Effective Date: 4/18/2025
112 West Medical Aesthetics and Wellness (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring compliance with HIPAA (Health Insurance Portability and Accountability Act), GDPR (General Data Protection Regulation), and TCR (The Campaign Registry) standards.
This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services, visit 112westmedspa.com, or engage with our SMS communications.
1. Information We Collect
We collect the following information:
A. Personal Information
- Name, email, phone number, mailing address
- Date of birth
- Payment details
B. Protected Health Information (PHI) (HIPAA Compliance)
- Medical history, treatment preferences, and consultation records
- Before/after photos (with consent)
- Insurance or payment-related medical records (if applicable)
C. Website & Technical Data
- IP address, browser type, cookies, and analytics data
- Device information and user interactions with our website
D. SMS Communications (TCR Compliance)
We collect and store records of opt-ins, opt-outs, and consent logs for SMS messaging, as required by TCR.
2. How We Use Your Information
We use your information for:
- Providing Medical Services – Booking appointments, performing treatments, and personalizing recommendations.
- Processing Payments – Securely handling transactions and invoicing.
- Marketing & Communications – Sending updates, promotional offers, and appointment reminders (only if you have opted in).
- Legal & Security Compliance – Complying with healthcare, privacy, and SMS regulations.
3. No Sharing of Personal Information for Marketing Purposes
We take your privacy seriously. We do not sell, rent, or share your personal information—including mobile details and personally identifiable information (PII)—with third parties or affiliates for marketing purposes.
- No third-party marketing – Your information is not shared with external companies for advertising purposes.
- No affiliate marketing – We do not share data with affiliate partners for promotional campaigns.
- Strict data security – Your information is only used for legitimate business and service-related purposes.
The only circumstances in which your information may be shared include:
- With Service Providers: Trusted vendors that assist in payment processing, appointment scheduling, or other necessary business functions. These vendors are contractually obligated to protect your data.
- For Legal Compliance: If required by law, court order, or to protect your rights and safety.
4. SMS Messaging Compliance (TCR Regulations)
To comply with TCR regulations, we:
- Obtain explicit consent before sending SMS messages.
- Allow users to opt-out anytime by replying STOP to any message.
- Include clear disclosure when users opt in for text communications.
- Maintain records of opt-in/opt-out requests as required by law.
We do not send unsolicited or automated marketing messages without user consent.
5. GDPR Compliance – Your Rights (For EU Customers)
If you are in the European Union (EU), you have the following GDPR rights:
- Right to Access – Request a copy of your personal data.
- Right to Correction – Update inaccurate or incomplete information.
- Right to Erasure (Right to Be Forgotten) – Request deletion of your data, subject to legal requirements.
- Right to Restrict Processing – Limit how we use your data.
- Right to Data Portability – Request data transfer to another provider.
- Right to Object – Opt out of data processing for marketing purposes.
To exercise these rights, contact us at:
info@112westmedspa.com
6. How We Protect Your Information
We implement strict security measures, including:
- Data Encryption – Secure storage and transmission of personal data.
- Access Controls – Restricted access to personal data to authorized personnel only.
- Compliance Monitoring – Regular audits to ensure regulatory compliance.
7. Data Retention
- HIPAA: Medical records are retained as required by law.
- GDPR: Personal data is stored only as long as necessary.
- TCR: SMS consent records are kept for 5 years.
8. Changes to This Privacy Policy
We may update this policy to remain compliant with changing laws. Updates will be posted on our website.
For any concerns, contact us at:
19676 E Walnut Rd, Queen Creek, AZ 85142
info@112westmedspa.com
