Privacy Policy

Effective date: 10/13/2025 | Last updated: 10/24/2026

This Privacy Policy describes how M Aesthetics (“we,” “us,” or “our”) collects, uses, shares, and protects information when you visit www.maestheticspdx.com, contact us, request appointments, subscribe to marketing, or follow links from our website. This draft must be checked against our actual website tools and business practices before publication.

1. Scope and healthcare privacy

This policy addresses information handled through our public website and related business interactions. Medical records and protected health information (“PHI”) are governed by applicable healthcare privacy laws and, where applicable, our separate HIPAA Notice of Privacy Practices. This policy is not a substitute for that notice. If a third-party booking or patient portal has its own privacy notice, review it as well.

2. Information we may collect

Depending on how you use the website, we may collect: (a) information you provide, such as name, email address, phone number, messages, appointment requests, and marketing preferences; (b) technical information, such as IP address, browser, device type, approximate location derived from IP, pages visited, and referring links; (c) appointment or transaction details made available to us by service providers; and (d) information you voluntarily submit in forms. Do not submit sensitive health information through general website forms unless we clearly identify a secure, appropriate channel. [VERIFY: list actual forms and fields.]

3. How we use information

We may use information to respond to inquiries; facilitate appointment requests and related communications; administer website features and customer service; provide newsletters and promotions where permitted; maintain website security; analyze website performance; meet legal obligations; and protect our rights. Where applicable law requires consent or another specific legal basis, we will obtain it.

4. Appointments and third-party platforms

Our website may link to or integrate with an external appointment scheduling, patient communication, or payment provider. Information you enter directly into those systems may be collected by the provider under its own privacy terms and, where applicable, contractual healthcare privacy protections. [VERIFY: name booking, intake, payment and patient-messaging providers and identify whether data is embedded on the site or collected on another site.]

5. Cookies, analytics and advertising technologies

Our website may use essential cookies and, if enabled, analytics or advertising technologies that collect information about website use. Some technologies can share browsing information with third parties. We will describe the tools actually in use and provide legally required choices or consent mechanisms. We will not knowingly deploy tracking technologies in a manner inconsistent with applicable healthcare privacy requirements. [VERIFY: cookie banner, analytics, pixels, embedded media, and consent settings; remove categories not used.]

6. Email and text marketing

If you subscribe, we may send newsletters, announcements, or promotions. You may unsubscribe using the link in a marketing email or follow opt-out instructions for marketing texts. We will obtain any consent required for automated marketing calls or texts. Opting out of marketing does not necessarily stop permitted appointment or service messages. [VERIFY: email platform and whether SMS marketing is offered.]

7. Affiliate links and external websites

Our website may link to independent skincare retailers and other third-party websites. When you follow an affiliate link, the third party may collect information about your visit or purchase under its own policies. We do not control those independent privacy practices. If we receive compensation for qualifying referrals, we will provide clear affiliate disclosures near relevant links.

8. When information may be shared

We may share information with vendors that help operate our website or business, such as hosting, scheduling, communications, analytics, and security providers, subject to applicable legal and contractual requirements. We may also disclose information when required by law, to respond to lawful requests, or to protect safety and legal rights. We do not represent that information is never shared; actual disclosures depend on our verified vendor configuration. [VERIFY: vendors, categories of data shared, and whether any data is sold or used for targeted advertising.]

9. Data security

We use reasonable administrative, technical, and physical safeguards appropriate to the information involved. No internet transmission or storage system can be guaranteed completely secure. For sensitive patient communications, use the channels specifically designated by our practice.

10. Retention

We retain information for as long as reasonably necessary for the purposes described here and to meet applicable legal, clinical recordkeeping, tax, security, and contractual requirements. Different categories of information may have different retention periods. [VERIFY: actual retention practices and vendor settings.]

11. Your choices and requests

You may contact us to request information about our privacy practices, update contact details, or ask about available access, correction, or deletion options. We will respond as required by applicable law. Certain information, including medical records, may be subject to separate healthcare access and retention requirements. Browser settings may allow you to limit cookies; some website features may be affected.

12. Children’s privacy

The public website is not directed to children under 13. We do not knowingly solicit personal information from children under 13 through general website features. If you believe a child has provided information through our website, please contact us. Treatment of minors, if offered, is handled under separate clinical and consent requirements.

13. Changes to this policy

We may update this Privacy Policy as our website, vendors, practices, or legal obligations change. The current version will be posted here with an updated effective date. When required by law, we will provide additional notice or obtain consent.

14. Contact us

M Aesthetics

4052 Orchard Drive

Lake Oswego, Oregon

Website: www.maestheticspdx.com