Legal
Privacy Policy
Effective Date: September 2025 — If you are experiencing a medical emergency, call 911 immediately.Introduction
This Privacy Policy describes the data protection practices of Allure Medical Spa PLLC (“Allure Medical,” “we,” “our,” or “us”) when you interact with us, our applications, or our websites. “Personal Information” means any information that is linked or reasonably linkable to an identified or identifiable natural person. This Privacy Policy is incorporated into our Terms of Use. We do not sell or share consumers’ mobile numbers or SMS consent with third parties or affiliates for marketing or promotional purposes. Please read this policy carefully — if you do not agree to it, please do not use the Services. If you are experiencing a medical emergency, call 911 immediately.
The Information We Collect
We collect Personal Information you provide directly — such as your name, address, telephone number, date of birth and email; information about your medical conditions, treatments, prescriptions, medical photos and lab results; log-in credentials; billing information (collected by our payment processors); identity verification details; demographic information; and content you post or submit. We also collect information through automated means, including IP address, device and browser types, pages viewed, search terms and usage data, plus general location information (and precise GPS location only with your permission) via cookies, SDKs, tracking pixels and similar tools. We may also receive information from social media platforms and from third parties such as physicians, pharmacies, analytics providers and marketing partners.
How We Use Your Information
We use Personal Information to carry out, improve and manage the Services and facilitate the provision of health care; to conduct internal research (published only in de-identified, aggregate form); to communicate with you about the Services, promotions and special events; to provide technical support; to verify your identity, administer your account and process payments; to personalize content and advertising and measure its effectiveness; and to comply with the law and protect our legal rights. We may combine information from multiple sources, and may aggregate or de-identify data so that it no longer identifies you.
Analytics, Advertising & AI
We use third-party analytics services such as Google Analytics (including Google Signals) and Mixpanel, and integrate advertising technologies from networks such as Facebook, Google Ads, TikTok and Criteo, which use cookies and pixels to deliver relevant advertising on and off the Services. You can opt out via the Google Analytics Opt-out Browser Add-on, the Google Ads Settings page and your device’s ad personalization settings; we also honor legally recognized universal opt-out signals such as Global Privacy Control where required. We do not currently respond to Do Not Track signals. We may use AI technologies to personalize content, improve our Services and support fraud prevention — critical decisions about your health care always involve human oversight from qualified professionals.
How We Share Information
We may share information with our affiliates and subsidiaries; with health care providers and pharmacies for treatment, payment and health care operations; with service providers that support billing, marketing, analytics, IT, fulfillment and similar functions; with advertising networks and joint marketing partners; in connection with legal process or to protect Allure Medical and others; and as part of a business transfer. Content you share publicly (including reviews and testimonials) may be used in our marketing. We do not sell or share mobile or personal data with third parties for marketing or promotional purposes — data is shared only when strictly necessary to deliver our service, under binding confidentiality agreements.
Your Rights & Choices
Depending on where you live, you may request information about the data we process, access a copy of it, correct it, or ask us to delete it — we will verify your identity before acting on a request. You may opt out of targeted advertising (including via Global Privacy Control), limit our use of sensitive data, and opt out of marketing emails and calls at any time. Our Services are not directed to anyone under 16, and we delete children’s data if we learn it was collected. We retain information no longer than necessary. To exercise any right, email info@alluremedical.com.
Health Information — HIPAA Notice
Our Notice of Privacy Practices describes how we may use and disclose your Protected Health Information (PHI) for treatment, payment and health care operations, and where permitted or required by law — including public health and safety, health oversight, judicial proceedings, law enforcement, research, workers’ compensation and similar purposes. You have the right to inspect and copy your PHI, request amendments, receive an accounting of disclosures, request restrictions and confidential communications, obtain a paper copy of the Notice, and be notified of a breach. Electronic transmission of PHI complies with the HIPAA Privacy Rule, using SSL or equivalent technology. If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or the Secretary of Health and Human Services — you will not be retaliated against for doing so.
California Privacy Rights
If you are a California resident, the CCPA allows you to request information about the categories of personal information we collect and disclose, access or receive a copy of certain information, and request deletion — without discrimination for exercising your rights. California residents are also protected by the Confidentiality of Medical Information Act (CMIA), may restrict certain disclosures and marketing uses of PHI, and minors may request that certain sensitive information not be disclosed to a parent or guardian. To exercise these rights, email info@alluremedical.com with your full name, email and residential address.
Security, Changes & Contact
We use technical and organizational measures designed to protect your information, though no method of transmission or storage is completely secure — please keep your password confidential. We may revise this Privacy Policy from time to time; the current version and its effective date are always available on this page, and material changes will be notified in accordance with legal requirements. Questions? Contact our Privacy Officer at info@alluremedical.com.