Privacy Policy

Section 01Who We Are

BrooklynJae MedSpa operates a medical spa located at 3005 Old Alabama Road #118, Johns Creek, GA 30022, providing aesthetic and wellness services, and a website at brooklynjae.com.

We are the party responsible for the information described in this policy. You can reach us using the details in Section 18.

Section 02Health Information & HIPAA

Information you provide to us in the course of receiving treatment — including your medical history, medications, allergies, treatment records, clinical photographs, and laboratory results — is protected health information and is treated with a higher standard of confidentiality than the general website information described elsewhere in this policy.

Please do not send detailed health information through our website contact form, chat widget, text message, email, or social media. These channels are not secure. Contact us by telephone or discuss health matters at your appointment.

Section 03Information We Collect From You

We collect information you choose to give us, including when you complete a contact or booking form, use the chat feature on our website, call or text us, subscribe to our emails, purchase a service or product, or attend an appointment. This may include:

• Contact details — your name, telephone number, email address, and mailing address
• Appointment information — the services you enquire about, your preferred times, and your appointment history
• Health information — collected at your appointment through intake and consent forms, as described in Section 02
• Payment information — processed by our payment provider; we do not store full card numbers on our systems
• Correspondence — the content of messages you send us and our replies
• Feedback — reviews, survey responses, and comments you choose to share

Section 04Information Collected Automatically

When you visit our website, certain information is collected automatically by our servers and by the analytics and advertising tools described in Section 05. This may include your IP address, browser type and version, device type and operating system, referring website, the pages you view and the time spent on them, and general location inferred from your IP address.

This information is used to understand how our website is used, to maintain its security and performance, and to improve it.

Section 05Cookies & Tracking Technologies

We use cookies and similar technologies on our website. Cookies are small files stored on your device that help a website function and remember your preferences.

Types We Use

• Essential cookies — required for the website to function properly and for security
• Analytics cookies — help us understand how visitors use the site so we can improve it
• Advertising cookies — used to measure the effectiveness of our advertising and, where applicable, to show you our advertisements on other platforms

Third-Party Services

We use the following third-party services, which may set their own cookies and receive information about your visit: [LIST ACTIVE SERVICES — e.g. Google Analytics, Google Ads, Meta Pixel, Cloudflare]. Each operates under its own privacy policy, which we encourage you to review.

Managing Cookies

Most browsers let you refuse or delete cookies through their settings. Disabling cookies may affect how parts of our website function. You can also opt out of certain advertising cookies through the tools offered by the relevant advertising platforms.

Section 06How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and schedule, confirm, and remind you of appointments
• Provide treatment and maintain accurate clinical records
• Process payments and administer packages and memberships
• Send you marketing communications where you have consented to receive them
• Improve our website, services, and client experience
• Maintain the security of our website and prevent fraud or abuse
• Comply with our legal, regulatory, and professional obligations

We do not use protected health information for marketing purposes without your specific written authorization.

Section 07How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers — companies that operate our booking system, payment processing, email and text platforms, website hosting, and analytics, each of which may only use the information to provide services to us
• Healthcare partners — laboratories, pharmacies, and supervising or referring clinicians, where necessary for your care
• Legal requirements — where required by law, court order, subpoena, or a regulatory or licensing authority
• Safety — where necessary to protect the rights, safety, or property of our clients, our staff, or others
• Business transfer — in connection with a merger, acquisition, or sale of assets, subject to applicable law and continued protection of your information
• With your consent — in any other case where you have authorised the disclosure

Where a service provider handles protected health information on our behalf, we require an appropriate written agreement governing that handling.

Section 08Text Messages & Email

If you provide your telephone number, we may contact you regarding your appointments and account. If you separately opt in to marketing messages, we may also send you promotional communications.

You can unsubscribe from marketing emails using the link in any such email, or by contacting us directly. You will continue to receive messages necessary for your appointments and care.

Section 09Photographs & Images

Clinical photographs taken to document your treatment form part of your treatment record and are protected accordingly.

We will not publish your image for marketing, social media, or advertising without your separate, specific, written consent. That consent is optional, has no effect on your care, and may be withdrawn at any time in writing — though we may be unable to recall material already printed or distributed.

Section 10Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encrypted connections on our website, access controls limiting who can view records, and secure storage of clinical documentation.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and any transmission of information to us is at your own risk. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

Section 11How Long We Keep Information

We keep personal information for as long as necessary for the purposes described in this policy, and for as long as required by law and professional record-retention obligations.

Medical and treatment records are retained in accordance with Georgia law and applicable professional standards, which may require retention for a period of years following your last visit. Marketing contact details are retained until you unsubscribe or ask us to delete them. Website analytics data is retained according to the settings of the relevant platform.

Section 12Your Choices & Rights

Depending on your circumstances and where you live, you may be able to:

• Request access to the personal information we hold about you
• Request correction of information that is inaccurate or incomplete
• Request deletion of information, subject to our legal and record-retention obligations
• Withdraw consent to marketing communications at any time
• Request a copy of your medical records, as provided under applicable health privacy law

To exercise any of these, contact us using the details in Section 18. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law. Please note that we cannot delete records we are legally required to retain.

Section 13State Privacy Rights

Residents of certain states have additional rights regarding their personal information, which may include the right to know what personal information is collected and how it is used, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information and of targeted advertising, and the right not to be discriminated against for exercising these rights.

We do not sell personal information. If you are a resident of a state granting these rights and wish to exercise them, contact us using the details in Section 18 and identify your state of residence.

Information governed by HIPAA is generally excluded from these state privacy laws and is handled under our Notice of Privacy Practices instead.

Section 14Children’s Privacy

Our website is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Where we treat a minor with parental or guardian consent, that information is handled as part of the minor’s treatment record in accordance with applicable law.

Section 15Third-Party Websites

Our website and social media profiles may link to websites we do not operate, including booking platforms, review sites, and social networks. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any website you visit.

Section 16Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is no consistent industry standard for how to respond to these signals, our website does not currently respond to them. You can manage tracking through the cookie controls described in Section 05.

Section 17Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the “Last Updated” date at the top of this page, and we will notify you of material changes where reasonably practicable.

Your continued use of our website or services after an update takes effect constitutes acceptance of the revised policy. We recommend reviewing this page periodically.