top of page
1000060825.jpg

Privacy Policy

Privacy Policy

Effective Date: 01/01/2026

Last Updated: 01/01/2026

​

MySkin Medical Spa (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy and personal health information. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website https://myskinmedicalspa.com, receive medical spa treatments from us, or opt into our mobile SMS text messaging program.

Please read this policy carefully. By accessing our website or using our services, you acknowledge the terms of this Privacy Policy.

​

1. Information We Collect

We collect information that identifies, relates to, describes, or is capable of being associated with you.

  • Personal Information You Provide: Name, email address, physical address, date of birth, payment details, and phone number when you request an appointment, fill out intake forms, or contact us.

  • Protected Health Information (PHI): Medical history, skin conditions, treatment preferences, aesthetic goals, and before-and-after photographs taken during your consultation or treatments.

  • SMS & Mobile Information: Mobile phone number, communication preferences, records of messages sent/received, and timestamped opt-in consent records.

  • Automated Website Data: IP address, browser type, device information, and browsing activity collected via cookies and tracking pixels.

​

2. How We Use Your Information

We use your information to provide aesthetic and medical spa services, including:

  • Scheduling, confirming, and managing your appointments.

  • Conducting medical consultations and providing tailored aesthetic treatments.

  • Processing payments and managing your client account.

  • Sending transactional notifications, post-care treatment instructions, and appointment reminders via email or SMS.

  • Sending promotional offers, specials, and event invitations (only where explicit consent has been given).

  • Complying with medical record-keeping rules and legal requirements.

​

3. Medical Privacy & HIPAA

As a medical spa operating under licensed healthcare provider supervision, your treatment history, clinical notes, and health information are protected under the Health Insurance Portability and Accountability Act (HIPAA).

  • Your Protected Health Information (PHI) is kept confidential in secure, HIPAA-compliant Electronic Medical Record (EMR) systems.

  • We do not disclose PHI for marketing purposes without your explicit, written authorization.

  • A separate Notice of Privacy Practices (NPP) detailing your HIPAA rights is provided during your patient intake process.

​

4. Text Messaging (SMS) Terms & Disclosures

We offer text messaging services to keep you updated on appointments, post-care tips, account updates, and special promotions.

Opt-In & Consent

By providing your mobile phone number and checking the SMS opt-in box on our web forms, intake portals, or paper forms, you provide your express consent to receive text messages from My Skin Medical Spa. Consent is not a condition of purchasing any medical spa services.

SMS Rules & Details:

  • Message Frequency: Message frequency varies based on your appointment schedule and preferences.

  • Cost: Message and data rates may apply depending on your mobile cell plan.

  • How to Opt-Out: You can opt out of receiving text messages at any time. Text STOP, END, or CANCEL to any text message you receive from us. You will receive one final confirmation text acknowledging your unsubscription.

  • Customer Support: Text HELP to any text message, or contact us directly at [Insert Phone Number] or [Insert Support Email]for support.​

​​

Strict Mobile Privacy Safeguard (Carrier Compliance Requirement)

No mobile phone numbers, SMS opt-in data, or personal information collected for text messaging will be shared, sold, rented, or leased to third parties, affiliates, or marketing partners for their independent marketing purposes.

All mobile data sharing is strictly limited to service providers who assist us in delivering our messaging services (such as our SMS communications platform), who are bound by strict confidentiality agreements and HIPAA Business Associate Agreements (BAAs) where applicable.

​

5. Sharing Your Information

Except for the strict SMS restrictions outlined above, we may share general personal information under the following limited circumstances:

  • Service Providers: Third-party technology vendors (EMR platforms, payment processors, web hosters) who act on our behalf to operate our business and website.

  • Medical Professionals: Licensed providers (Medical Directors, Nurse Practitioners, Estheticians) involved directly in your care.

  • Legal Obligations: When required by law, subpoena, or law enforcement regulations.

  • ​

6. Data Security

We implement administrative, technical, and physical safeguards—including SSL encryption, access controls, and secure medical storage—to protect your personal data from unauthorized access, alteration, or disclosure. However, no transmission over the Internet or cellular network can be guaranteed 100% secure.

​

7. Your Privacy Rights

Depending on your location, you may have rights regarding your personal information, including:

  • Accessing, correcting, or deleting your personal data.

  • Opting out of marketing communications at any time.

  • Requesting a copy of your medical records under HIPAA.

To exercise any of these rights, please contact our privacy officer using the contact information below.

​

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our SMS practices, please reach out to us at:

  • Business Name: MySkin Medical Spa

  • Attn: Privacy Officer

  • Address: 711 W 17th Street, C2 Costa Mesa CA 92627

  • Phone: 949 209 8953

  • Email: contactus@myskinmedicalspa.com

bottom of page