Contact: privacy@elanaesthetics.com

1. Information We Collect:

Personal details (name, DOB, contact information).

Health history, treatment notes, and appointment records.

Payment and billing information.

Photos (with consent), before/after images.

Device and browsing data (cookies, IP addresses, analytics).

2. How We Use Your Information:

To schedule and provide services.

To screen for safety and contraindications.

To process payments and send appointment reminders.

For marketing (only with your explicit consent).

3. Sharing of Information:

With HIPAA-compliant vendors (EHR, scheduling, payment processors).

With referring providers or other professionals with your consent.

As required by law or regulation.

We do not sell your personal data.

4. Data Retention:

Medical records: retained at least 6 years (minors: until age 18 + 6 years).

Marketing and website data: retained only as long as necessary or legally required.

5. Virginia Privacy Rights (VCDPA):

As a Virginia resident, you have the right to:

Request access, correction, or deletion of your data.

Request a copy of your data in portable format.

Opt out of targeted advertising or profiling.

Submit requests via privacy@elanaesthetics.com. We will respond within 45 days. Appeals may be made within 60 days.

6. Security:

We use industry-standard safeguards to protect your information but cannot guarantee 100% security.

7. Children:

We do not collect online data from children under 13. In-person treatment for minors requires parental consent.