Privacy Policy- Terms of Service

Privacy Policy for ME Aesthetics & Wellness

ME Aesthetics & Wellness (“we,” “us,

” or “our”) values your privacy. This Privacy Policy explains

what information we collect through our website (meaestheticsca.com) and during our med-spa services, how we use and protect it, and the rights you have under applicable laws.

This policy applies to: Information collected via our website (like contact forms, bookings, browsing);

Personal and health-related information gathered during consultations, treatments, or other services.

2. Information We Collect

a) Personal Information

We may collect data such as: name, email, phone number, address, date of birth, payment information, and other identifiers that could identify you.

Sites operating in California must post a conspicuous privacy policy when collecting such

personally identifiable information (PII) .

b) Protected Health Information (PHI)

As a medical spa that handles health information in California, we’re subject to privacy regulations. PHI may include treatment details, medical history, photographs, and other health-related data.

3. How We Use Your Information

a) Website and Business OperationsWe use your personal information to operate our website, process appointments, send

confirmations, and handle payments.

b) Treatment and Healthcare Operations

In compliance with HIPAA, PHI may be used for treatment, payment, or healthcare operations

(TPO)—for example, coordinating care, billing, or managing your follow-up visits .

c) Marketing and Communications

With your consent, we may send newsletters or promotional content. You can opt out anytime.

d) Legal and Safety Compliance

We may disclose information if required by law, to prevent a threat to public safety, or by court order.

4. Sharing Information with Third Parties

We may share data with trusted vendors (e.g., booking systems, billing providers) under confidentiality agreements.

Shine the Light Law compliance (CA Civil Code § 1798.83): California residents can request a list of third parties we shared personal information with for direct marketing .

5. Your Rights Under California Law

a) California Consumer Privacy Act (CCPA) / Privacy Rights Act (CPRA)

If applicable to your business based on thresholds (e.g., revenue over $25 million, large data

volumes, etc.) , California residents have the following rights:

Right to Know: Access personal data we’ve collected, sold, or shared.

Right to Delete: Request removal of your personal data.

Right to Opt-Out: If we sell or share personal information, you can decline—but we

currently do not sell personal data.●

Right to Correct: Request corrections to inaccurate personal data.

To exercise these rights, please contact us at: [insert email/phone/address].

b) CalOPPA (California Online Privacy Protection Act)

We provide a clearly labeled Privacy Policy link on our website, with an effective date and

updates as needed . Users may browse anonymously.

6. HIPAA & Your Privacy Rights

As required under HIPAA, you have certain rights regarding your Protected Health Information:

Right to Inspect and Copy: You may request access to your PHI.

Right to Amend: You can ask us to correct errors in your PHI.

Right to Request Restrictions: You may ask us to limit uses/disclosures of your PHI.

Right to Confidential Communications: You can request alternate methods or addresses

for communications (e.g., email only).

Right to an Accounting of Disclosures: You may ask for a list of disclosures we’ve made

for non-TPO purposes .

To submit a request, contact us at: [insert physical address/email].

7. Data Security Measures

We employ security safeguards to protect your information, such as:

Encryption of data (in transit and at rest)

Access controls limiting who can view PHI.

Regular risk assessments, security policies, and staff training on HIPAA best practices .

8. Data Retention

We retain personal and health information only as long as necessary—according to state laws

and professional standards—for treatment, billing, legal compliance, or record-keeping.

9. Children’s Privacy

We do not knowingly collect information from individuals under 13. If we learn we’ve collected

such data, we will promptly delete it .

10. Changes to This Policy

We may update this Privacy Policy periodically. We will update the “Effective Date” at the top

and post revisions on our website.

11. Contact Information

If you have any questions or wish to exercise any of your rights, contact us at:

ME Aesthetics & Wellness

3093 Citrus Circle suite 102

Walnut Creek Ca 94598

1 (925) 940-4614

melissa@meaestheticsca.com