PRIVACY POLICY

Effective Date: August 24, 2026

27 Skin Studio, A Professional Corporation, and 27 Skin Studio, LLC, collectively doing business as “27 Skin Studio,” “we,” “our,” or “us,” respect your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through www.27skinstudio.com, our booking and communication systems, and related services.

Information We Collect

Depending on how you interact with us, we may collect:

  • Name, email address, telephone number, and contact information;

  • Appointment requests, booking details, and communication preferences;

  • Billing and payment-related information;

  • Information submitted through contact forms, email, telephone, or text messages;

  • Information voluntarily provided regarding accessibility or accommodation needs;

  • Website usage, device, browser, and technical information;

  • Health-related information voluntarily provided in connection with treatment; and

  • Photographs, testimonials, or other content you voluntarily provide.

Please do not submit emergency requests or unnecessary medical information through Website contact forms, email, or text messages.

When you request or receive services, we may collect information reasonably necessary to evaluate, schedule, provide, document, and follow up regarding those services. This may include medical history, allergies, medications, treatment history, photographs, and other information relevant to your care. Additional privacy notices may apply to information maintained in separate clinical or practice-management systems.

How We Use Personal Information

We may use personal information to:

  • Respond to questions and appointment requests;

  • Schedule, confirm, reschedule, and manage appointments;

  • Provide and coordinate requested services;

  • Communicate about appointments, services, policies, and account information;

  • Process payments and transactions;

  • Send appointment-related communications;

  • Send marketing communications where permitted by law and where required consent has been obtained;

  • Improve Website content, accessibility, functionality, and user experience;

  • Analyze Website traffic and communication performance;

  • Maintain business, administrative, financial, and clinical records;

  • Prevent fraud, misuse, unauthorized access, and security incidents;

  • Comply with legal, regulatory, professional, and safety obligations;

  • Establish, exercise, or defend legal claims; and

  • Fulfill other purposes disclosed when information is collected or otherwise permitted by law.

Third-Party Service Providers

We use selected third-party service providers to support our business operations. These providers may process personal information on our behalf and are expected to use it only for the services they provide.

Moxie Suite

We use Moxie Suite for appointment scheduling, booking management, appointment-related information, and certain administrative functions. Information submitted through the booking process may be processed under Moxie Suite’s applicable privacy policy and terms.

Stripe

We use Stripe to process payments. Stripe may process payment-card information, billing information, transaction details, and fraud-prevention information. 27 Skin Studio does not generally receive or store complete payment-card numbers.

Twilio

We use Twilio to deliver appointment-related and, where permitted, marketing text messages. Information processed may include your name, telephone number, message content, appointment details, communication preferences, and opt-out requests.

Message and data rates may apply. Message frequency may vary. Reply STOP to opt out. Consent to receive marketing text messages is not a condition of purchasing services.

Quo

We use Quo for business telephone calls, text-message communications, voicemail, and related communication-management functions. Information processed may include your name, telephone number, call or message content, voicemail, appointment-related communications, and communication preferences.

GoHighLevel

We use GoHighLevel for Website analytics, lead management, communication management, customer relationship management, and related business operations. Information processed may include contact information, appointment inquiries, Website interactions, communication history, and marketing preferences.

We do not intentionally use GoHighLevel to store complete medical records or detailed clinical treatment documentation unless specifically authorized and configured for that purpose.

Cookies and Similar Technologies

The Website and our service providers may use cookies, pixels, tags, analytics tools, and similar technologies to:

  • Operate and secure the Website;

  • Remember preferences;

  • Measure Website traffic and performance;

  • Understand how visitors use the Website;

  • Track form submissions and referral sources;

  • Improve communications and marketing; and

  • Detect fraud or misuse.

You may be able to control cookies through your browser settings. Disabling certain cookies may affect Website functionality.

How We Share Personal Information

We may disclose personal information to:

  • Moxie Suite, Stripe, Twilio, Quo, GoHighLevel, and other service providers;

  • Healthcare professionals or clinical personnel when reasonably necessary, to provide or coordinate services;

  • Attorneys, accountants, insurers, consultants, and other professional advisors;

  • Government agencies, regulators, courts, or law-enforcement authorities, when required or permitted by law;

  • Parties involved in a merger, acquisition, financing, reorganization, sale, or transfer of all or part of our business; and

  • Other parties at your direction or with your consent.

We do not disclose personal information to third parties for their independent use except as described in this Privacy Policy, with your consent, or as permitted or required by law.

Sensitive Personal Information

Some information we collect may be considered sensitive personal information under applicable law, including health-related information, financial information, precise geolocation, or information voluntarily provided regarding treatment needs or accessibility.

We use sensitive personal information only as reasonably necessary to provide requested services, schedule and manage appointments, communicate with you, protect safety, maintain appropriate records, comply with legal obligations, prevent fraud or misuse, and fulfill other purposes permitted by law.

We do not use sensitive personal information to infer characteristics about you beyond what is reasonably necessary for these purposes.

Communications

If you provide your telephone number or email address, we may contact you regarding appointment requests, services, account information, or other communications related to your interaction with us.

Marketing communications will be sent only as permitted by applicable law and may require separate consent. You may unsubscribe from marketing emails by using the unsubscribe link included in the message.

You may continue to receive non-marketing communications reasonably necessary to manage an appointment or provide a requested service.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide services, maintain business and clinical records, comply with legal and professional obligations, resolve disputes, enforce agreements, and protect our rights.

Retention periods vary depending on the nature of the information, the purpose for which it was collected, and applicable legal requirements.

Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, or disclosure.

No method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of personal information transmitted through the Internet or stored electronically.

Third-Party Websites and Services

The Website may contain links to third-party websites, booking systems, payment processors, communication platforms, social media platforms, or other services.

We are not responsible for the privacy practices, content, security, or policies of third parties. Your use of third-party services is subject to their applicable terms and privacy policies.

Children’s Privacy

The Website and our services are intended for adults. We do not knowingly collect personal information from children through the Website.

If you believe that a child has submitted personal information to us, please contact us so that we may review and delete the information when appropriate.

California Privacy Rights

California residents may have rights under the California Consumer Privacy Act and other applicable privacy laws. These rights may include:

  • The right to know what personal information we collect, use, disclose, or sell;

  • The right to request deletion of personal information, subject to legal exceptions;

  • The right to correct inaccurate personal information;

  • The right to opt out of the sale or sharing of personal information, where applicable;

  • The right to limit certain uses and disclosures of sensitive personal information; and

  • The right not to receive discriminatory treatment for exercising applicable privacy rights.

We do not sell personal information for monetary compensation. Certain analytics, advertising, or Website technologies may constitute “sharing” under applicable California law. Where required, you may opt out through available Website controls or by contacting us.

We do not knowingly sell or share the personal information of individuals under 16 years of age.

Exercising California Privacy Rights

To submit a request to know, delete, correct, or otherwise exercise an applicable privacy right, contact us:

Email: info@27skinstudio.com
Phone: 949-421-6427
Mail: 27 Skin Studio, Costa Mesa, California

We may need to verify your identity before completing a request. Some information may be retained when required or permitted for medical, legal, regulatory, security, accounting, or other legitimate purposes.

We will respond to verified requests within the time required by applicable law.

Do Not Track Signals

Because there is not yet a universally accepted standard for responding to browser-based “Do Not Track” signals, the Website may not respond to those signals.

We will honor legally recognized opt-out preference signals when required by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The revised Policy will be posted on this page with a new Effective Date. Your continued use of the Website after an updated Policy is posted indicates acceptance of the revised Policy to the extent permitted by law.

Contact Us

Questions regarding this Privacy Policy or our privacy practices may be directed to:

27 Skin Studio
Costa Mesa, California
Email: info@27skinstudio.com
Phone: 949-421-6427
Website: www.27skinstudio.com