Privacy Policy

Chicago Medspa LLC, an Illinois limited liability company ("Chicago Medspa," "we," "us," or "our"), operates a physician-supervised medical aesthetics practice in Chicago, Illinois, and the website located at https://chicagomedspa.com (the "Site"). We respect your privacy and are committed to handling your information responsibly and transparently.

This Privacy Policy describes the information we collect from visitors to the Site and from people who contact us through the Site — whether by web form, phone, or text message — and explains how we use it, when we share it, and the choices available to you. It applies to the Site and to those website-based communications; it does not apply to information collected offline or through other channels, except as described below.

By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the Site.

Information you provide to us. When you submit an inquiry, request an appointment, call us, or text us, we collect the information you choose to share. This may include your name, email address, phone number, and the details of your inquiry or appointment request — such as the services you are interested in, your preferred dates and times, and any questions you ask. It also includes the content of phone calls with our practice, and any other information you voluntarily provide.

Information from calls and text messages. When you communicate with us by phone or text, we also collect information generated by those channels, such as the phone number you call or text from, the date, time, and duration of the communication, and — where recording applies as described in Section 6 — recordings and summaries of the conversation.

Information collected automatically. When you visit the Site, we and our service providers automatically collect certain technical information, including your IP address, device type, browser type and version, operating system, referring website, the pages you view, the dates and times of your visits, and how you interact with the Site. This information is collected through cookies, pixels, tags, and similar technologies, as described in Section 5 below. Some of this information may allow us to estimate your approximate geographic location.

We do not directly collect payment card information through the Site. Payment may be processed by a third-party booking or payment platform or at the clinic. A third-party platform handles payment information under its own privacy and security practices.

This Privacy Policy governs the website only. Clinical records and patient files are maintained separately by the practice and are governed by the Notice of Privacy Practices provided to patients at the clinic, not by this policy.

Please do not submit detailed medical information — such as health history, medications, diagnoses, or treatment records — through website forms or chat. Website forms and chat are intended for general inquiries and scheduling only. Health information relevant to your care should be shared directly with your provider at the clinic, where it is handled under the practice's clinical privacy safeguards.

We use the information described above to:

• •Respond to your inquiries, questions, and requests;
• •Schedule, confirm, reschedule, and follow up on appointments;
• •Provide, operate, maintain, and improve the Site and our services;
• •Send marketing and promotional communications where you have consented to receive them, and measure how our marketing performs;
• •Protect the security and integrity of the Site, and detect and prevent fraud, abuse, and unauthorized activity;
• •Comply with applicable laws, regulations, and legal processes, and enforce our terms and policies.

We use cookies, pixels, and similar technologies on the Site. Each one is written directly into the Site's code rather than deployed through a tag-management container, and each loads only when you are on the published site. These technologies fall into three general categories: strictly necessary technologies that make the Site work; analytics technologies that help us understand how the Site is used and how visitors find us; and advertising technologies that help us measure our marketing and reach people who may be interested in our services. Specifically, the Site uses:

• •Google Analytics 4 collects usage data — such as pages viewed, session duration, and general location — to help us understand Site traffic and improve the visitor experience.
• •Google Ads supports our advertising and conversion measurement, including call tracking. If you arrive at the Site from one of our advertisements, you may see a dynamically displayed tracking phone number in place of our standard number, and calls placed to that number may be measured and attributed to the advertisement that brought you here.
• •Meta Pixel helps us measure the effectiveness of advertising on Meta platforms and may be used to show you relevant advertising there.
• •Metricool sets its own tracking tag that records visits to the Site, so that website traffic can be reported alongside the social-media analytics we review in the same tool.

Most web browsers let you control cookies through their settings, including blocking or deleting them. If you disable cookies, some features of the Site may not function as intended. You can also use the opt-out tools offered by the providers above, such as browser-based advertising controls and the ad-preference settings within Google and Meta accounts.

Our practice operates a phone system for calls. Conversations through this channel may be answered or handled by an automated AI virtual assistant in addition to our staff. Calls may be recorded and summarized for quality assurance and training purposes. By continuing a call after notice of recording, you consent to that recording.

Chicago Medspa offers two separate optional text messaging use cases. Informational text messages may cover appointment confirmations and reminders, scheduling or rescheduling updates, cancellation notices, and customer care responses. Marketing and promotional text messages may cover offers, events, and practice news. Neither program is used to send treatment, service, clinical, medical, payment, or other PHI details.

If you send a consumer-initiated inbound SMS to Chicago Medspa about a specific inquiry, we may send a direct one-to-one response confined to that inquiry. This direct response never authorizes recurring informational messages or any marketing messages. Recurring informational messages require selection of the separate unchecked informational text checkbox on a Site form. Marketing and promotional messages require selection of the separate unchecked marketing text checkbox. Providing a phone number, visiting the Site, or submitting a form does not by itself enroll you in either program.

Each SMS consent choice is optional, separate from the other choice, and not a condition of purchase or of receiving services. If you opt in, messages may be recurring and may be sent using automated technology where applicable. Message frequency may vary. Message and data rates may apply.

We do not share mobile information, including mobile numbers and text messaging consent, with third parties or affiliates for their own marketing or promotional purposes. We may disclose mobile information to service providers solely to deliver the messages you requested or consented to receive, or when required by law or legal process. We do not sell mobile numbers or text messaging consent.

Reply STOP at any time to opt out of a text messaging program. Reply HELP for help, or contact us at (312) 426-2033 or hello@chicagomedspa.com. An opt-out applies to the text messaging program associated with that message, subject to any confirmation message permitted by applicable rules.

Do not send PHI or other health, clinical, treatment, service, or payment details by text. We do not include those details in SMS copy. Please use the clinic's designated care channels for information related to your care.

When a Site form is used to opt in, the Site submits the selected checkbox, program label, disclosure version, and fixed form source as client-submitted context. Netlify records the form's receipt timestamp. The client-submitted fields and receipt timestamp are not immutable or audit-grade proof of consent. Chicago Medspa will not launch text messaging until an operational process is verified to retain and export the submitted context, phone number, receipt timestamp, and later preference and opt-out records.

We share information only in the following circumstances:

• •Service providers. We share information with vendors who perform services on our behalf, including our third-party scheduling platform, communications providers (chat, phone, and text services), website hosting, and the analytics and advertising providers described in Section 5. These providers are permitted to use the information only to perform services for us.
• •Legal requirements. We may disclose information when required by law, regulation, subpoena, or court order, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• •Business transfers. If we are involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to reasonable confidentiality protections.

We do not sell personal information. Some state laws treat the use of targeted-advertising cookies as "sharing" or "targeted advertising." If you prefer not to participate, you may opt out through your browser's cookie controls or by emailing us at hello@chicagomedspa.com, and we will honor your request as required by applicable law.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy — including responding to inquiries and maintaining our relationship with you — and as needed to comply with legal obligations, resolve disputes, and enforce our agreements. The retention period for a given category of information depends on factors such as the nature of the information, why it was collected, whether an ongoing relationship exists, and any legal or regulatory requirements that apply to it. For example, records of an inquiry may be kept while we are corresponding with you and for a reasonable period afterward, while analytics data is retained according to the settings of the analytics tools described in Section 5.

When information is no longer needed, we delete it or de-identify it in accordance with our retention practices and applicable law.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or method of electronic storage is completely reliable, and we cannot promise absolute protection. Please use judgment about the information you choose to submit through the Site.

Our services are intended for adults 18 years of age and older, and the Site is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information through the Site, please contact us at hello@chicagomedspa.com and we will delete it.

Depending on where you live, US state privacy laws may give you rights with respect to your personal information, which can include the right to know what personal information we have collected about you; the right to access a copy of that information; the right to correct inaccurate information; the right to request deletion; and the right to opt out of targeted advertising.

To exercise any of these rights, email us at hello@chicagomedspa.com with the words "Privacy Request" in the subject line and a description of your request. To protect your information, we may need to verify your identity before acting on a request — for example, by matching the details of your request against information we already hold. Where applicable law permits, you may also designate an authorized agent to submit a request on your behalf; we may require proof of the agent's authority and verification of your identity.

We will respond within the time required by applicable law, and we will not discriminate against you for exercising your privacy rights. If we decline all or part of a request, applicable law may give you the right to appeal our decision; instructions for doing so will be included in our response. These rights vary by state, and some may not apply to you depending on where you live and how the law defines covered businesses and covered information.

Some browsers offer a "Do Not Track" (DNT) signal. Because no uniform standard for recognizing and honoring DNT signals has been adopted, the Site does not currently respond to DNT browser signals. You can still manage tracking through the cookie and advertising controls described in Section 5.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will revise the "Last updated" date at the top of this page, and the updated policy will apply to your use of the Site from that date forward. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Chicago Medspa LLC
30 N Michigan Ave, Suite 1220
Chicago, IL 60602
Email: hello@chicagomedspa.com
Phone: (312) 426-2033
Website: https://chicagomedspa.com