Privacy Policy

1. Information We Collect

Personal Information

When you visit our website, register for services, fill out a form, subscribe to our newsletter, opt in to SMS communications, or interact with our site, we may collect the following information:

• Full name
• Clinic or business name
• Email address
• Phone number (including mobile number for SMS communications)
• Mailing address
• Website URL
• Business revenue information
• Professional challenges and business objectives
• SMS opt-in consent and preferences
• Any other information you voluntarily provide through forms, surveys, or correspondence

When We Collect Information

We collect information from you when you:

• Register on our website
• Submit a contact form or introduction request
• Subscribe to our newsletter or email communications
• Opt in to receive SMS/text message communications
• Respond to a survey or marketing communication
• Browse our website (through cookies and analytics)
• Engage with our customer support
• Participate in any other site features or services

2. How We Use Your Information

We may use the information we collect from you in the following ways:

• To provide and improve our services: To deliver advisory services, consultations, and educational content tailored to your business needs
• To communicate with you: To respond to inquiries, send confirmation emails and SMS messages, and follow up after correspondence (email, phone, SMS, or live chat)
• To send marketing communications: To send newsletters, updates, educational content, SMS messages, and promotional materials about our services (you may opt out at any time)
• To process transactions: To facilitate bookings, consultations, or any services you request
• To personalize your experience: To understand your preferences and provide content and service offerings tailored to your interests
• To improve our website: To analyze site traffic, user behavior, and interactions to enhance user experience and functionality
• To comply with legal obligations: To fulfill legal requirements and protect our rights

3. How We Protect Your Information

We implement a variety of security measures to maintain the safety of your personal information:

• Your personal information is stored on secured networks and is only accessible by a limited number of authorized personnel who have special access rights and are required to keep the information confidential
• All sensitive information you provide is encrypted via Secure Socket Layer (SSL) technology
• We use regular malware scanning and security monitoring
• We implement secure access controls and authentication protocols
• All payment transactions are processed through secure third-party gateway providers and are not stored on our servers

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to using industry-standard practices to protect your data.

4. Cookies and Tracking Technologies

Use of Cookies

Yes, we use cookies. Cookies are small files that a website or its service provider transfers to your computer's hard drive through your web browser (if you allow) that enables the site's systems to recognize your browser and capture and remember certain information.

How We Use Cookies

We use cookies to:

• Understand and save your preferences for future visits
• Compile aggregate data about site traffic and site interactions to offer better site experiences and tools in the future
• Track user behavior and analytics through trusted third-party services
• Provide personalized content and improve user experience

Managing Cookies

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies through your browser settings. Each browser is different, so consult your browser's Help menu to learn how to modify your cookies.

If you disable cookies, some features that enhance your site experience may not function properly, but your ability to access basic site content will not be affected.

5. Third-Party Services and Disclosure

Third-Party Service Providers

We work with trusted third-party service providers to operate our website, conduct our business, and provide services to you. These providers may include:

• Analytics Services: Google Analytics and similar tools to understand website traffic and user behavior
• Email Marketing Platforms: Services to manage and send email communications
• SMS/Text Messaging Platforms: Services to manage and send text message communications
• Customer Relationship Management (CRM) Systems: To manage client relationships and communications
• Payment Processors: Secure third-party services to process payments (Stripe, PayPal, etc.)
• Scheduling and Booking Systems: Calendar services for appointment scheduling

These third parties are contractually obligated to keep your information confidential and use it only for the purposes we specify.

Information Sharing

We do not sell, trade, or otherwise transfer your Personally Identifiable Information to outside parties except as described below:

• With trusted third-party service providers who assist us in operating our website and conducting business, provided they agree to keep information confidential
• When required by law, regulation, legal process, or governmental request
• To protect our rights, property, or safety, or that of our users or others
• In connection with a business transaction such as a merger, acquisition, or sale of assets (you will be notified via email and/or prominent notice on our website)

We may also share aggregated or de-identified information that cannot reasonably be used to identify you, for analytics, reporting, and business planning purposes.

6. Google Analytics and Advertising

We use Google Analytics and may use Google advertising services on our website. Google, as a third-party vendor, uses cookies to serve content and analyze traffic on our site.

Google's use of cookies enables it to serve content to our users based on their visits to our site and other sites on the internet. We use first-party cookies (such as Google Analytics cookies) and may use third-party cookies together to compile data regarding user interactions as they relate to our website.

Opting Out

You can opt out of Google Analytics by:

• Using the Google Analytics Opt-Out Browser Add-on
• Adjusting your preferences through the Google Ad Settings page
• Visiting the Network Advertising Initiative Opt-Out page

7. Email and SMS Communications Compliance

Email Communications — CAN-SPAM Act Compliance

Why We Collect Email Addresses:

We collect your email address to:

• Send information, respond to inquiries, and address your requests or questions
• Provide updates, newsletters, and educational content related to medical spa management and scaling
• Send promotional materials about our advisory services, courses, and resources
• Deliver transactional emails related to services you have requested

CAN-SPAM Act Compliance:

To comply with the CAN-SPAM Act, we agree to the following:

• Not use false or misleading subjects or email addresses
• Identify marketing messages as advertisements when appropriate
• Include our physical business address in all emails
• Monitor third-party email marketing services for compliance
• Honor opt-out/unsubscribe requests promptly
• Include an unsubscribe link at the bottom of each marketing email

SMS/Text Message Communications — TCPA Compliance

SMS Opt-In and Consent:

By providing your mobile phone number and opting in to receive SMS/text messages from Med Spa Scale Systems, you expressly consent to receive:

• Marketing and promotional text messages about our advisory services, educational content, and special offers
• Transactional text messages related to appointments, confirmations, and service updates
• Informational messages about medical spa management, industry insights, and business scaling strategies

Important SMS Information:

• Consent is not required: Consent to receive SMS messages is not a condition of purchasing any goods or services from us
• Message frequency: Message frequency varies depending on your engagement and our promotional calendar. You may receive up to 4 to 8 messages per month
• Message and data rates: Standard message and data rates may apply based on your mobile carrier's plan
• Carriers supported: Our SMS service is available on all major U.S. carriers
• No mobile information sharing: We do not share your mobile phone number with third parties for their marketing purposes

How to Opt Out of SMS Messages:

You can opt out of SMS messages at any time by:

• Replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT to any text message you receive from us
• Emailing us at support@medspascalesystems.com with your opt-out request

After you opt out, you will receive one final confirmation message, and then you will no longer receive SMS messages from us unless you opt in again.

How to Get Help with SMS:

For help or support with SMS messages, reply HELP to any text message, or contact us at support@medspascalesystems.com.

Unsubscribing from Email Communications

If at any time you would like to unsubscribe from receiving future emails, you can:

• Click the unsubscribe link at the bottom of any email we send
• Email us at support@medspascalesystems.com with your unsubscribe request

We will promptly remove you from all marketing correspondence.

8. California Online Privacy Protection Act (CalOPPA) Compliance

In accordance with CalOPPA, we agree to the following:

• Users can visit our site anonymously
• A link to this Privacy Policy is available on our homepage and prominently displayed throughout our site
• Our Privacy Policy link includes the word “Privacy” and can be easily found
• You will be notified of any Privacy Policy changes on this Privacy Policy page
• You can request changes to your personal information by emailing us at support@medspascalesystems.com

Do Not Track Signals

We honor Do Not Track (DNT) signals and do not track, plant cookies, or use advertising when a DNT browser mechanism is in place. However, we do allow third-party behavioral tracking for analytics purposes.

9. Children's Online Privacy Protection Act (COPPA) Compliance

We do not knowingly collect personal information from children under the age of 13. Our website, services, and marketing are directed toward adults and business professionals in the medical spa industry. We do not market to or knowingly collect information from children under 13 years of age.

If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible. If you believe we have collected information from a child under 13, please contact us immediately at support@medspascalesystems.com.

10. Data Retention

We retain personal information for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Policy, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements.

When personal information is no longer needed for these purposes, we take reasonable steps to delete, destroy, or anonymize it. If you request deletion of your information under Section 12 (Your Rights and Choices) below, we will honor that request except where retention is required by law or necessary to protect our legal interests.

11. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you via email within 7 business days of discovering the breach. We will provide details about the nature of the breach, the types of information affected, and the steps we are taking to address the situation.

12. Your Rights and Choices

You have the right to:

• Access your information: Request a copy of the personal information we hold about you
• Correct your information: Request corrections to inaccurate or incomplete personal information
• Delete your information: Request deletion of your personal information (subject to legal obligations)
• Opt out of marketing: Unsubscribe from marketing emails at any time
• Restrict processing: Request that we limit how we use your personal information
• Data portability: Request a copy of your data in a structured, commonly used format

To exercise any of these rights, please contact us at support@medspascalesystems.com.

California and Other State Privacy Rights

Depending on your state of residence, you may have additional rights under applicable state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), the Connecticut Data Privacy Act (CTDPA), and similar laws in other states. These rights may include:

• The right to know what personal information we have collected about you
• The right to request access to or a copy of your personal information
• The right to request correction of inaccurate personal information
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information
• The right to be free from discriminatory treatment for exercising any of these rights

We do not sell your personal information, as described in Section 5 above. To exercise any state privacy right, contact us at support@medspascalesystems.com.

13. International Users

Our services are provided from the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using our services, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country of residence.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated “Effective Date” at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

If we make material changes to this Privacy Policy, we will notify you by email or through a prominent notice on our website prior to the changes taking effect.

15. Contact Information

Questions or Concerns?

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: