Effective
Supersedes the policy of July 11, 2024
1. Who this policy covers
This Statement of Privacy applies to Zayets Beauty Factory SD, PC, operating at 4025 Camino Del Rio South, Suite 306, San Diego, CA 92108, and governs data collection and usage through this website. For the purposes of this policy, unless otherwise noted, all references to Zayets Beauty Factory SD, PC include that location.
The Zayets Beauty Factory SD, PC website is a medical spa site. By using it, you consent to the data practices described in this statement.
This policy covers the website. It does not replace the notice governing your medical record at the practice, which is described in section 7.
2. Information you give us
In order to better provide you with the products and services offered, we may collect personally identifiable information, such as your:
First and last name
Mailing address
Email address
Phone number
Gender
Date of birth
3. When we collect it
We do not collect any personal information about you unless you voluntarily provide it to us. You may be required to provide certain personal information when you elect to use certain products or services. These may include: (a) registering for an account; (b) entering a sweepstakes or contest sponsored by us or one of our partners; (c) signing up for special offers from selected third parties; (d) sending us an email message; (e) submitting your credit card or other payment information when ordering and purchasing products and services.
On this website, the main point of collection is the consultation request form. It asks for your name, an email address or phone number, the treatment you are interested in, an optional preferred date and time, and an optional free-text message. We use that information to contact you about the consultation you asked for.
If you purchase products or services, we collect billing and credit card information. That information is used to complete the purchase transaction. We may also collect anonymous demographic information, which is not unique to you.
We may gather additional personal or non-personal information in the future.
4. Information collected automatically
Information about your computer hardware and software may be automatically collected. This can include your IP address, browser type, domain names, access times and referring website addresses. This information is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the website.
5. Cookies, analytics and advertising identifiers
We use cookies and similar technologies to operate the site, understand how it is used, and measure the advertising that brings people to it.
Essential cookies, which the site needs in order to work.
Analytics, through Google Analytics and PostHog, which tells us which pages are read and how people move through the site. These measure the visit, not the visitor: we do not give either of them your name, email address or telephone number, and we do not ask them to build a profile of you.
Advertising measurement, through Google Ads and Meta, which tells us which advertisement produced a consultation request.
A first-party attribution cookie set by this site. When you arrive from an advertisement, the advertising platform appends a click identifier to the address — Google calls it a gclid, Meta calls it an fbclid. We store that identifier, along with any campaign parameters and the first page you landed on, in a cookie on this domain for 90 days, so that we can tell the practice which advertising actually worked. It is not sold, and it is not used to build a profile of you.
6. How we use your information
We collect and use your personal information to operate and deliver the services you have requested.
We may also use your personally identifiable information to inform you of other products or services available from the practice and its affiliates.
In practice this means: responding to your consultation request, scheduling and confirming appointments, answering your questions, taking payment, meeting our legal and record-keeping obligations, detecting and preventing fraudulent or abusive use of the site, and measuring which of our advertising is worth continuing.
7. Health information, and what this website is not
The practice is a healthcare provider, and the medical record it keeps about you is protected health information governed by HIPAA and by California law. That record is covered by the practice’s Notice of Privacy Practices, which is available on request and at the front desk. It is a separate document from this one, and where the two touch, it governs.
This website is not part of that record. A consultation request form on a public website is not a secure clinical channel, and it is not encrypted end to end in the way a patient portal is.
Health information you do choose to give us — for example if you describe a concern in the message field — is used to route your request to the right clinician and is not used for advertising, is not sold, and is not shared with advertising or analytics providers.
8. Email, SMS and phone communications
From time to time we may contact you by email, SMS or phone call for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys and other general communication. In order to improve our services, we may receive a notification when you open an email from us or click a link in it.
Message frequency varies. Message and data rates may apply.
9. How to stop hearing from us
If you would like to stop receiving marketing or promotional communications from us by email, you may opt out by clicking the unsubscribe link in any such email. To stop text messages, reply STOP to any message from us. Reply HELP for help.
You can also ask us to stop at any time by writing to Stan@beautyfactorysd.com or calling (619) 306-0462.
Opting out of marketing does not stop appointment confirmations, reminders and other messages about care you have actually requested.
10. Sharing information with third parties
We do not sell, rent or lease our customer lists to third parties.
We may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to us, and they are required to maintain the confidentiality of your information.
Online appointment booking is operated for us by AestheticPro, a third-party scheduling provider. If you book through it, the information you enter there — including the payment card it requires to hold an appointment — is collected by that provider under its own terms and privacy policy. We do not receive or store your full card number.
We may disclose your personal information, without notice, if required to do so by law or in the good-faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on us or on the site; (b) protect and defend our rights or property; or (c) act under exigent circumstances to protect the personal safety of users of the site, or the public.
11. Where your information is stored
We may store your data on servers provided by third-party hosting vendors with whom we have contracted.
12. Security of your personal information
We secure your personal information from unauthorised access, use or disclosure. When personal information such as a credit card number is transmitted to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer (SSL) protocol.
We strive to take appropriate security measures to protect against unauthorised access to or alteration of your personal information. Unfortunately, no data transmission over the internet or any wireless network can be guaranteed to be one hundred per cent secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the internet which are beyond our control; and (b) the security, integrity and privacy of any and all information and data exchanged between you and us through this site cannot be guaranteed.
13. How long we keep it
We keep personal information for as long as it is needed for the purpose it was collected for, and then for as long as we are required to keep it by law.
Medical records are retained for the period California law requires of a healthcare provider. Consultation requests that do not become appointments are kept for our own business records and then deleted. The advertising attribution cookie described in section 5 expires 90 days after your first visit.
14. Your California privacy rights
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights over the personal information we hold about you. You have the right to:
Know what personal information we have collected about you, where we got it, why we collected it, and who we disclosed it to.
Correct inaccurate personal information we hold about you.
Delete personal information we have collected from you, subject to the exceptions in section 15.
Limit our use and disclosure of sensitive personal information, including health information, to what is necessary to provide the services you asked for.
Opt out of the sale or sharing of your personal information for cross-context behavioural advertising. We do not sell personal information. You may still opt out of advertising-related sharing.
Not be discriminated against for exercising any of these rights. We will not deny you service, charge you a different price, or give you a lower quality of service because you asked.
15. Right to deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you we will delete your personal information from our records, and direct any service providers to delete your personal information from their records.
Please note that we may not be able to comply with a request to delete your personal information if it is necessary to:
Complete the transaction for which the personal information was collected, fulfil the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, or prosecute those responsible for that activity;
Debug to identify and repair errors that impair existing intended functionality;
Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
Comply with the California Electronic Communications Privacy Act;
Engage in public or peer-reviewed scientific, historical or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
Comply with an existing legal obligation; or
Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
16. Children
We do not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of thirteen, you must ask your parent or guardian for permission to use this website.
This website describes medical and aesthetic treatment and is intended for adults. Treatment is provided to minors only with the consent of a parent or legal guardian, and the website is not directed at children.
If you believe a child has given us personal information, contact us at Stan@beautyfactorysd.com and we will delete it.
17. Links to other websites
This site contains links to other websites, including our online booking system and our social media profiles. We are not responsible for the privacy practices or the content of any site we do not operate. We encourage you to read the privacy policy of every site that collects information from you.
18. Changes to this statement
We reserve the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our website, or by updating the effective date at the top of this page.
Your continued use of the website and services available after such modifications will constitute your: (a) acknowledgement of the modified Privacy Policy; and (b) agreement to abide and be bound by that policy.
19. Contact us
Zayets Beauty Factory SD, PC welcomes your questions or comments regarding this Statement of Privacy. If you believe that we have not adhered to this statement, please contact us:
Zayets Beauty Factory SD, PC, 4025 Camino Del Rio South, Suite 306, San Diego, CA 92108
Email: Stan@beautyfactorysd.com
Telephone: (619) 306-0462