Privacy Policy

Introduction

Aura Aesthetica ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, schedule a consultation, or otherwise interact with our practice.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our website or submit information to us.

Information We Collect

Information You Provide Directly

When you book a consultation, fill out a form, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Procedure(s) of interest
• Date of birth (where applicable)
• Mailing address or ZIP code
• Any messages or details you choose to share with us

Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages viewed, time spent on pages, and click activity
• Referring website or source (including UTM parameters)
• Cookies, pixel tags, and similar tracking technologies

Protected Health Information (PHI)

If you become a patient of our practice, any health information you share during the course of treatment is governed by the Health Insurance Portability and Accountability Act (HIPAA) and our separate Notice of Privacy Practices, which is provided to all patients. This Privacy Policy applies to website and marketing data; PHI collected during clinical care is handled separately under HIPAA.

How We Use Your Information

We use the information we collect to:

• Schedule, confirm, and manage consultations and appointments
• Respond to inquiries and provide customer support
• Send appointment reminders, follow-ups, and practice updates
• Improve our website, services, and patient experience
• Measure the effectiveness of our marketing campaigns
• Comply with legal obligations and protect our rights
• Prevent fraud and ensure the security of our systems

Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to understand how visitors interact with our website and to deliver relevant advertising. These include:

• Google Tag Manager and Google Analytics — to measure site traffic and user behavior
• Meta (Facebook) Pixel and Conversions API — to measure ad effectiveness and deliver targeted advertising on Facebook and Instagram
• Functional cookies — to remember your preferences and improve site performance

For advertising measurement, certain personal information you submit through our forms (such as email, phone number, and name) may be hashed using SHA-256 and shared with advertising platforms in a privacy-protective format. This allows us to measure conversions without sharing your raw personal data with those platforms.

You can control cookies through your browser settings and opt out of certain advertising cookies through industry tools such as the Network Advertising Initiative and the Digital Advertising Alliance.

How We Share Your Information

We do not sell your personal information. We may share information with:

• Service providers who help us operate our practice and website, including scheduling platforms, customer relationship management systems, hosting providers, email and SMS services, and analytics vendors. These providers are contractually obligated to protect your information.
• Advertising partners such as Meta and Google, in the limited and hashed form described above, to measure and optimize our marketing.
• Legal and regulatory authorities when required by law, subpoena, or to protect our legal rights.
• Successors in the event of a merger, acquisition, or sale of practice assets, subject to standard confidentiality protections.

SMS and Text Message Communications

If you provide your phone number and consent to receive text messages, we may send you appointment reminders, follow-ups, and promotional information. Message and data rates may apply. You can opt out at any time by replying STOP to any message. For help, reply HELP or contact us directly.

We do not share mobile opt-in consent or phone numbers collected for SMS purposes with third parties or affiliates for their marketing purposes.

Data Retention

We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Patient medical records are retained in accordance with California state law and HIPAA requirements. Marketing and website data is retained only as long as needed for the purposes described in this policy.

Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose about you
• Request deletion of your personal information
• Request correction of inaccurate personal information
• Opt out of the sale or sharing of your personal information (we do not sell personal information)
• Limit the use of sensitive personal information
• Be free from discrimination for exercising your privacy rights

To exercise these rights, contact us at appointments@auraaesthetica.com or 310-773-4596. We will verify your identity before processing your request.

All Users

You may request to access, update, or delete the personal information we hold about you by contacting us using the information below. We will respond within the timeframe required by applicable law.

Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Third-Party Links

Our website may contain links to third-party websites or embedded content (such as podcast players, video platforms, or social media). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing any information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: