must be disclosed clearly. Employee, paid influencer, comped patient, friend of founder — disclose in a way that is "difficult to miss and easily understandable."
• Acceptable social disclosures: #sponsored, #ad, "Paid partnership with [Brand]." Generic "thanks @brand" is not acceptable.
• Fake reviews are prohibited. The FTC finalized a rule in late 2024 with civil penalties up to $51,744 per violation per occurrence.
• Testimonialists must have actually used the service in a way representative of how a typical customer would.

For Luxe Rejuvenate specifically

• "300+ clients with 5-star Google ratings" — fine. Factual summary of public reviews, not testimonial endorsement.
• "Lisa lost 15 pounds in 30 days with our IV protocol" — needs HIPAA authorization, typical-results substantiation, and disclosure if Lisa is employee/comped.
• Influencer partnerships — clear sponsored-by-Luxe disclosure on every post, not just the first one.
• Medical team members in ads — fine. If they describe personal results, employee status should be clear.

09.Florida · Medical Director, Clinic Licensure, Disclaimers

Medical director

Florida requires every IV therapy operation to have a licensed MD or DO as medical director, with authority over clinical protocols, supervision, recordkeeping, and quality assurance. Palumbo D.O. is named in Context.md. Confirm signed medical director agreement on file, protocols documented, chart audits happening, escalation pathway defined.

RN scope of practice

A Florida-licensed RN can administer IV therapy under physician protocols. Franklin R.N. (owner) and any RN staff can therefore administer in the field. APRNs administering IV therapy in a med-spa setting operate under physician supervisory protocol, not autonomously. LPNs can administer under delegated supervision per Fla. Admin. Code R. 64B9-12.005.

Clinic licensure (Fla. Stat. 400.9905)

Florida 72-hour-refund disclaimer (Fla. Stat. 456.062)

Required on any ad offering free or discounted services by a licensed Florida health care practitioner:

10.TCPA · SMS and Email Marketing

Since Meta optimization is restricted for Luxe, email and SMS carry the bottom of the funnel. Rules to follow:

Marketing texts (promotions, offers, "book your next IV")

• Prior express written consent required. Must be in writing, clearly identify Luxe Rejuvenate, identify the phone number being authorized, and state the recipient is not required to consent as a condition of purchase.

Healthcare exemption (appointment, post-treatment, prescription)

• Autodialed texts to a cell phone the patient provided are allowed, but cannot include marketing content.
• Limited to 160 characters or less, with easy opt-out.
• Capped at 1 per day and 3 per week per provider.

FCC update (April 11, 2025)

Patients can revoke consent through any reasonable method (replying STOP, calling, written request). Organizations must process revocations within 10 business days.

11.Pre-Publish Checklist