1. Scope of This Policy

This Privacy Policy describes privacy practices associated with the Primal Aesthetics website, online forms, appointment-related website functions, and other online interactions that link to this policy.

It does not replace any separate privacy notice, consent, authorization, or disclosure that may apply to particular clinical, wellness, aesthetic, payment, financing, secure-messaging, or third-party services.

2. Information We May Collect

The information involved depends on how you interact with us. Categories may include:

• Contact information: name, email address, telephone number, mailing address, and communication preferences.
• Appointment and inquiry information: requested service, appointment preferences, questions, and information you voluntarily provide.
• Transaction information: information associated with purchases, deposits, payments, refunds, or financing. Payment-card data may be collected directly by third-party payment processors rather than stored by us.
• Device and usage information: IP address, browser and device type, operating system, referring page, pages viewed, approximate location derived from IP address, timestamps, and website interactions.
• Marketing and communication information: information relating to email, telephone, SMS, advertising, campaign, or website interactions where those technologies are used.
• Information you choose to provide: other information submitted through forms, email, telephone, text, secure messaging, or other communications.

Please do not submit highly sensitive medical or health information through an ordinary contact form or standard email when we provide a designated secure method for that purpose.

3. How We May Use Information

We may use personal information as reasonably necessary to:

• respond to inquiries and communicate with you;
• schedule, confirm, modify, or follow up regarding appointments;
• provide requested services and customer support;
• process transactions and maintain appropriate business records;
• send service-related communications and, where permitted, marketing communications;
• operate, maintain, troubleshoot, secure, and improve our website and services;
• understand website traffic, engagement, and campaign effectiveness;
• prevent fraud, misuse, security incidents, and other harmful activity;
• comply with applicable legal, regulatory, accounting, and recordkeeping obligations; and
• establish, exercise, or defend legal rights.

4. Health Information, Secure Communications & HIPAA

Because some Primal Aesthetics services relate to wellness, aesthetics, or health, information you provide may concern your health or treatment interests. The privacy rules that apply can depend on the nature of the information, how it is collected, and the legal status of the person or entity receiving it.

Where information is subject to HIPAA or another health-privacy requirement, it will be handled according to the privacy notice, authorization, consent, security process, or other requirements applicable to that information. Where HIPAA does not apply, other federal or state privacy and consumer-protection laws may still apply.

When a secure form, secure messaging system, patient portal, or other designated secure channel is provided for sensitive health information or records, please use that method rather than ordinary email or general website forms.

5. Cookies, Analytics & Similar Technologies

Our website and service providers may use cookies, pixels, tags, local storage, log files, and similar technologies. These technologies can help the site function, remember preferences, understand website performance and visitor activity, improve user experience, detect security issues, and measure communications or campaigns.

Depending on your browser, device, and the technologies in use, you may be able to block or delete cookies through browser settings. Disabling certain technologies may affect website functionality.

6. Advertising & Measurement Technologies

We may use third-party advertising, analytics, or measurement services to understand how visitors reach and use our website, measure campaign performance, and improve marketing. Depending on configuration, these services may receive device identifiers, IP address, browser or interaction information, referral information, or similar online activity data.

We do not intend for medical records, the substance of confidential health communications, or other sensitive health information to be transmitted to advertising platforms through public website tracking technologies.

Some privacy laws may characterize certain disclosures for targeted advertising as a sale, sharing, or targeted-advertising activity even when no money changes hands. Where applicable, you may have a right to opt out of those activities.

7. How We May Disclose Information

We may disclose information when reasonably necessary to:

• Service providers and processors supporting hosting, website operations, communications, scheduling, analytics, security, customer support, payment processing, or other business functions;
• Professional advisers such as legal, accounting, insurance, or compliance professionals when appropriate;
• Government, regulatory, or legal authorities when required by law or reasonably necessary to protect rights, safety, property, or security;
• Business transaction participants in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to applicable law; or
• Other parties at your direction or with your authorization.

8. Scheduling, Payments & Third-Party Services

We may use third-party platforms for functions such as appointment scheduling, communications, forms, payment processing, financing, website hosting, analytics, or other operational services. Information you submit directly to those providers may also be governed by their own privacy notices and terms.

We encourage you to review privacy information presented by a third-party service before submitting sensitive or financial information to it.

9. Email, Telephone & SMS Communications

If you provide contact information, we may use it to respond to you, administer appointments or services, provide customer support, and send other communications consistent with your request, consent, and applicable law.

Where marketing email or text messages are used, applicable messages may provide an unsubscribe or opt-out mechanism. Opting out of marketing does not necessarily prevent non-marketing communications reasonably necessary for appointments, transactions, account administration, safety, or other service-related purposes.

Standard message and data rates may apply to SMS communications according to your mobile carrier and plan.

10. Data Retention

We retain personal information for periods reasonably necessary for the purposes described in this policy, including providing services, maintaining business and transaction records, complying with legal or regulatory obligations, resolving disputes, enforcing agreements, preventing fraud, and maintaining security.

Retention periods may differ based on the type of information, the context in which it was collected, and applicable legal or operational requirements.

11. Information Security

We use administrative, technical, and physical safeguards intended to protect personal information appropriate to the nature of the information and the circumstances in which it is handled. No website, electronic transmission, or storage system can be guaranteed to be completely secure.

If we become aware of a security incident involving personal information, we will evaluate and address it in accordance with applicable legal requirements.

12. Your Privacy Rights

Depending on where you reside and which privacy law applies to the information at issue, you may have rights concerning your personal information. These may include the right to:

• confirm whether personal data about you is being processed and obtain access to it;
• correct inaccuracies;
• request deletion of certain personal data;
• obtain a portable copy of certain personal data;
• opt out of certain processing for targeted advertising, sale of personal data, or qualifying profiling; and
• exercise applicable privacy rights without unlawful discrimination or retaliation.

Some rights are subject to exceptions, verification requirements, and the scope of applicable law. Certain information may be exempt because it is governed by another law or falls within a statutory exemption.

To submit a privacy request, email clientsupport@primalaesthetics.net with the subject line Privacy Request, or call/text (469) 827-8555. Please describe your request and provide enough information for us to reasonably identify the relevant records. We may need to verify your identity before completing a request.

If applicable law gives you a right to appeal a decision regarding a privacy request, you may submit an appeal by emailing the same address with the subject line Privacy Appeal and explaining why you believe the decision should be reconsidered. If an appeal is denied, information about any further complaint process required by applicable law will be provided.

13. Children's Privacy

This public website is intended for a general audience and is not directed to children under 13. We do not knowingly seek to collect personal information online from children under 13 without authorization required by applicable law.

Services involving minors, if offered, may be subject to separate parental or guardian consent, intake, privacy, and service requirements.

14. Third-Party Websites & Links

Our website may contain links to websites, applications, scheduling systems, payment services, social-media platforms, or other services operated by third parties. Their privacy and security practices are governed by their own policies, not this Privacy Policy. A link does not by itself mean that we control or are responsible for the third party's privacy practices.

15. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or legal requirements. When we update it, we may change the effective date shown at the top of this page. Material changes may be communicated by additional means when appropriate or required by law.

16. Contact Us

Questions about this Privacy Policy or requests concerning your personal information may be directed to: