Privacy Policy

Chicago Medspa LLC, an Illinois limited liability company ("Chicago Medspa," "we," "us," or "our"), operates a physician-supervised medical aesthetics practice in Chicago, Illinois, and the website located at https://chicagomedspa.com (the "Site"). We respect your privacy and are committed to handling your information responsibly and transparently.

This Privacy Policy describes the information we collect from visitors to the Site and from people who contact us through the Site — whether by web form, live chat, phone, or text message — and explains how we use it, when we share it, and the choices available to you. It applies to the Site and to those website-based communications; it does not apply to information collected offline or through other channels, except as described below.

By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the Site.

Information you provide to us. When you submit an inquiry, request an appointment, start a chat, call us, or text us, we collect the information you choose to share. This may include your name, email address, phone number, and the details of your inquiry or appointment request — such as the services you are interested in, your preferred dates and times, and any questions you ask. It also includes the content of chat conversations and phone calls with our practice, and any other information you voluntarily provide.

Information from calls, chats, and text messages. When you communicate with us by phone, chat, or text, we also collect information generated by those channels, such as the phone number you call or text from, the date, time, and duration of the communication, chat transcripts, and — where recording applies as described in Section 6 — recordings and summaries of the conversation.

Information collected automatically. When you visit the Site, we and our service providers automatically collect certain technical information, including your IP address, device type, browser type and version, operating system, referring website, the pages you view, the dates and times of your visits, and how you interact with the Site. This information is collected through cookies, pixels, tags, and similar technologies, as described in Section 5 below. Some of this information may allow us to estimate your approximate geographic location.

We do not request or collect payment card information through the Site. Payment for services is handled at the clinic.

This Privacy Policy governs the website only. Clinical records and patient files are maintained separately by the practice and are governed by the Notice of Privacy Practices provided to patients at the clinic, not by this policy.

Please do not submit detailed medical information — such as health history, medications, diagnoses, or treatment records — through website forms or chat. Website forms and chat are intended for general inquiries and scheduling only. Health information relevant to your care should be shared directly with your provider at the clinic, where it is handled under the practice's clinical privacy safeguards.

We use the information described above to:

• •Respond to your inquiries, questions, and requests;
• •Schedule, confirm, reschedule, and follow up on appointments;
• •Provide, operate, maintain, and improve the Site and our services;
• •Send marketing and promotional communications where you have consented to receive them, and measure how our marketing performs;
• •Protect the security and integrity of the Site, and detect and prevent fraud, abuse, and unauthorized activity;
• •Comply with applicable laws, regulations, and legal processes, and enforce our terms and policies.

We use cookies, pixels, and similar technologies on the Site, deployed and managed through Google Tag Manager. These technologies fall into three general categories: strictly necessary technologies that make the Site work; analytics technologies that help us understand how the Site is used and how visitors find us; and advertising technologies that help us measure our marketing and reach people who may be interested in our services. Specifically, the Site uses:

• •Google Analytics 4 collects usage data — such as pages viewed, session duration, and general location — to help us understand Site traffic and improve the visitor experience.
• •Google Ads supports our advertising and conversion measurement, including call tracking. If you arrive at the Site from one of our advertisements, you may see a dynamically displayed tracking phone number in place of our standard number, and calls placed to that number may be measured and attributed to the advertisement that brought you here.
• •Meta Pixel helps us measure the effectiveness of advertising on Meta platforms and may be used to show you relevant advertising there.
• •Metricool tags support our social-media management and help us understand engagement with our social content.

Most web browsers let you control cookies through their settings, including blocking or deleting them. If you disable cookies, some features of the Site may not function as intended. You can also use the opt-out tools offered by the providers above, such as browser-based advertising controls and the ad-preference settings within Google and Meta accounts.

The Site offers a live-chat widget, and our practice operates a phone system for calls and text messages. Conversations through these channels may be answered or handled by an automated AI virtual assistant in addition to our staff. Calls and chat conversations may be recorded and summarized for quality assurance and training purposes. By continuing a call or chat after notice of recording, you consent to that recording.

If you opt in to receive text messages from us, message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message, and you can get assistance by replying HELP. Consent to receive text messages is not a condition of receiving any service.

We share information only in the following circumstances:

• •Service providers. We share information with vendors who perform services on our behalf, including our third-party scheduling platform, communications providers (chat, phone, and text services), website hosting, and the analytics and advertising providers described in Section 5. These providers are permitted to use the information only to perform services for us.
• •Legal requirements. We may disclose information when required by law, regulation, subpoena, or court order, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• •Business transfers. If we are involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to reasonable confidentiality protections.

We do not sell personal information. Some state laws treat the use of targeted-advertising cookies as "sharing" or "targeted advertising." If you prefer not to participate, you may opt out through your browser's cookie controls or by emailing us at hello@chicagomedspa.com, and we will honor your request as required by applicable law.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy — including responding to inquiries and maintaining our relationship with you — and as needed to comply with legal obligations, resolve disputes, and enforce our agreements. The retention period for a given category of information depends on factors such as the nature of the information, why it was collected, whether an ongoing relationship exists, and any legal or regulatory requirements that apply to it. For example, records of an inquiry may be kept while we are corresponding with you and for a reasonable period afterward, while analytics data is retained according to the settings of the analytics tools described in Section 5.

When information is no longer needed, we delete it or de-identify it in accordance with our retention practices and applicable law.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or method of electronic storage is completely reliable, and we cannot promise absolute protection. Please use judgment about the information you choose to submit through the Site.

Our services are intended for adults 18 years of age and older, and the Site is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information through the Site, please contact us at hello@chicagomedspa.com and we will delete it.

Depending on where you live, US state privacy laws may give you rights with respect to your personal information, which can include the right to know what personal information we have collected about you; the right to access a copy of that information; the right to correct inaccurate information; the right to request deletion; and the right to opt out of targeted advertising.

To exercise any of these rights, email us at hello@chicagomedspa.com with the words "Privacy Request" in the subject line and a description of your request. To protect your information, we may need to verify your identity before acting on a request — for example, by matching the details of your request against information we already hold. Where applicable law permits, you may also designate an authorized agent to submit a request on your behalf; we may require proof of the agent's authority and verification of your identity.

We will respond within the time required by applicable law, and we will not discriminate against you for exercising your privacy rights. If we decline all or part of a request, applicable law may give you the right to appeal our decision; instructions for doing so will be included in our response. These rights vary by state, and some may not apply to you depending on where you live and how the law defines covered businesses and covered information.

Some browsers offer a "Do Not Track" (DNT) signal. Because no uniform standard for recognizing and honoring DNT signals has been adopted, the Site does not currently respond to DNT browser signals. You can still manage tracking through the cookie and advertising controls described in Section 5.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will revise the "Last updated" date at the top of this page, and the updated policy will apply to your use of the Site from that date forward. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Chicago Medspa LLC
30 N Michigan Ave, Suite 1220
Chicago, IL 60602
Email: hello@chicagomedspa.com
Phone: (312) 426-2033
Website: https://chicagomedspa.com