Privacy Policy

1. Information We Collect

Information You Provide

• Contact & identifying information: name, mobile phone number, email address, mailing address
• Demographic data: date of birth, gender identity, zip code
• Account information: communication preferences, credentials, settings
• Medical information: health history, conditions, allergies, treatment history (collected in compliance with applicable healthcare privacy laws)
• Payment & financial data: billing address details (payment card numbers are processed by our PCI-compliant payment processor and are never stored on our servers)
• Communication data: messages sent via SMS, MMS, RCS, email, website forms, or social media
• Audio/visual information: before-and-after photos, treatment videos, call recordings (with your consent)

Information Collected Automatically

• Device & browser information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, time spent, referring URLs, click patterns
• Cookies & similar technologies: we use cookies, pixel tags, and local storage to improve your experience and analyze site performance
• Location data: approximate location derived from your IP address

Information from Third Parties

• Data enhancement from aggregators and marketing partners
• Referral information from refer-a-friend programs
• Information from social media platforms when you interact with our profiles

2. How We Use Your Information

We use the information we collect to:

• Schedule appointments and provide personalized treatments
• Respond to inquiries and communicate about your care
• Process payments and manage your account
• Send appointment reminders, pre/post-treatment instructions, and follow-ups via SMS, RCS, or email
• Improve our services, website, and overall patient experience
• Comply with legal and regulatory obligations
• Detect, prevent, and address fraud or security issues

3. How We Share Your Information

We do not and will not sell, rent, or otherwise share your contact or mobile phone information with any third parties or affiliates for marketing purposes.

We may share information with:

• Service providers: companies that help us operate our business (e.g., payment processing, appointment scheduling, SMS/email delivery, website hosting, analytics)
• Legal compliance: when required by law, court order, or governmental authority
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to applicable privacy protections

4. Photos & Video

With your written consent, we may photograph or record treatments for clinical documentation and before-and-after comparisons. LeMed does not create a record of facial geometry from your photos or videos, and does not use your photos or videos for biometric identification purposes.

Marketing use of your photos or videos (such as on our website or social media) requires separate, explicit consent which you may revoke at any time by contacting us.

5. Cookies & Analytics

We use cookies and similar technologies to analyze website traffic, remember preferences, and improve your browsing experience. Our analytics partners may include Google Analytics and similar services.

Managing cookies: You can control cookies through your browser settings. Disabling cookies may limit certain website functionality. You may also opt out of Google Analytics by installing the Google Analytics browser opt-out add-on.

Please note that opting out of analytics cookies does not opt you out of being served advertising by other means.

6. Third-Party Advertising

We may work with third-party partners for analytics and targeted advertising. These partners may use cookies and similar technologies to collect information about your activity on our site and across other websites to provide you with relevant advertisements.

You can opt out of targeted advertising through the Digital Advertising Alliance or the Network Advertising Initiative.

7. SMS & Communication Consent

By providing your mobile phone number and submitting a contact or booking form, you consent to receive text/SMS/RCS messages from LeMed Spa regarding your inquiry, appointments, and patient care. Message and data rates may apply. Message frequency varies.

• To opt out of text messages: reply STOP to any message
• To opt out of marketing emails: click the unsubscribe link in any email
• To update preferences: contact us at privacy@lemedspa.com

Opting out of marketing messages will not affect transactional communications related to your appointments or care.

8. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your personal data. These include encrypted data transmission (TLS/SSL), secure payment processing, access controls, and regular security reviews.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. Data Retention

We retain your personal information for as long as your account is active, as needed to provide services, or as required by law (including healthcare record retention requirements). When information is no longer needed, we securely delete or anonymize it.

10. Your Rights

Depending on your state of residence, you may have the right to:

• Access: request a copy of the personal data we hold about you
• Correct: request correction of inaccurate information
• Delete: request deletion of your personal data, subject to legal retention requirements
• Opt out: decline the sale of your personal data or targeted advertising
• Data portability: receive your data in a commonly used, machine-readable format
• Appeal: challenge our decision regarding a privacy request

To exercise any of these rights, contact us at privacy@lemedspa.com. We will verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

11. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including:

• Right to Know: what personal information we collect, use, disclose, and sell
• Right to Delete: request deletion of personal information
• Right to Correct: fix inaccurate personal information
• Right to Opt-Out of Sale/Sharing: decline data sale or sharing for targeted advertising
• Right to Limit Sensitive Data Use: restrict use of sensitive personal information

We may engage in targeted advertising practices that could constitute "sale" or "sharing" under California law. To opt out, email privacy@lemedspa.com or visit privacyrights.info.

Authorized agents may submit requests on your behalf with signed written permission or power of attorney documentation. We do not currently respond to browser Do Not Track signals.

12. Other State-Specific Rights

Residents of Colorado, Connecticut, Nebraska, New Jersey, Utah, Texas, Virginia, and Nevada may have additional privacy rights under their respective state laws, including rights to access, delete, correct, and opt out of data sales and targeted advertising.

Nevada residents: You may opt out of the sale of covered information by contacting privacy@lemedspa.com with your full name, address, email, and phone number.

To exercise any state-specific privacy rights, contact privacy@lemedspa.com.

13. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party service you visit.

14. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

15. International Data Transfer

Your information is transferred to and processed in the United States. By using our services, you consent to this transfer. If you are accessing our services from outside the United States, please be aware that your data may be subject to U.S. laws, which may differ from those in your jurisdiction.

16. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be posted on this page with a revised effective date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.