Effective Date: [08/11/2018]  |  Last Updated: [05/13/2026]

Beau Visage Aesthetics (“Beau Visage,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, contact us, or receive services at our practice, located in California. It also describes your rights under applicable California privacy law, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect the following categories of personal information:

a) Information You Provide Directly

• Name, date of birth, and contact information (email address, phone number, mailing address)
• Health and medical history, treatment history, and related clinical information you provide when booking or receiving services
• Payment information (credit/debit card details, billing address) — note: full card numbers are processed by our payment provider and are not stored by us
• Photographs or images taken as part of your treatment record, with your consent
• Communications you send us via contact forms, email, text message, or social media
• Feedback, reviews, or testimonials you voluntarily submit

b) Information Collected Automatically

• IP address, browser type and version, operating system, and device identifiers
• Pages you visit on our website, time spent, referring URLs, and clickstream data
• Cookies, web beacons, and similar tracking technologies (see Section 5)

c) Information from Third Parties

• Information from scheduling or booking platforms we use to manage appointments
• Analytics data from services such as Google Analytics
• Information from social media platforms if you interact with our pages or use a social login feature

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• To schedule, confirm, and manage your appointments and treatments
• To provide aesthetic services and maintain accurate treatment records
• To process payments and send receipts or invoices
• To communicate with you about your care, follow-up instructions, or appointment reminders
• To send marketing communications, promotions, or newsletters (where you have opted in or where permitted by law)
• To respond to your inquiries, questions, or complaints
• To improve our website, services, and overall client experience
• To comply with legal obligations, including applicable healthcare recordkeeping requirements
• To detect, prevent, or investigate fraud, security incidents, or other unlawful activity
• To enforce our terms and policies

3. Sharing Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service providers: We share information with vendors who help us operate our business, such as scheduling software providers, payment processors, email marketing platforms, and website hosting providers. These parties are contractually required to protect your data and use it only for the services they provide to us.
• Professional referrals: With your consent, we may share relevant information with other healthcare or aesthetic professionals involved in your care.
• Legal compliance: We may disclose information when required by law, court order, subpoena, or government request, or when we believe disclosure is necessary to protect the rights, safety, or property of Beau Visage, our clients, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website if such a transfer occurs.
• With your consent: We may share your information for any other purpose with your prior written consent.

We do not share your personal information with third parties for their own independent marketing or advertising purposes without your explicit consent.

4. Sensitive Personal Information

Some information we collect — including health and medical history and payment card information — is considered “sensitive personal information” under California law. We use sensitive personal information only to the extent necessary to provide our services to you, comply with legal obligations, and ensure the security of our systems. We do not use sensitive personal information to infer characteristics about you or for advertising purposes.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and (where applicable) serve relevant content. Types of cookies we may use include:

• Essential cookies: Required for core website functionality (e.g., session management, security).
• Analytics cookies: Help us understand how visitors use our website (e.g., Google Analytics). This data is aggregated and does not identify you personally.
• Marketing cookies: Used to deliver relevant advertisements or track campaign performance. These are only placed where you have consented.

You can control cookie preferences through your browser settings or via a cookie consent banner if displayed on our site. Note that disabling certain cookies may affect website functionality.

We do not currently respond to “Do Not Track” (DNT) browser signals, as there is no uniform standard for such signals. However, California residents have the right to opt out of the sale or sharing of personal information, as described below.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including to comply with legal, regulatory, and professional recordkeeping obligations (which may require us to retain certain health-related records for a minimum of seven years under California law), resolve disputes, and enforce our agreements.

When your information is no longer needed, we will securely delete or de-identify it.

7. Data Security

We implement reasonable and appropriate technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of sensitive data in transit, restricted access to personal information on a need-to-know basis, and secure storage of physical records.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

8. Your California Privacy Rights

If you are a California resident, you have the following rights under the CCPA and CPRA:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request that we delete personal information we have collected about you, subject to certain exceptions (e.g., information we are required to retain by law or need to complete a transaction).
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information, but if this practice ever changes, we will update this policy and provide a “Do Not Sell or Share My Personal Information” link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit the use and disclosure of your sensitive personal information to what is necessary to perform the services you have requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of service because you exercised a right under this policy.

How to Submit a Request: To exercise any of the rights above, please contact us using the information in Section 11. We may need to verify your identity before processing your request. We will respond within 45 days of receiving a verifiable request, as required by law. If we need more time (up to an additional 45 days), we will notify you in writing.

Authorized Agents: You may designate an authorized agent to submit a request on your behalf. We may require proof of your authorization and will take steps to verify your identity directly before fulfilling the request.

9. Marketing Communications

If you have opted in to receive promotional emails, text messages, or newsletters from us, you may opt out at any time by:

• Clicking the “unsubscribe” link at the bottom of any marketing email
• Replying STOP to any marketing text message
• Contacting us directly using the information in Section 11

Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to your appointments or account.

11. Children’s Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If a parent or guardian believes that their child has provided us with personal information without consent, please contact us and we will promptly delete that information. Where services are provided to minors, we collect information from and obtain consent from a parent or legal guardian.

12. Contact Us

If you have questions or concerns about this Privacy Policy, wish to exercise your privacy rights, or need to report a potential privacy issue, please contact us:

We will respond to verifiable requests within the timeframes required by applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or a notice on our website. We encourage you to review this policy periodically.

Your continued use of our website or services after any changes to this policy constitutes your acceptance of those changes.