Privacy policy

Last Updated: December 12, 2024

This Privacy Policy explains how NDA Medical Spa (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you interact with us through our Shopify-powered website (ndamedicalspa.myshopify.com) and related services (collectively, the “Services”). This includes when you visit our website, purchase products, use our medical services, or communicate with us.

By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please discontinue your use of the Services.

1. Information We Collect

Information You Provide Directly

We collect personal information you provide when interacting with the Site, including:

• Contact Information: Name, address, phone number, and email.
• Order Information: Billing and shipping details, payment confirmation, and purchase history.
• Account Information: Username, password, and security credentials.
• Health Information: If using our medical services, health details required to provide treatment, governed by HIPAA standards.
• Customer Support: Information you share when contacting us.

Information We Collect Automatically

We may collect certain data through cookies and similar technologies when you interact with the Services, such as:

• Device type, IP address, and browser information.
• Usage patterns, clicks, and page visits.
• Geolocation data based on your IP address.

Information from Third Parties

We may also collect information from:

• Shopify: To power our online store.
• Payment Processors: For billing and transaction information.
• Marketing Partners: For analytics and advertising services.

2. How We Use Your Information

• Provide Services: Process payments, fulfill orders, arrange shipping, and handle returns or exchanges.
• Marketing: Send promotional content and targeted advertisements (with opt-out options).
  • Note: Mobile details or personally identifiable information (PII) provided to us will never be shared with third parties or affiliates for marketing or promotional purposes.
• Improve the Services: Analyze usage trends and optimize functionality.
• Security: Detect and prevent fraud or unauthorized access.
• Compliance: Meet legal and regulatory obligations, including HIPAA for medical services.

3. Cookies and Online Tracking

We use cookies and similar technologies to:

• Enhance site functionality and personalize your experience.
• Conduct analytics to improve performance.
• Provide tailored advertising.

You can manage cookie preferences through your browser settings. For more details, see Shopify’s Cookie Policy.

4. HIPAA Compliance

For users accessing our medical services, we adhere to the Health Insurance Portability and Accountability Act (HIPAA):

• Protected Health Information (PHI): Health details are collected only as necessary for treatment and billing purposes.
• Data Security: PHI is encrypted and safeguarded against unauthorized access.
• Your Rights: You may access, amend, or request the deletion of your PHI by contacting us.

5. Disclosure of Information

We may disclose personal information under the following circumstances:

• Vendors and Service Providers: To fulfill orders, process payments, and provide support services.
• Marketing Partners: For analytics and targeted advertising.
  • Note: Mobile details or personally identifiable information (PII) are never shared with third parties or affiliates for marketing or promotional purposes.
• Legal Requirements: To comply with applicable laws, subpoenas, or regulatory inquiries.
• Business Transactions: In connection with mergers, acquisitions, or bankruptcy proceedings.

We do not sell or share sensitive personal information, including health data, without your consent.

6. Security and Retention

We implement industry-standard security measures to protect your information. However, no system is completely secure.

• Retention: Personal data is retained only as long as necessary to provide services, comply with legal obligations, or resolve disputes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access and Portability: Request access to personal data we hold about you.
• Correction and Deletion: Correct inaccuracies or delete your personal information.
• Marketing Preferences: Opt-out of promotional communications.
• Restriction and Objection: Limit or object to data processing.
• HIPAA-Specific Rights: Access, amend, or request an accounting of disclosures of your PHI.

To exercise your rights, contact us using the information below.

8. Age Restrictions

NJ state law requires patients be 18 years of age or older to receive medical treatments at NDA Medical Spa, unless a parent or guardian provides consent. Children under 18 are not permitted in our office unattended unless a service is being performed. Special services are available for children under the age of 18; please call our concierge for more information.

9. Third-Party Links

Our Site may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites. Please review their privacy policies before sharing any information.

10. International Users

If you access the Site from outside the United States, your data may be transferred and processed in the U.S. or other countries. By using the Site, you consent to such data transfers.

11. SMS Consent

By entering your phone number, you are agreeing to receive text messages from NDA Medical Spa. Message & data rates may apply. Message frequency may vary. Reply HELP for more information. You can reply STOP or UNSUBSCRIBE to opt-out. See our Privacy Policy for additional details.

Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us:

• Email: noelle@ndamedicalspa.com
• Phone: (609) 997-2639
• Address: 701 East Main Street, Suite, Moorestown, NJ 08057