Privacy Policy

Privacy Policy for Fort Lauderdale MedSpa

The Fort Lauderdale Medspa (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit thefortlauderdalemedspa.com , use our services online or in-person, communicate with us, or engage with our social media (collectively, the “Services”).

Important healthcare note: We may maintain Protected Health Information (PHI) in connection with treatment or payment. Where applicable, our use and disclosure of PHI is governed by the Health Insurance Portability and Accountability Act (HIPAA). This Privacy Policy applies to personal information outside HIPAA; PHI is described in our separate Notice of Privacy Practices (“NPP”). If there is a conflict between this Policy and the NPP regarding PHI, the NPP controls.

1) Information We Collect

We collect information in the following categories:

You provide directly

Contact details (name, email, phone, mailing address).
Demographics (date of birth, gender—if you choose to share).
Appointment and intake details (treatment interests, medical history/intake forms—PHI may be included; see NPP).
Membership/enrollment information (plan selection, benefits usage).
Communications (texts, emails, DMs, reviews, survey responses).
Payment information (processed by our PCI-compliant processors; we do not store full payment card numbers).

Collected automatically

Device and usage data (IP address, device IDs, browser type, pages viewed, time on site).
Cookies, pixels, and similar technologies for analytics and advertising (see “Cookies & Tracking”).

From third parties

Booking platforms, EMR/EHR systems, messaging platforms, payment processors.
Marketing/advertising partners and social networks (subject to your settings).
Referrals (e.g., when someone books on your behalf).

2) How We Use Information

We use personal information to:

Provide, schedule, and manage appointments and Services.
Deliver clinical care and coordinate treatment (PHI per our NPP).
Process payments, memberships, promotions, and financing (where offered).
Communicate about appointments, updates, promotions, and educational content.
Operate, analyze, and improve our website, Services, and user experience.
Detect, prevent, and address fraud, security, or technical issues.
Comply with legal, regulatory, and reporting obligations.

Text & email marketing: With your consent (where required), we may send promotional messages. You can opt out at any time (see “Your Choices”).

3) How We Share Information

We may share information with:

Service providers/Business associates (e.g., hosting, EHR/EMR, booking, payment processing, messaging/SMS, email, analytics, advertising). These parties are bound by contracts restricting use.
Medical professionals involved in your care (PHI per our NPP).
Legal/Compliance (to comply with law, court orders, or to protect rights, safety, and security).
Business transfers (merger, acquisition, financing, or sale of assets).
With your direction or consent (e.g., referrals, testimonials with your permission).

We do not sell your personal information for money. Some states consider certain advertising/analytics disclosures a “sale” or “share” for cross-context behavioral advertising. See “State Privacy Rights” for opt-out options.

4) Cookies & Tracking Technologies

We and our partners use cookies, pixels, tags, and similar tech to:

Remember preferences and facilitate logins/appointments.
Measure site traffic and performance (e.g., Google Analytics).
Deliver and measure advertising (e.g., Meta/Instagram, Google Ads).

You can manage cookies via your browser settings and use tools provided by our partners. Blocking cookies may impact site functionality.

5) Your Choices

Marketing emails: Click “unsubscribe” in any email.
SMS/texts: Reply STOP to opt out of non-essential texts. (You may still receive transactional messages like appointment reminders.)
Cookies/Ads: Adjust browser settings; use platform settings (Google Ad Settings, Meta Ad Preferences).
Access/Update: Contact us to request access, correction, or deletion where applicable.
HIPAA requests: For PHI access, amendments, or restrictions, follow the process in our NPP.

6) State Privacy Rights (U.S.)

Depending on where you live (e.g., California, Colorado, Connecticut, Virginia, Utah), you may have rights to:

Know/access the categories and specific pieces of personal information we collected.
Request deletion or correction.
Opt out of certain data uses, including “sale”/“share” and targeted advertising.
Obtain a portable copy of your data.
Appeal our decision on a request.

To exercise these rights, use the methods in Contact Us. We will verify your request and respond as required by law.

We do not knowingly “sell” or “share” personal information of consumers under 16.

7) Children’s Privacy

Our Services are not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us to delete it.

8) Data Retention

We retain information as needed to provide Services, comply with legal/medical record retention requirements, resolve disputes, and enforce agreements. PHI retention follows applicable healthcare laws.

9) Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information. No system is 100% secure; please use caution when transmitting information and keep your account credentials confidential.

10) Third-Party Links & Social Features

Our site may link to third-party sites, apps, or services (including booking portals, payment processors, Instagram, etc.). We are not responsible for their privacy practices. Review their policies before providing data.

11) International Users

We operate in the United States. If you access the Services from outside the U.S., your information may be processed in the U.S., where laws may differ from your country.

12) Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective date” above reflects the latest revision. Your continued use of the Services means you accept the revised Policy.

13) Contact Us

The Fort Lauderdale Medspa

Address: 2821 E Commercial Blvd, Ste 200. Fort Lauderdale, FL 33308
Email: caroline@thefortlauderdalemedspa.com
Phone: 954-560-1380

For PHI requests or questions about our Notice of Privacy Practices, contact:
Privacy Officer: [Caroline Lambrechts, CEO] – caroline@thefortlauderdalemedspa.com – 2821 E Commercial Blvd, Ste 200. Fort Lauderdale, FL, 33308

14) Additional Disclosures (if applicable to you)

Financial offers/financing: If you apply for financing, the finance provider’s privacy policy applies.
Loyalty & memberships: We process membership activity to administer benefits and prevent fraud.
User-generated content: Testimonials, reviews, or before/after content are posted only with your written consent and may be withdrawn per that consent form.
Training & quality: Calls or messages may be recorded for training/quality (where permitted by law) and disclosed in our intake forms.