Privacy Policy
Introduction
Simply Skin (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [insert website URL] and use our services.
Please read this Privacy Policy carefully. By accessing or using our website and services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our website.
Information We Collect
Personal Information You Provide
We may collect personal information that you voluntarily provide to us when you:
- Schedule an appointment or consultation
- Create an account on our website
- Fill out contact forms or inquiry forms
- Subscribe to our newsletter or promotional communications
- Participate in surveys or promotions
- Communicate with us via email, phone, or chat
This information may include:
- Name
- Email address
- Phone number
- Mailing address
- Date of birth
- Payment information
- Medical history and health information (as required for treatments)
- Photos (before/after treatment photos, with your consent)
- Any other information you choose to provide
Information Collected Automatically
When you visit our website, we may automatically collect certain information about your device and browsing activity, including:
- IP address
- Browser type and version
- Operating system
- Referring website addresses
- Pages viewed and time spent on pages
- Links clicked
- Device identifiers
- Location data (with your permission)
Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us:
- Remember your preferences and settings
- Understand how you use our website
- Improve website functionality
- Deliver targeted advertising
- Analyze website traffic and performance
You can control cookie preferences through your browser settings, though disabling cookies may affect website functionality.
How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery
- Scheduling and managing appointments
- Providing medical spa treatments and services
- Processing payments and billing
- Maintaining medical records and treatment history
- Communicating about your appointments and care
Communication
- Responding to your inquiries and requests
- Sending appointment reminders and confirmations
- Providing customer support
- Sending newsletters and promotional materials (with your consent)
- Notifying you of special offers, new services, or updates
Website Improvement
- Analyzing website usage and performance
- Improving website design and functionality
- Personalizing your website experience
- Conducting research and analytics
Legal and Business Operations
- Complying with legal obligations and regulations (including HIPAA)
- Protecting our rights and property
- Preventing fraud and ensuring security
- Enforcing our terms and conditions
- Managing business operations
How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers
We may share information with third-party service providers who perform services on our behalf, including:
- Payment processors
- Appointment scheduling platforms
- Email and communication service providers
- Website hosting and analytics providers
- Marketing and advertising partners
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
Healthcare Providers
With your consent, we may share relevant medical information with:
- Referring physicians or healthcare providers
- Insurance companies (for billing purposes)
- Medical laboratories or imaging centers
Legal Requirements
We may disclose your information when required by law or in response to:
- Court orders or subpoenas
- Legal processes or government requests
- Protection of our rights or property
- Emergency situations involving health or safety
Business Transfers
If Simply Skin is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
HIPAA Compliance
As a medical spa providing healthcare services, we comply with the Health Insurance Portability and Accountability Act (HIPAA) and maintain appropriate safeguards to protect your protected health information (PHI). You will receive a separate Notice of Privacy Practices that details how we handle your medical information in accordance with HIPAA regulations.
Data Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of sensitive data
- Secure server infrastructure
- Access controls and authentication
- Regular security assessments
- Staff training on privacy and security practices
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
Access and Correction
You have the right to access and update your personal information. You may request corrections to inaccurate or incomplete data.
Data Portability
You may request a copy of your personal information in a structured, commonly used format.
Deletion
You may request deletion of your personal information, subject to legal and legitimate business requirements.
Opt-Out
You may opt out of receiving marketing communications at any time by:
- Clicking the “unsubscribe” link in our emails
- Contacting us directly
- Updating your communication preferences in your account settings
Please note that even if you opt out of marketing communications, we may still send you transactional messages related to your appointments and services.
California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of your information (though we do not sell personal information).
Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Children’s Privacy
Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.
International Data Transfers
If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our service providers operate. By using our website and services, you consent to this transfer.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated Privacy Policy on our website
- Updating the “Effective Date” at the top of this policy
- Sending you an email notification (for significant changes)
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
For HIPAA-related inquiries or to exercise your rights under HIPAA, please refer to our Notice of Privacy Practices or contact our Privacy Officer directly.
Your Consent
By using our website and services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.