Privacy Policy

Introduction

Eunoia Medi Spa (“Eunoia,” “we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book appointments, or interact with our services at our Salinas and Morgan Hill, California locations.

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or services.

Information We Collect

We may collect the following categories of personal information:

• Contact information — name, email address, phone number, and mailing address
• Health and treatment information — medical history, treatment preferences, and consultation notes relevant to the services you receive
• Appointment data — booking history, upcoming appointments, and service records
• Payment information — billing details processed securely through our third-party payment processors; we do not store full card numbers
• Website usage data — pages visited, time on site, referral source, and device/browser information collected via analytics tools
• Communications — messages, inquiries, and feedback you send us via email, SMS, or contact forms

How We Use Your Information

We use the information we collect to:

• Schedule, confirm, and manage your appointments
• Provide and improve our medical spa services
• Process payments and send receipts
• Respond to your questions and support requests
• Send appointment reminders and follow-up care instructions
• Comply with applicable legal and regulatory obligations
• Analyze website usage to improve our online experience

Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service providers — trusted third parties who assist us in operating our website, booking system, payment processing, and communications (e.g., Aesthetic Record, CareCredit). These parties are contractually obligated to protect your information.
• Healthcare partners — as necessary to coordinate your care, with your consent
• Legal authorities — when required by law, court order, or to protect the rights and safety of Eunoia, our staff, or others

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, loss, or misuse. However, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to contact us promptly if you believe your information has been compromised.

Health Information (HIPAA)

To the extent Eunoia Medi Spa qualifies as a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA), we will handle your protected health information (PHI) in accordance with applicable HIPAA requirements. A separate Notice of Privacy Practices governing your medical information is available at our clinic locations.

Cookies and Analytics

Our website may use cookies and similar tracking technologies to enhance your browsing experience and analyze site traffic. You can control cookies through your browser settings. Disabling cookies may affect certain website functionality.

Your Rights (California Residents)

As a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information (subject to certain exceptions)
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To submit a CCPA request, contact us at the information below.

Third-Party Links

Our website may contain links to third-party websites (such as CareCredit or our booking platform). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

Children’s Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.