What this site asks for, and what stays off it.

1. Who we are

This website is published by Facework Aesthetics (“we”, “us”), a nurse-led med spa in East Austin, Texas. This policy covers the website only: what you send through it, what it records when you browse, and the choices you have.

Questions about this policy or your information: write to us from the Visit page. Please keep medical details out of your message.

2. Health information stays off this website

This website is not the place for health information, and it does not ask for any. Please don’t send us your medical history, medicines, allergies, photos of your skin or details of a past treatment through the site.

If a message includes medical details anyway, we use them only to answer you and then delete that message. Anything a nurse needs is collected again, properly, at your consultation.

Your medical history, consent forms and treatment photos are collected in person or through the secure intake forms of the practice software we use once you book. They are part of your patient record, which is not part of this website.

3. What the Ask a nurse form collects

The Ask a nurse form on the Visit page asks for four things: your name, an email address to reply to, the area of your face you are curious about and a short message. Nothing else is collected through it.

We use it only to answer you. We don’t add you to a mailing list because you wrote to us, and we never use your message for advertising.

Form submissions are sent through Framer, which hosts this website, to the email inbox of the practice, where only our nursing and front-desk team read them.

4. Booking, deposits and reminders

The Book a consult and Book this buttons open the outside booking tool the practice uses (for example Boulevard, Zenoti or Vagaro). What you type there, including any card details for a deposit and your appointment reminders by text or email, is handled by that provider under its own terms and privacy policy.

The booking tool shares with us what we need to run your appointment. We never see or store your full card number.

5. Visit statistics

The site is built and hosted with Framer, which counts page views, devices, approximate location and referring pages. We see totals only and cannot pick out one visitor. Our hosting provider also keeps short technical logs, such as IP addresses, to keep the site secure and working.

The Cookie Policy explains which cookies and similar tools are involved and how to refuse them.

6. Who else sees it

Service providers that help us run the site and answer you: our website host, our email provider and the booking tool. They handle your information on our instructions or under their own terms, as described above.

Authorities or other parties when the law requires it, or to protect the safety of our patients, our team or the public.

We never sell your personal information, we don’t share it for targeted advertising, and we don’t let advertisers follow you on this site.

7. Patient records and HIPAA

Your patient record is handled separately from this website, under the privacy notice you receive when you become a patient and the medical-records laws that apply to the practice in Texas.

Whether the federal HIPAA rules apply to a med spa depends on how it works, for example whether it bills health insurance electronically. Note for the practice using this template: check your HIPAA and Texas medical-records obligations with a qualified lawyer, including whether your booking, form and email providers need to sign a business associate agreement, before you rely on this page.

8. How long we keep it

An Ask a nurse message that doesn’t lead to an appointment is deleted 12 months after our last reply. Technical logs are kept for a short period, usually less than 90 days.

Patient records are kept for the periods set by the laws and professional rules that apply to the practice, which are longer and separate from this website.

9. Your privacy rights

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to have it corrected or deleted, and to opt out of its sale, targeted advertising or profiling. Texas residents have these rights under the Texas Data Privacy and Security Act where it applies, and several other states, such as California, Washington and Nevada, give extra protection to health-related information.

To make a request, write to us from the Visit page. We may ask you to confirm your identity first, we answer within 45 days, and you can ask us to reconsider if we decline. You will not be treated differently for using your rights.

10. Children

Our treatments are for adults 18 and over, and this website is not meant for children. We do not knowingly collect information from children under 13; if you think a child has written to us, tell us and we will delete the message.

11. Security and changes

We use reasonable measures to protect what you send us. No website or email is completely secure, which is one more reason to keep medical details out of the form.

When we change a tool or the way we use your information, this page changes and the date at the top with it. The version on this page is the one that applies.