Privacy Policy

---

Privacy Policy Effective Date: 02/26/2026

Concept Medspa (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book services, or interact with our practice.

By using our website and services, you agree to the terms outlined below.

1. Information We Collect

We may collect the following types of information:

Personal Information

• ●  Name
• ●  Email address
• ●  Phone number
• ●  Date of birth
• ●  Mailing address
• ●  Payment information
• ●  Appointment history
  Health Information
• ●  Medical history
• ●  Treatment records
• ●  Allergies and medications
• ●  Photos for treatment documentation and before/after results
  Health information is handled in accordance with applicable federal and state privacy laws, including HIPAA when applicable.
  Website Usage Information
• ●  IP address
• ●  Browser type
• ●  Device information
• ●  Pages visited

● Cookies and tracking technologies

2. How We Use Your Information

We use your information to:

• ●  Schedule and manage appointments
• ●  Provide aesthetic and wellness treatments
• ●  Process payments
• ●  Communicate with you regarding services, promotions, and updates
• ●  Improve our website and customer experience
• ●  Comply with legal and regulatory obligations
  We will never sell your personal information.

3. HIPAA & Medical Privacy
Concept Medspa complies with the Health Insurance Portability and Accountability Act (HIPAA) when applicable. Your medical records and protected health information (PHI) are securely stored and only accessed by authorized personnel.
We may use treatment photos for documentation. Before-and-after photos will never be used publicly without your written consent.

4. Marketing Communications
If you opt in to receive emails or text messages, we may send:

• ●  Appointment reminders
• ●  Promotions and special offers
• ●  Treatment updates
• ●  Educational content
  You may opt out at any time by clicking “unsubscribe” or replying “STOP” to text messages.
  

5. Payment Processing

All payments are processed through secure third-party payment processors. We do not store full credit card information on our servers.

6. Cookies & Tracking

Our website may use cookies to enhance user experience and analyze website traffic. You can disable cookies through your browser settings.

7. Information Sharing

We may share your information only with:

• ●  Licensed medical providers within our practice
• ●  Payment processors
• ●  Secure software platforms (EHR, booking systems)
• ●  Legal authorities if required by law
  We do not sell or rent your information.
  

8. Data Security
We implement administrative, technical, and physical safeguards to protect your personal and medical information. However, no system can guarantee 100% security.

9. Your Rights
You have the right to:

• ●  Request access to your records
• ●  Request corrections to inaccurate information
• ●  Withdraw marketing consent
• ●  Request deletion of non-medical data when legally permissible
  To exercise these rights, contact us at the information below.

10. Children’s Privacy

Our services are not directed toward individuals under 18 without parental or guardian consent.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date.

12. Contact Information

Concept Medspa
1253 Worcester Rd. Framingham,MA, 01701 Suite 401 Phone: 508-969-3625
Email: conceptmedspa@gmail.com