Privacy Policy

1. Information We Collect

Personal Information You Provide

When you use our website, contact us, or enroll in our services, we may collect:

• ✦Full name, email address, phone number, and mailing address
• ✦Date of birth and gender
• ✦Health and wellness information you voluntarily provide (e.g., quiz responses, consultation notes)
• ✦Payment information (processed securely through our payment processors — we do not store full card numbers)
• ✦Communications you send to us via our contact form or email

Automatically Collected Information

When you visit our website, we may automatically collect:

• ✦IP address, browser type, and device information
• ✦Pages visited, time spent, and referring URLs
• ✦Cookies and similar tracking technologies (see Section 7)

2. How We Use Your Information

We use the information we collect to:

• ✦Provide, schedule, and manage clinical services and consultations
• ✦Respond to your inquiries and communicate with you about your care
• ✦Process payments and manage your account
• ✦Administer our Rewards loyalty program
• ✦Send appointment reminders, clinical updates, and marketing communications (with your consent)
• ✦Improve our website, services, and patient experience
• ✦Comply with applicable legal and regulatory obligations

3. HIPAA Notice

To the extent that Tria Aesthetics & Wellness is a "covered entity" under the Health Insurance Portability and Accountability Act (HIPAA), we handle your Protected Health Information (PHI) in accordance with our HIPAA Notice of Privacy Practices, which is provided to you at the time of your first visit and available upon request.

Health information collected through our website (e.g., quiz responses) is treated as sensitive and is not sold or disclosed to third parties for marketing purposes without your explicit written authorization.

4. How We Share Your Information

We do not sell your personal information. We may share your information in limited circumstances:

• ✦Service Providers: Third-party vendors who assist us in operating our website and business (e.g., booking systems, payment processors, email platforms), under confidentiality agreements
• ✦Healthcare Coordination: With other healthcare providers involved in your care, as permitted or required by applicable law
• ✦Legal Compliance: When required by law, subpoena, or to protect the rights, property, or safety of Tria, our staff, or clients
• ✦Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, with notice to you

5. Data Security

We implement industry-standard administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, access controls, and secure server infrastructure.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Medical records are retained in accordance with Illinois state law (minimum 10 years for adults). Loyalty program data is retained for the duration of your membership plus 2 years.

You may request deletion of non-medical personal data by contacting us (see Section 10). Note that we may be required to retain certain information despite a deletion request.

7. Cookies & Tracking

Our website uses cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts. Types of cookies we use:

• ✦Essential Cookies: Required for the website to function properly. Cannot be disabled.
• ✦Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• ✦Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

8. Third-Party Links

Our website may contain links to third-party websites (e.g., our booking platform, Instagram). We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our services are intended for adults 18 years of age and older. We do not knowingly collect personal information from individuals under 18 without verifiable parental consent. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete it.

10. Your Rights

Depending on your location and applicable law, you may have the right to:

• ✦Access the personal information we hold about you
• ✦Correct inaccurate or incomplete information
• ✦Request deletion of your personal information (subject to retention requirements)
• ✦Opt out of marketing communications at any time (via unsubscribe link or contacting us)
• ✦Request a copy of your information in a portable format

To exercise any of these rights, please contact us using the information in Section 11.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your information, please contact us:

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. We encourage you to review this policy periodically. Your continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.