Last updated: November 9, 2025
Who We Are
Skin Savvy Med Spa (“we,” “us,” “our”) provides aesthetic and wellness services in Massachusetts.
Contact: 508-440-5542 · darcey@skinsavvymedspa.com · 36–38 Mechanic St, Foxboro, MA 02035
Scope
This policy explains how we collect, use, disclose, and protect personal information (“Personal Information”) when you visit skinsavvymedspa.com, request an appointment, or receive services. This policy is separate from our HIPAA Notice (governs PHI). If you are a patient, PHI handling is described in the HIPAA Notice.
Information We Collect
- You provide: name, contact details, appointment details, preferences, messages, forms, consents, testimonials.
- From services/plugins: IP address, device/OS/browser, pages viewed, referral URLs, interactions (via cookies and similar technologies).
- From vendors: booking and charting data via EMS Aesthetic Record (subject to HIPAA when PHI), payment processors (limited billing details), marketing tools (aggregate analytics).
- Sensitive data: We do not intentionally collect Social Security numbers or precise geolocation through the website.
How We Use Information
- Provide and improve services, schedule appointments, communicate with you, personalize the site, ensure security/fraud prevention, maintain compliance, and meet legal obligations.
- Analytics & performance: We use Google Analytics to understand site usage and improve performance (see Cookies Policy).
- Marketing communications: With your consent or as permitted by law; you may opt out at any time.
Disclosing Information
- Service providers / processors: e.g., EMS Aesthetic Record (EMR), website hosting, email, payment processors, analytics (Google), and WordPress plugins such as Elementor and Rank Math SEO that may process technical data to provide functionality.
- Legal/compliance: to comply with law, protect rights, or respond to lawful requests.
- Business transfers: in connection with organizational changes.
We do not sell personal information.
Data Breach Notification
If a breach involves Massachusetts residents’ “personal information,” we will provide notices consistent with M.G.L. c. 93H (including required notice to the Attorney General and the Office of Consumer Affairs and Business Regulation) as expeditiously as possible and without unreasonable delay, and no later than timelines set by law.
Your Choices
- Marketing: unsubscribe links or email darcey@skinsavvymedspa.com.
- Cookies/Tracking: see Cookies Policy for consent/controls.
- Access/Correction: contact us to request access or correction of your information.
Children’s Privacy
Our site is not intended for children under 18, and we do not knowingly collect data from them online.
Retention
We keep personal information only as long as needed for the purposes described or as required by law. Medical record retention is governed by our HIPAA Notice.
Changes
We may update this policy periodically. Material changes will be posted with a new “Last updated” date.