Privacy Policy for Portland Beauty Spa
Last Updated: September 1, 2025
Portland Beauty Spa (“we,” “us,” or “our”) values your privacy and is committed to safeguarding your personal and health-related information. This Privacy Policy explains how we collect, use, and protect your data in compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Oregon Consumer Privacy Act, and other applicable state and federal privacy laws.
By using our website, scheduling a service, or visiting our spa, you consent to the practices described in this Privacy Policy.
1. Information We Collect
We may collect the following types of information from clients and visitors:
Personal Information
Name, address, phone number, email address, date of birth, and emergency contact details.
Health & Treatment Information
Consultation forms, treatment notes, skin history, allergies, before and after photos, and service preferences.
Payment Information
Billing address, payment card data, or other details necessary to process transactions securely.
Digital Data
IP address, browser type, device information, referral links, and cookie data collected through our website.
Appointment Details
Service type, provider name, time, date, and follow-up information.
Marketing Preferences
Your preferences regarding newsletters, text reminders, and promotional messages.
We collect only the information needed to provide personalized spa treatments, maintain accurate records, and enhance your overall client experience.
2. How We Use Your Information
Your information may be used to:
- Provide beauty, wellness, and cosmetic treatments
- Manage appointment bookings and confirmations
- Send reminders, updates, and follow-up instructions
- Process secure payments and maintain billing records
- Comply with legal and regulatory requirements
- Improve our services and website functionality
- Send exclusive offers, newsletters, or spa updates with your consent
- Protect against unauthorized access, fraud, or misuse of our systems
We do not sell or rent your information to third parties.
3. HIPAA & Medical Privacy
Although Portland Beauty Spa is primarily a cosmetic and wellness facility, certain treatments may fall under HIPAA protection if performed by licensed healthcare professionals. In those cases:
- Protected Health Information (PHI) is used only for treatment, payment, or spa operations.
- You have the right to access or request copies of your records.
- Your information will not be shared without written authorization, except where required by law.
- We maintain physical, administrative, and technical safeguards to ensure your information remains secure.
4. Website & Online Privacy
When you visit PortlandBeautySpa.com, we may automatically collect limited data through cookies or similar technologies to improve your browsing experience.
Cookies help us remember preferences and improve functionality.
Analytics tools such as Google Analytics help us understand site traffic and visitor behavior.
Third-Party Links may appear on our site for your convenience, but we are not responsible for their privacy policies.
Online Forms securely transmit any data you provide for appointment booking or inquiries.
You may choose to disable cookies in your browser, but this may affect some website features.
5. Email, SMS & Marketing Communications
By sharing your email or phone number, you consent to receive appointment confirmations, reminders, or limited promotional messages.
You can unsubscribe or opt out at any time by following the instructions in our emails or contacting us directly.
All communications comply with the CAN-SPAM Act and related communication standards.
6. Information Sharing & Disclosure
We may share information only as necessary to deliver safe, effective services:
- With licensed providers or staff directly involved in your treatments
- With secure payment processors or booking systems
- With third-party vendors bound by confidentiality agreements
- When required by law or court order
- During business transfers, mergers, or transitions under the same privacy commitments
We never sell, lease, or trade your data for advertising purposes.
7. Data Security
We take your privacy seriously and protect your data through:
- Encrypted electronic systems for all sensitive records
- Secure payment and booking platforms
- Access controls and staff confidentiality training
- Physical safeguards within our spa locations
- Regular updates to maintain compliance with privacy regulations
While no system is entirely immune to risks, we continually monitor and enhance our protections.
8. Your Rights
You have rights regarding your personal and health information, including:
- Access – Request copies of your records
- Corrections – Request updates to inaccurate details
- Restrictions – Limit how we use or share your information
- Confidential Communications – Request contact through alternate means
- Withdrawal of Consent – Opt out of promotional messages or revoke prior authorizations
- Data Deletion – Request removal of personal data collected through our website or marketing tools
Requests must be made in writing using the contact information below.
9. Retention of Information
We retain personal and treatment records as long as necessary to provide services, comply with legal requirements, and maintain accurate client histories. Once no longer needed, data is securely deleted or destroyed in accordance with Oregon privacy laws and HIPAA standards.
10. Children’s Privacy
Our services and website are intended for adults. We do not knowingly collect personal information from anyone under the age of 13. If a minor receives a service, parental or guardian consent is required.
11. Updates to This Policy
We may update this Privacy Policy as laws or business practices evolve. All updates will appear on this page with a revised “Last Updated” date. Continued use of our website or services constitutes acceptance of any revisions.
12. Contact Information
For privacy questions, requests, or concerns, please contact: