Privacy Policy

1. Information We Collect

We may collect the following categories of personal information:

2. How We Collect Information

We collect information when you:

• Fill out consultation forms or contact forms on our website
• Book appointments through our online booking system
• Contact us via phone, email, or SMS
• Visit our clinic in Scottsdale for treatments
• Opt in to receive SMS communications or marketing messages
• Interact with our website, including browsing our services pages
• Join our Circle of Beauty membership program
• Purchase products or services from us

3. How We Use Your Information

We use your information to:

• Provide Medical Spa Services: Deliver anti-wrinkle injections, dermal fillers, Sculptra, PRP treatments, microneedling, and other services
• Process Appointments: Schedule, confirm, and manage your consultations and treatment appointments
• Health and Safety: Maintain medical records, track treatment history, and ensure safe delivery of injectable and skincare services
• Communication: Send appointment reminders, treatment follow-ups, and respond to your inquiries
• Payment Processing: Process payments for services, manage membership billing, and handle refunds
• Marketing Communications: Send information about new treatments, special offers, and membership benefits (only with your consent)
• Website Improvement: Enhance our website functionality and user experience
• Legal Compliance: Meet healthcare regulations, maintain required records, and comply with applicable laws

4. How We Share Your Information

We may share your information only in these limited circumstances:

• Service Providers: With trusted third-party vendors who help us operate our business (such as appointment booking systems, payment processors, or communication platforms), and only under strict confidentiality agreements
• Healthcare Partners: With medical professionals involved in your care, as necessary for treatment coordination
• Legal Requirements: When required by law, court order, or to protect our legal rights
• Emergency Situations: To protect the health and safety of you or others in medical emergencies

5. SMS Messaging Policy

By consenting to receive SMS communications from Ayla Med Spa, you agree to receive messages related to:

• Appointment confirmations and reminders
• Treatment follow-ups and care instructions
• Service updates and clinic announcements
• Membership program communications
• Promotional messages about new treatments and special offers (only with prior consent)

6. Data Security and Retention

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Secure storage of medical records and client information
• Encryption of sensitive data during transmission
• Regular security assessments and staff training
• Compliance with healthcare data protection standards

We retain your information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and maintain medical records as required by law.

7. Your Rights

You have the right to:

• Access: Request access to the personal information we have about you
• Correction: Request correction of inaccurate or incomplete personal data
• Deletion: Request deletion of your personal data, subject to legal and medical record requirements
• SMS Opt-Out: Withdraw consent for SMS messaging at any time
• Marketing Opt-Out: Unsubscribe from marketing communications
• Data Portability: Request a copy of your personal data in a commonly used format

8. Contact Information

To exercise your rights, ask questions about this policy, or contact us regarding your personal information:

9. Children's Privacy

Our services are intended for adults 18 years and older. We do not knowingly collect personal information from children under 13 years of age :antCitation[]{citations="d4f14959-5743-47dd-a2ef-c3aec472bbea,1767ffc4-ad29-4c7a-8d8d-f6b67dd5e449"}. For minors between 13-17, parental consent is required before any treatment or collection of personal information.

10. State-Specific Privacy Rights

Residents of certain states, including California, Virginia, Colorado, and others, may have additional privacy rights under state law :antCitation[]{citations="eb7c67ae-d32a-430c-bf67-88a5e5631cf8,1c53d1d3-f143-4dfe-8080-ca7422f654a3"}. These may include:

• The right to know what personal information is collected and how it's used
• The right to delete personal information
• The right to opt-out of the "sale" of personal information
• The right to non-discrimination for exercising privacy rights

If you are a resident of a state with specific privacy laws, please contact us to learn more about your rights.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any material changes will be posted on this page with a new effective date. We encourage you to review this policy periodically to stay informed about how we protect your information :antCitation[]{citations="4cd62025-ca06-4c11-82db-e29e4bef8fa0"}.

12. Healthcare Information Notice

As a medical spa providing healthcare services, we maintain health information that may be subject to additional protections under healthcare privacy laws. We are committed to protecting the confidentiality of your health information and using it only for treatment, payment, and healthcare operations as permitted by law.