Privacy policy

NOTICE OF PRIVACY PRACTICES (General)

Effective Date: 04/15/2023

Introduction

Avalon Aesthetics and Wellness is committed to protecting your privacy. This Notice of Privacy Practices ("Notice") explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.avalonaestheticsandwellness.com. Please read this Notice carefully to understand our practices regarding your information.

Information We Collect

We may collect the following types of information from you:

Personal Information: Identifiable information such as your name, email address, phone number, mailing address, or any other details you provide to us when you fill out forms, register for an account, or make a purchase.
Non-Personal Information: Information that cannot be used to personally identify you, such as browser type, device information, IP address, and usage data.
Cookies and Tracking Data: We use cookies, web beacons, and other tracking technologies to enhance your experience and collect data on your use of our Site.

How We Use Your Information

We use the information we collect for the following purposes:

To Provide Services: To process orders, deliver services, and communicate with you about your account or inquiries.
Improve User Experience: To analyze usage data and improve our website, services, and user experience.
Marketing: With your consent, we may use your information to send you promotional materials, newsletters, or special offers.
Legal Compliance: To comply with legal obligations or respond to lawful requests by public authorities.

How We Share Your Information

We may share your information with:

Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer support.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests from governmental authorities.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

Access: You may request access to the personal information we hold about you.
Correction: You may request corrections to any inaccuracies in your personal information.
Deletion: You may request the deletion of your personal information, subject to legal retention obligations.
Opt-Out of Marketing: You can opt-out of receiving promotional communications at any time by following the instructions in those communications.

Patients have certain rights to privacy regarding your protected health information (PHI). These rights are given under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). By working with Avalon Aesthetics and Wellness, you understand that you authorize the use and disclosure of your protected health information to carry out:

- Treatment (including direct or indirect treatment by other healthcare providers involved in my treatment);

- Obtaining authorization and/or payment from third party payers (e.g. my insurance company);

- The day-to-day healthcare operations of your practice.

Security of Your Information

We implement appropriate technical and organizational measures to protect the security of your personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Retention of Data

We will retain your personal information only as long as necessary to fulfill the purposes outlined in this Notice, or as required by law.

Children's Privacy

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that we have collected information from a child, please contact us so that we can remove it.

Changes to This Notice

We may update this Notice from time to time to reflect changes in our practices, legal obligations, or for other operational reasons. The updated version will be posted on our Site with the "Effective Date" at the top of the page.

If you have any questions or concerns about this Notice or how we handle your personal information, please contact us at:

Email: info@avalonaestheticsandwellness.com
Address: P.O. Box 1065, Santa Margarita, California 93453
Phone: 805-242-2667

California Consumer Privacy Act (CCPA) Compliance Notice

Effective Date: 04/15/2023

This notice is provided pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), and it applies solely to visitors, users, and others who reside in the State of California ("consumers" or "you"). Avalon Aesthetics and Wellness is committed to protecting your privacy and ensuring that you understand your rights under the CCPA.

1. Information We Collect

We may collect the following categories of personal information:

Identifiers: Name, address, email address, phone number, IP address, or other unique identifiers.
Commercial Information: Records of products or services purchased, obtained, or considered, or other purchasing histories.
Internet or Other Electronic Network Activity Information: Browsing history, search history, and interactions with our website.
Geolocation Data: Physical location or movements.
Professional or Employment-Related Information: Job title, company name, or professional experience (if provided).
Inferences Drawn from Other Personal Information: Profiling related to preferences, characteristics, and behavior.

2. Sources of Information

We collect personal information from the following sources:

Directly from You: Information you provide when registering, making a purchase, or contacting us.
Indirectly from You: Information collected automatically as you interact with our website, such as via cookies, usage data, and IP addresses.
From Third Parties: Information from service providers or third-party partners, including marketing and analytics services.

3. How We Use Personal Information

We may use or disclose personal information for the following purposes:

To provide and improve our products and services.
To process transactions and communicate with you regarding orders or customer service inquiries.
To personalize your experience and deliver targeted advertising or promotions.
To comply with legal requirements or in response to legal processes.
For internal business purposes, such as data analysis, auditing, and research.

4. Your Rights Under the CCPA

As a California resident, you have the following rights regarding your personal information:

A. Right to Know and Access

You have the right to request that we disclose the following information:

The categories of personal information we have collected about you.
The specific pieces of personal information we have collected.
The categories of sources from which personal information is collected.

GDPR Compliance Notice

Effective Date: 04/15/2023

Avalon Aesthetics and Wellness ("we," "our," or "us") is committed to complying with the General Data Protection Regulation (GDPR) and ensuring the protection of personal data of individuals ("data subjects") within the European Union (EU) and European Economic Area (EEA). This GDPR Compliance Notice explains how we collect, use, disclose, and protect personal data, and outlines your rights as a data subject under GDPR.

1. Data Controller Contact Information

For the purposes of the GDPR, [Website Name] is the data controller of your personal information. If you have any questions or concerns regarding the processing of your personal data, please contact us at:

Email: [Insert Email Address]
Address: [Insert Address]
Phone: [Insert Phone Number]

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identification Data: Name, email address, phone number, mailing address.
Account Data: Username, password, account preferences.
Transaction Data: Payment information, purchase history.
Technical Data: IP address, browser type, device information, and usage data.
Marketing Data: Your preferences in receiving marketing communications and your communication preferences.

3. Purposes for Processing Personal Data

We process your personal data for the following purposes:

To Fulfill Contracts: To provide services, process payments, and fulfill any other contractual obligations.
To Comply with Legal Obligations: To comply with our legal obligations, such as tax and accounting regulations.
Legitimate Interests: To enhance user experience, improve our services, and analyze usage data.
Consent: With your consent, we process your data for marketing and other purposes.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

Consent: You have given clear consent for us to process your data for specific purposes.
Contract: Processing is necessary for the performance of a contract with you.
Legal Obligation: We are required to process your data to comply with the law.
Legitimate Interest: Processing is necessary for our legitimate interests (e.g., improving services, marketing) as long as these interests are not overridden by your data protection rights.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of complying with legal, accounting, or reporting requirements. We may retain your data for longer if required by law.

6. Your GDPR Rights

As a data subject, you have the following rights under GDPR:

Right to Access: You have the right to request access to your personal data that we hold about you.
Right to Rectification: You can request corrections to inaccurate or incomplete personal data.
Right to Erasure (Right to Be Forgotten): You have the right to request that we delete your personal data, subject to certain exceptions.
Right to Restriction of Processing: You can request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to Object: You have the right to object to the processing of your personal data for marketing purposes or based on our legitimate interests.
Right to Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact us at [Insert Email Address].

7. Data Transfers

We may transfer your personal data to third parties located outside the EU/EEA for processing. In such cases, we ensure that appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules, to ensure that your personal data is protected in accordance with GDPR standards.

8. Data Security

We take appropriate technical and organizational measures to ensure the security of your personal data. However, no method of data transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Third-Party Data Sharing

We may share your personal data with third-party service providers for the purposes of operating our website, processing transactions, and providing services. These third parties are required to ensure that your personal data is protected and only processed for specified purposes.

10. Automated Decision-Making

We do not engage in automated decision-making or profiling based on your personal data.

11. Complaints

If you believe that we have violated your data protection rights, you have the right to lodge a complaint with a supervisory authority in the EU or EEA where you reside, work, or where the alleged violation occurred.

12. Changes to This Notice

We may update this GDPR Compliance Notice from time to time in response to changing legal, technical, or business developments. We will post any changes on our website with a new effective date.