Privacy Policy
Important Notice: This Privacy Policy governs the collection and use of personal information through our website and practice. For questions about your rights under HIPAA as a patient, please contact us directly at (682) 493-0947. This policy should be reviewed periodically as it may be updated.
1. Introduction
Glam Medspa ("we," "our," or "us") is committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
By accessing our website or submitting information through our contact forms, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
Information You Provide Directly
- Name, email address, and phone number submitted through contact forms
- Service inquiries and appointment requests
- Health history and aesthetic concerns shared during consultations
- Payment and billing information (processed through secure third-party processors)
- Communications you send us by email, phone, or message
Information Collected Automatically
- Browser type, device type, and operating system
- IP address and approximate geographic location
- Pages visited, time spent on pages, and referring URLs
- Cookies and similar tracking technologies (see Section 8)
🔒 HIPAA — Protection of Health Information
As a medical aesthetic practice, Glam Medspa is subject to the Health Insurance Portability and Accountability Act (HIPAA). Any Protected Health Information (PHI) you share with us — including medical history, treatment records, and health-related communications — is handled with the highest level of security and confidentiality required by federal law. We maintain administrative, physical, and technical safeguards to protect your PHI. We will not use or disclose your PHI without your written authorization except as permitted or required by HIPAA. For your full HIPAA rights and our Notice of Privacy Practices, please see our HIPAA Notice.
3. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and schedule consultations or appointments
- Provide and improve our medical aesthetic services
- Send appointment reminders and follow-up communications
- Process payments and maintain billing records
- Comply with legal and regulatory obligations, including HIPAA
- Improve our website and understand how visitors use it
- Send promotional communications (only with your consent, and you may opt out at any time)
4. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:
- Service providers: Trusted third parties who assist in operating our website, scheduling systems, and payment processing, all bound by confidentiality agreements
- Healthcare providers: With your consent, to coordinate your care with other healthcare professionals
- Legal requirements: When required by law, court order, or government regulation
- Safety: To prevent imminent harm to you or others
- Business transfer: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections
We will never share your Protected Health Information for marketing purposes without your explicit written authorization.
5. Your Rights
Depending on your location and applicable law, you may have the right to:
- Access and receive a copy of your personal information we hold
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information (subject to legal retention requirements)
- Opt out of marketing communications at any time
- Request restriction of certain processing of your information
- As a patient, exercise your full rights under HIPAA — see our HIPAA Notice for details
To exercise any of these rights, please contact us at (682) 493-0947 or through our contact form.
6. Data Security
We implement industry-standard security measures to protect your personal and health information, including SSL/TLS encryption for data transmission, secure servers, and access controls limiting who can view your information. While we take reasonable precautions, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations. Medical records are retained in accordance with California state law and HIPAA requirements, generally a minimum of 7 years from the date of last treatment. Website analytics data is retained for no longer than 24 months.
8. Cookies and Website Tracking
Our website may use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and understand how visitors interact with our content. You can control cookie preferences through your browser settings. Disabling cookies may affect certain website features.
We do not use cookies to collect Protected Health Information.
9. Third-Party Links
Our website may contain links to third-party websites (such as booking platforms or social media). We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies before providing any personal information.
10. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.
11. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise your California privacy rights, please contact us at (682) 493-0947.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
- Phone: (682) 493-0947
- Email: glammedspaskin@gmail.com
- Sunnyvale Location: 200 West McKinley Ave, Studio 103, Sunnyvale, CA 94086
- San Jose Location: 6950 Santa Teresa Blvd, Ste E, San Jose, CA 95119
- Online: Contact Form
This Privacy Policy was prepared as a general template and should be reviewed by qualified legal counsel to ensure full compliance with all applicable laws and regulations specific to your practice.