This Privacy Policy for All Things Skin Med Spa (“Company”, “we”, “us” “our”) describes how we collect, use and disclose information about users of our website, applications, services, tools and features and when we interact with you online or in person (collectively, the “Services”). For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services. Please note that the Services are designed for users in the United States only and are not intended for users located outside the United States.

Please read this Privacy Policy carefully. By using or accessing any of the Services or otherwise interacting with us, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services or otherwise interact with us.

1. Updating This Privacy Policy

We may modify this Privacy Policy from time to time. If we make material changes to the way in which we use information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other means consistent with applicable law). If you do not agree to any updates to this Privacy Policy, please do not access or continue to use the Services.

2. Company’s Collection and Use of Information

When you access or use the Services, we collect certain categories of information about you from a variety of sources.

Some features of the Services may require you to directly enter certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing certain of our Services. Information that you may provide to us includes:

• Basic contact details, as follows: name, address, phone number, and email. We collect basic contact details to communicate with you, provide you with Services, and market to you.
• Health-related information, such as the body part you would like to be treated, the condition of your skin, and any health conditions present. We collect health-related information as minimally required to provide you with the Services.
• Payment information, as follows: credit or debit card information and billing address. We use a third-party payment processor to collect payment information to process your payment and provide you with Services you have requested.
• Any other information you choose to include in communications with us, for example, when sending a message through the Contact Us web form, chatting with us through chat features on our website, calling us, or submitting opinions or reviews about our Services.

We also automatically collect certain information about your interaction with the Services (“Usage Data”). To do this, we may use cookies and other technologies (“Tracking Technologies”). Usage Data may include:

• Unique device identifier
• Device type, such as your phone, computer, or tablet
• IP address
• Browser type
• Date and time stamps, such as the date and time you first accessed the Services
• Operating system
• Log data
• Precise location
• Other information regarding your interaction with the Services

We use the information we collect automatically to, among other things, tailor features and content to you.

We may obtain demographic information about you from outside sources.

Any information we receive from outside sources will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. In addition to the foregoing, we may use any of the above information to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

3. How the Company Discloses Your Information

In certain circumstances, we may disclose your information to third parties for purposes consistent with this Privacy Policy. Such circumstances may include:

• With vendors or other service providers, such as
  • Payment processors
  • Marketing and data analytics vendors
  • Cloud storage providers
  • IT service management vendors
  • Email marketing services vendors
  • Security vendors
• With our affiliates or otherwise within our corporate group
• With third parties for marketing purposes
• To comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries
• In connection with an asset sale, merger, bankruptcy, or other business transaction
• To enforce any applicable terms of service and ensure the safety and security of the Company and/or its users
• With professional advisors, such as auditors, law firms, or accounting firms
• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. Cookies and Other Tracking Technologies

Do Not Track Signals
Your browser settings may allow you to transmit a “Do Not Track” signal when you visit various websites. Like many websites, our website is not designed to respond to “Do Not Track” signals received from browsers.

Do Not Track Signals
Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including any portal features and general functionality, to work incorrectly.

We also use Google Analytics, which is a web analytics tool that helps us understand how users engage with the Services. Like many services, Google Analytics uses first-party cookies to track user interactions, as in our case, where they are used to collect information about how users use our site. This information is used to compile reports and to help us improve the Services. The reports disclose website trends without identifying individual visitors. You can opt out of Google Analytics without affecting how you visit our site – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: https://tools.google.com/dlpage/gaoptout.

If you have questions regarding the specific information about you that we process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

5. Social Features

Certain features of the Services permit you to initiate interactions between the Services and third-party services or platforms, such as social networks (“Social Features”). Social Features include features that allow you to click and access our pages on certain third-party platforms, such as Facebook and Twitter, and from there to “like” or “share” our content on those platforms. Use of Social Features may entail a third party’s collection and/or use of your data. If you use Social Features or similar third-party services, information you post or otherwise make accessible may be publicly displayed by the third-party service you are using. Both the Company and the third party may have access to information about you and your use of both the Services and the third-party service. For more information on third-party websites and platforms, see Section 6 below.

6. Third Party Websites and Links

We may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of these sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms (such as Facebook or Twitter) may also be viewable by other users of the Services and/or users of those third-party online platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

7. Children’s Privacy

Children under the age of 18 are not permitted to use the Services, and we do not seek or knowingly collect any personal information about children under 13 years of age. If we become aware that we have unknowingly collected information about a child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

8. Data Security

Please be aware that, despite our reasonable efforts to protect your information, no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

9. Colorado Rights

If you are a user of the Services and a resident of Colorado, please see the addendum to this Privacy Policy for an overview of your rights.

10. How to Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, please email us at: heather@allthingsskinmedspa.com or contact us at 720-937-8006

Colorado Users

Colorado

Your Colorado Rights Regarding Your Personal Data. Colorado law provides some Colorado residents with the rights listed below. To exercise these rights, see the “Exercising Your Colorado Privacy Rights” section below.

Right to Know. You have the right to know and see what personal data we have collected about you in a portable format.

Right to Correct. You have the right to request that we correct inaccurate personal data.

Right to Delete. You have the right to request that we delete the personal data we have collected about you.

Right to Object to Targeted Advertising, Profiling, or Selling. You have the right to opt-out of the processing of your personal information for the purposes of targeted advertising, the sale of your personal information, and the profiling of your personal information in furtherance of decisions that produce legal or similarly significant effects.

Exercising Your Colorado Privacy Rights. To request access to or deletion of your personal data, or to exercise any other data rights under Colorado law, please contact us using one of the following methods:

Email: You may email us at: heather@allthingsskinmedspa.com

Phone: You may call us at 720-937-8006