Privacy Policy
Last Updated: March 2025
Your Privacy Matters
Eyes on Skin Spa ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your personal information.
1. Information We Collect
We may collect information about you in a variety of ways. The information we may collect on the site includes:
- Personal Identification Information: Name, email address, phone number, mailing address, and date of birth (when provided for booking or membership)
- Health Information: Skin type, allergies, previous treatments, and other health information relevant to your care
- Payment Information: Credit card numbers and billing address (processed securely through third-party payment processors)
- Browsing Information: Device type, browser type, IP address, pages visited, and how you interact with our website
2. How We Use Your Information
We use the information we collect in the following ways:
- To process and complete your appointments and treatments
- To manage membership accounts and billing
- To send appointment reminders and follow-up care instructions
- To improve our services and website user experience
- To respond to inquiries and provide customer support
- To send promotional emails or newsletters (only with your consent)
- To comply with applicable laws and regulations
3. Health Information Protection (HIPAA)
We handle all health information in compliance with applicable privacy laws. Your medical records and treatment history are kept confidential and secure. We do not share your health information with third parties without your explicit consent, except as required by law.
4. How We Protect Your Information
We implement comprehensive security measures to protect your personal and health information, including:
- Secure encryption for online transactions
- Limited access to personal information for authorized staff only
- Regular security updates and monitoring
- Secure storage of physical records in a locked, controlled facility
5. Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
- Service Providers: Booking systems, payment processors, and email marketing platforms (under strict confidentiality agreements)
- Legal Requirements: When required by law or to protect the rights and safety of our business and clients
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience. Cookies help us remember your preferences and understand how you use our site. You can control cookie settings through your browser, though some features may not function properly if cookies are disabled.
7. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party sites before providing personal information.
8. Your Rights
Depending on your location, you may have certain rights regarding your personal information, including:
- The right to access your personal information
- The right to correct inaccurate information
- The right to request deletion of your information
- The right to opt out of marketing communications
To exercise these rights, please contact us using the information below.
9. Children's Privacy
Our services are not directed to children under 18 years old. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to remove such information and terminate the child's account.
10. Changes to This Policy
Eyes on Skin Spa may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last Updated" date at the top of this policy. Your continued use of our website following the posting of changes constitutes your acceptance of those changes.
11. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
12. Compliance
This Privacy Policy is designed to comply with applicable state and federal privacy laws, including but not limited to HIPAA, the California Consumer Privacy Act (CCPA), and the Virginia Consumer Data Protection Act (VCDPA).