Privacy
policy.

01What we collect

Information you give us. Your name, email address and telephone number. The treatment you book, the provider you choose, and the date and time. Anything you write to us by email, through the booking system, or when you sign up for our newsletter.

Health information. Your medical history, medications, allergies, the assessment your practitioner makes, photographs taken for clinical purposes, and your treatment records. This is collected in the course of your care, not through this website.

Payment information. Handled by our booking and payment providers. We do not store your full card number.

Information collected automatically. When you visit this site, standard web server logs record your IP address, browser and device type, the pages you view, and the site you arrived from.

02Cookies, tracking, and Do Not Track

This website sets no cookies of its own. It runs no advertising trackers and no analytics.

The booking page embeds our booking provider's scheduling system, which does set its own cookies in order to function. That system is operated by Moxie under its own privacy policy.

Do Not Track. We do not track you across other websites, so there is nothing for a Do Not Track signal to switch off. We honour it by default because we never began.

We do not permit third parties to collect personally identifiable information about your activity across different websites through this site.

03Why we use it

To arrange, provide and follow up on your treatment. To answer you when you get in touch. To take payment. To send appointment confirmations and reminders. To send you marketing, but only if you asked for it. To meet our legal, clinical and record-keeping obligations. To keep the site and the practice secure.

04Your medical information

Your medical information is protected under the California Confidentiality of Medical Information Act (CMIA). We do not disclose it without your written authorization, except where the law specifically permits or requires us to — for example to another provider involved in your care, or in response to a lawful court order or subpoena.

We are a cash-pay practice and do not bill insurance, which means we are not a HIPAA covered entity. That does not lower the standard your records are held to. CMIA is California's own medical confidentiality law, it applies to us in full, and in several respects it is stricter than HIPAA. We hold your records to it.

We keep your medical records for seven years from the date of your last treatment, and then securely destroy them. You can ask for a copy of your records at any time within that period.

Photographs taken for clinical assessment are part of your medical record and are treated the same way. We will never use a photograph of you in marketing, on this website or on social media without your separate, specific, written consent, and you can withdraw that consent at any time.

05Who we share it with

We share only what is necessary, and only with:

• Moxie — our booking system, patient records and online store. Your appointment and account information lives there.
• Affirm and Cherry — our payment plan providers, and only if you choose to apply to one of them. They make their own eligibility decisions under their own privacy policies.
• Payment processors — to take payment.
• Other treating providers — where it is part of your care and permitted by law.
• Regulators, courts and law enforcement — where we are legally required to.
• Netlify — the company whose servers deliver this website. Like any web host, they receive your IP address and basic request information each time you load a page, and keep it briefly in server logs. They are not given your name or your medical information.

One of these runs inside our own pages. The booking page embeds Moxie's scheduling system. The moment that page loads, your browser contacts Moxie directly, so Moxie receives your IP address and browser information then — before you have typed anything or booked anything. Nothing else on this site is loaded from a third party: no analytics, no advertising, no third-party fonts.

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We have never done either.

Do Not Sell or Share My Personal Information. The CCPA gives you this right, and most sites must publish a link for it. There is nothing here for you to opt out of, because we do not sell or share your information in the first place. If that ever changes, this policy will change before it does, and the link will appear in this paragraph.

06Your rights

These rights come from the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA). A practice our size almost certainly falls below the revenue and volume thresholds that make a business subject to that law. We grant the rights anyway. We would rather honour them than argue about whether we have to.

You can ask us to:

• tell you what personal information we hold about you, and where we got it
• give you a copy of it
• correct it if it is wrong
• delete it, subject to the records we are legally required to keep
• limit how we use sensitive information
• stop sending you marketing

To make any of these requests, email us at hello@redefynaesthetics.com or call (951) 221-3988. We will need to verify who you are before we act, which usually means confirming details we already hold. You may use an authorized agent.

We will never treat you differently for exercising any of these rights. Your care and your pricing will not change.

Some medical records must be retained for a period set by law even if you ask us to delete them. Where that applies we will tell you which records and why.

07Direct marketing and the Shine the Light law

California's Shine the Light law lets you ask whether we disclosed your personal information to third parties for their own direct marketing in the previous calendar year. We do not do this. You are welcome to ask us to confirm that in writing at any time.

If you sign up for our newsletter, every email we send you carries an unsubscribe link that works.

08Appointment reminders by text and email

We send appointment confirmations and reminders by text message and by email. You give us permission to do this when you provide your mobile number and email address at booking.

• Consent is never a condition of treatment. You can book with us, and be treated by us, without agreeing to text messages. Tell us and we will call you instead.
• How often: reminders are tied to your appointments — typically a confirmation when you book and a reminder before your visit. This is not a marketing list.
• To stop: reply STOP to any message and we will stop texting you. Reply HELP for help, or call (951) 221-3988.
• Message and data rates may apply, depending on your mobile plan. Carriers are not liable for delayed or undelivered messages.
• We do not sell or share your mobile number, and we do not use it for marketing unless you separately ask us to.

09How long we keep it

Medical records: seven years from the date of your last treatment, then securely destroyed.

Contact and appointment information: for as long as you are a client, and then for the same seven-year period, because it forms part of your treatment history.

Marketing contact details: until you unsubscribe, after which we keep only the minimum needed to make sure we do not contact you again by mistake.

10Security

Access to your records is limited to the people at the practice who need it to care for you or to run the practice. Our booking and records system is provided by Moxie and is access-controlled. No system is perfectly secure, and we will tell you promptly if a breach affects your information and the law requires notification.

11Children

Our services are intended for adults. We do not knowingly collect information from anyone under 18 through this website. If you believe a child has given us information, contact us and we will delete it.

12Changes to this policy

If we change this policy we will post the revised version on this page and update the date at the top. If the change is significant — for example if we begin using analytics, or share information with a new category of third party — we will say so prominently on this page for at least 30 days.

13Contact us

Redefyn Aesthetics
23180 Hemlock Ave, Suite 200
Moreno Valley, CA 92557
(951) 221-3988
hello@redefynaesthetics.com