# Website Privacy Policy

**State Supplement: Florida**
*This document serves as a template for a Florida medical spa's public-facing website privacy policy, integrating both federal baseline requirements and Florida specific statutes like FIPA.*

---

## 1. Introduction
Welcome to our website. We respect your privacy and are committed to protecting your personal information. This Privacy Policy details how we collect, use, and process your personal information when you visit our website, book an appointment, or interact with our digital services.

## 2. Information We Collect
We collect information that identifies or could reasonably be associated with you ("Personal Data"). 

We may collect the following categories of Personal Data:
- **Identifiers:** First and last name, email address, postal address, phone number.
- **Commercial Information:** Products, treatments, or services you have inquired about or purchased.
- **Biometric Information:** Facial geometry or skin analysis data (only collected with explicit consent prior to aesthetic treatments).
- **Internet Activity:** Browsing history, IP address, device information, and interactions with our website.

## 3. Use of Personal Information
We use the personal information we collect for the following business purposes:
- To provide our aesthetic services and respond to your inquiries.
- To process your payments and manage your account.
- To improve our website, customer service, and digital experience.
- To send administrative information, marketing communications (if you have opted in), and important updates regarding our clinic.

## 4. Specific Florida Data Protections
We process your data in compliance with the Florida Information Protection Act (FIPA) and relevant state regulations. 

- **Data Breach Notification:** In the event of a breach of security concerning your computerized personal information, we will notify you in compliance with FIPA. FIPA requires notification to affected individuals no later than 30 days after the determination of a breach or reason to believe a breach occurred.
- **Opt-Out Rights:** You have the right to opt out of our email marketing list at any time by clicking the "unsubscribe" link in our emails, or by contacting us directly.
- **Biometric Data:** We do not sell or share your biometric data (such as 3D facial scans used for filler mapping) without your explicit written consent, and we retain it only as long as necessary for your continued treatment or as required by medical record retention laws.

## 5. Exemption for Medical Information
Please note that "protected health information" (PHI) collected by a covered entity or business associate governed by the Health Insurance Portability and Accountability Act (HIPAA), and patient records governed by Florida Statutes (Ch. 456), are subject to strict medical privacy laws. 

If you are a patient receiving medical aesthetic treatments, the privacy of your clinical and health information is governed by our separate Notice of Privacy Practices (NPP), not solely by this website policy.

## 6. How We Share Your Information
We do not sell your personal data. We may share your data with trusted third-party service providers (e.g., website hosts, email marketing platforms, EMR software, payment processors) who assist us in operating our business. These parties are contractually obligated to keep your information secure and confidential. 

## 7. Changes to Our Privacy Policy
We may update this privacy policy from time to time to comply with changes in state or federal regulations. The updated version will be indicated by an updated "Effective Date."

*Effective Date: April 17, 2026*