SMS Messaging Policy

How patients consent to receive SMS messages on Luxey

Luxey collects explicit patient consent for SMS communications through the four opt-in screens shown below. Each screen presents a clear, unchecked-by-default consent checkbox with full disclosures before any message is sent.

Last updated: June 2026

Overview

Luxey is a practice management and EMR platform for medical aesthetics clinics. End users are patients of clinics that use Luxey. SMS messages are sent on behalf of those clinics for transactional and operational purposes only — appointment confirmations, appointment reminders, rescheduling notifications, intake instructions, treatment follow-up care, payment receipts, one-time passcodes (OTPs) for account login, and two-way patient communication initiated by the patient or sent by the clinic in response to a patient inquiry.

Marketing and promotional messages are not sent under transactional or 2FA campaigns and require separate, explicit consent collected through an independent marketing opt-in.

The four opt-in flows

Patients provide their mobile number and may opt in to SMS through one or more of the following screens, depending on how they engage with the clinic. Every screen uses the same optional, unchecked-by-default consent checkbox with identical disclosure language. Checking the box is the patient's choice — SMS consent is never required to book, check in, complete intake, or create an account.

Flow 1
Online booking
Public Luxey-hosted booking page accessed via the clinic's website or direct booking link
book.luxey.co/appointment
Book your appointment
[Clinic Name] · Online booking
First name
Sarah
Last name
Mitchell
Email
sarah.m@example.com
Mobile phone number
(303) 555-0142
Confirm booking
1
Phone field labeled clearly — patient knowingly provides their mobile number for SMS contact.
2
Optional, unchecked-by-default checkbox — patient must take affirmative action to consent. Consent is voluntary and is not required to complete the booking.
3
All required disclosures present — message types, "message and data rates may apply," frequency, STOP/HELP, and links to Privacy Policy and Terms of Service.
4
Consent logged with timestamp, IP address, and method — auditable record stored in the Luxey platform.
Flow 2
In-person check-in
Staff-handed tablet at the clinic front desk during arrival
app.luxey.co/check-in
Welcome — please confirm your contact info
[Clinic Name] · Front desk check-in
Mobile phone number
(303) 555-0142
Email
sarah.m@example.com
Complete check-in
1
Tablet handed directly to patient — patient enters and confirms their own information; staff does not check the consent box on the patient's behalf.
2
Identical consent language across all flows ensures patients see the same disclosures regardless of how they engage with the clinic.
Flow 3
Intake form completion
Sent to the patient via secure link prior to their appointment
intake.luxey.co
Pre-appointment intake
Step 1 of 4 — Contact & communication preferences
Confirm your mobile number
(303) 555-0142
Continue to medical history
1
Consent offered at the start of intake — the checkbox is optional; patients may skip it and continue to the rest of the intake form without opting in to SMS.
Flow 4
Patient account registration
Luxey patient portal account creation — supports 2FA enrollment for account security
app.luxey.co/register
Create your patient account
Access your records, treatment history, and appointments
Email
sarah.m@example.com
Mobile phone number
(303) 555-0142
Password
••••••••••••
Create account
1
Combined consent for transactional + 2FA — consent language explicitly covers OTP messages alongside other transactional communications.
2
SMS consent is optional for account creation — patients who prefer not to receive SMS can complete registration and receive verification codes by email instead. Patients who do opt in can reply STOP at any time or remove their number in account settings or via support@luxey.co.

Required disclosures — verification checklist

Every consent checkbox in every flow contains the following disclosures, as required by CTIA and carrier guidelines:

Program name and sender identified — patient sees the clinic name and platform name ("via Luxey") clearly.
Message types described — appointment confirmations, reminders, intake instructions, account communications, OTPs (where applicable).
Message and data rates disclosure — "Message and data rates may apply."
Frequency disclosure — "Message frequency varies (typically 2-4 per appointment)."
Opt-out instructions — "Reply STOP to opt out."
Help instructions — "HELP for help."
Privacy Policy link — direct link adjacent to checkbox to https://luxey.co/privacy-policy.html (Section 4 covers SMS specifically).
Terms of Service link — direct link to https://luxey.co/terms-of-service.html (Section 6 covers SMS specifically).
Unchecked by default — patient must take affirmative action.
Consent is optional and not a condition of purchase — patients can decline SMS and still book, check in, complete intake, create an account, and receive clinical service. Account verification is available by email for patients who do not opt in to SMS.
No third-party sharing — mobile numbers are never sold, rented, or shared with third parties for their own marketing purposes.

Opt-out and help handling

Patients can opt out of SMS messages at any time by replying STOP to any message they receive. Upon receiving STOP, Luxey:

Patients can also reply HELP at any time to receive a support response with the program name, sender clinic, and contact information for further assistance (support@luxey.co).

Twilio's Advanced Opt-Out feature is enabled across all Luxey messaging services, which honors STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE, and OPTOUT keywords automatically.

Documentation references

The screens above reflect Luxey's consent collection interface. Live click-through access can be provided to compliance reviewers on request at support@luxey.co.