Privacy Policy

---

**Privacy Policy for Refresh Med Spa VA**

**Effective Date:** 09/01/2024

At Refresh Med Spa VA, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, use our services, or interact with us in any other way. By using our website and services, you agree to the terms of this Privacy Policy.

**1. Information We Collect**

We may collect the following types of information:

- **Personal Information**: This may include your name, email address, phone number, mailing address, date of birth, medical history, and any other information you provide when scheduling appointments or using our services.

- **Payment Information**: We collect payment information (such as credit card details) only to process payments for services you request. Payment information is securely handled by a third-party payment processor.

- **Health Information**: As a medical spa, we may collect sensitive health-related information to provide you with personalized treatments and services. This data is protected by HIPAA regulations.

- **Usage Data**: Information about how you interact with our website, including IP address, browser type, device information, and pages visited.

**2. How We Use Your Information**

We may use the information we collect for the following purposes:

- To provide and improve our services, including treatments, appointments, and consultations.

- To communicate with you regarding appointment reminders, special offers, promotions, and other updates related to our services.

- To respond to inquiries and provide customer support.

- To process transactions and manage billing.

- To comply with legal and regulatory obligations, including medical record-keeping and HIPAA compliance.

- To enhance the functionality of our website and improve user experience.

**3. How We Share Your Information**

We may share your personal information in the following situations:

- **Third-Party Service Providers**: We may share your information with third-party vendors who help us run our business, such as payment processors, marketing providers, or appointment scheduling services. These third parties are only authorized to use your information to perform specific tasks on our behalf.

- **Legal Requirements**: We may disclose your information if required by law, such as in response to a subpoena or government request, or if we believe such action is necessary to comply with legal obligations, protect the rights or safety of others, or prevent fraud.

- **Healthcare Providers**: If necessary for your treatment, we may share relevant health information with healthcare professionals or partners involved in your care.

**4. Data Security**

We take the security of your personal and health information seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, please note that no method of data transmission or storage is 100% secure, and we cannot guarantee absolute security.

**5. Your Rights and Choices**

You have the following rights regarding your personal data:

- **Access**: You can request access to the personal information we have on file for you.

- **Correction**: If you believe any of your information is inaccurate or incomplete, you can request that we correct or update it.

- **Deletion**: You may request that we delete your personal information, subject to certain legal and contractual obligations.

- **Opt-Out of Marketing Communications**: You can opt out of receiving marketing emails or other promotional communications from us by following the unsubscribe instructions in the communication.

To exercise any of these rights, please contact us using the information provided below.

**6. Children's Privacy**

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that we have collected personal information from a child under 18, please contact us, and we will take steps to delete such information.

**7. Cookies and Tracking Technologies**

We use cookies and other tracking technologies (such as web beacons) to enhance the user experience on our website. These technologies help us analyze website traffic, personalize content, and provide targeted advertising. You can control cookie settings through your browser or device settings. For more details, please refer to our Cookie Policy.

**8. Third-Party Links**

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing any personal information.

**9. Changes to This Privacy Policy**

We may update this Privacy Policy from time to time. If we make significant changes, we will post the updated policy on this page with a new effective date. Please review this Privacy Policy periodically to stay informed about how we protect your information.

**10. Contact Us**

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us at:

Refresh Med Spa VA 

1200 Main St. Lynchburg, VA 24504

434-907-8094 

Refreshmedspava50@gmail.com

Refreshmedspava.com

---

**Disclaimer**: This privacy policy is a general template and may not fully reflect specific legal requirements applicable to your business. Please consult with a legal professional to ensure full compliance with Virginia state law, HIPAA regulations, and other relevant data privacy laws.