Privacy Policy

MGP Aesthetics (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at mgpaesthetics.com, book an appointment, or communicate with us.

1. Information We Collect

We may collect the following types of information:

2. How We Use Your Information

We use the information we collect to:

• Schedule and manage your appointments
• Provide safe and effective aesthetic treatments
• Maintain accurate medical records in our HIPAA-compliant charting system
• Communicate with you about your treatments and inquiries
• Send appointment reminders and follow-up messages via email or SMS (with your consent)
• Send promotional offers and updates (you may opt out at any time)
• Improve our website and services
• Comply with legal and regulatory obligations

3. SMS & Text Message Communications

If you provide your mobile phone number, you may receive text messages from us regarding appointments and promotions. Message and data rates may apply. You can opt out at any time by replying STOP to any message. For help, reply HELP or email us at [email protected].

We do not sell or share your phone number with third parties for their marketing purposes.

4. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist us in operating our website and booking system (e.g., Portrait Care), subject to confidentiality agreements and, where applicable, HIPAA Business Associate Agreements (BAAs).
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand how visitors use our Site. You can control cookie settings through your browser. Disabling cookies may affect certain features of the Site. We use Google Analytics to understand website usage patterns; this data is aggregated and anonymized.

6. Data Security

We implement administrative, technical, and physical safeguards to protect your personal information and Protected Health Information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• HIPAA-compliant electronic health record (EHR) and charting system
• Encrypted data transmission and secure storage
• Access controls limiting PHI to authorized personnel only
• Regular review of security practices and protocols

No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. HIPAA Compliance & Protected Health Information

As a medical aesthetics practice operating under the supervision of a licensed Medical Director, we collect and maintain Protected Health Information (PHI) as part of providing treatment. Each client is assigned a unique medical record number, and all clinical records are maintained in a HIPAA-compliant charting system.

How We Use and Disclose PHI

We may use or disclose your PHI for the following purposes without your written authorization:

• Treatment: To provide, coordinate, and manage your aesthetic care and related services.
• Payment: To obtain payment for services provided to you.
• Healthcare Operations: For quality assessment, staff training, and practice management.
• As Required by Law: When mandated by federal, state, or local law.

All other uses and disclosures of your PHI require your written authorization. You may revoke any authorization at any time in writing.

Your Rights Under HIPAA

As a client, you have the following rights regarding your PHI:

• Right to Access: You may request a copy of your medical records.
• Right to Amend: You may request corrections to your health information if you believe it is inaccurate or incomplete.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI.
• Right to Confidential Communications: You may request that we communicate with you about your health information in a specific way or at a specific location.
• Right to a Paper Copy: You may request a paper copy of this notice at any time.

To exercise any of these rights, please contact us at [email protected] or in person at our office. We will respond to your request within 30 days as required by law.

8. Your Rights (California Residents)

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [email protected].

9. Third-Party Links

Our Site may contain links to third-party websites (such as our booking platform or social media profiles). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this Policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our HIPAA practices, please reach out: