Privacy Policy

Aurelia Aesthetics ("Aurelia," "we," "us," or "our"), located at 635 Madison Avenue, Suite 1201, New York, NY 10022, is committed to protecting the privacy and confidentiality of all personal and health information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our clinic, use our website, or communicate with our team.

Please read this policy carefully. By using our services or website, you acknowledge that you have read and understood this Privacy Policy. If you have questions, please contact us at +1 (212) 935-8840 or visit us at our Madison Avenue location.

Personal Information

When you interact with Aurelia Aesthetics — whether by booking an appointment, completing a consultation form, or contacting us — we may collect the following personal information:

• Full name, date of birth, and contact information (phone, email, address)
• Emergency contact details
• Payment and billing information (credit card numbers are processed securely and never stored on our servers)
• Appointment history and preferences
• Correspondence and communications with our team

Health and Medical Information

As a medical aesthetics practice, we collect health-related information necessary to provide safe and effective care, including:

• Medical history, current medications, and known allergies
• Pre- and post-treatment photographs (with your written consent)
• Consultation notes, treatment plans, and clinical records
• Skin assessments and aesthetic goals discussed during consultations
• Adverse reactions or follow-up care notes

Website Usage Information

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and navigation paths
• Referring website or search query
• Device identifiers and cookie data

Providing Treatment and Clinical Care

Your personal and medical information is used primarily to deliver safe, personalized aesthetic care. This includes scheduling and confirming appointments, developing individualized treatment plans, administering procedures, monitoring outcomes, and coordinating follow-up care.

Communication and Appointment Management

We use your contact information to:

• Send appointment confirmations, reminders, and follow-up instructions
• Respond to inquiries submitted via phone, email, or our website
• Share post-treatment care guidelines and aftercare reminders
• Send relevant updates about services, promotions, or clinic news (with your consent — you may opt out at any time)

Improving Our Services

Aggregated, de-identified data about how patients use our services and website helps us improve our offerings, train clinical staff, refine our booking experience, and enhance overall patient satisfaction. This analysis never identifies individual patients.

Legal and Compliance Obligations

We may use or disclose your information as required by law, regulation, or valid legal process — including responses to court orders, subpoenas, or regulatory inquiries from bodies such as the New York State Department of Health.

Your medical records and protected health information will not be sold, rented, or shared with third parties for marketing purposes. Disclosures of PHI are limited to:

• Treatment: Sharing information with other healthcare providers involved in your care, with your knowledge
• Payment: Processing insurance claims or billing third-party payers (if applicable)
• Healthcare Operations: Quality assurance, staff training, and accreditation activities
• Required by Law: Disclosures mandated by applicable federal or state law
• Authorization: Any other disclosure requires your written authorization, which you may revoke at any time

Clinical records are retained for a minimum of seven (7) years from the date of last treatment, or as otherwise required by New York State law.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and understand how visitors use our site. Cookies are small data files stored on your device.

Types of Cookies We Use

• Essential Cookies: Required for core website functionality, such as form submissions and secure page navigation. These cannot be disabled.
• Analytics Cookies: Tools such as Google Analytics collect anonymous data about page views, session duration, and navigation behavior to help us improve our website.
• Marketing Cookies: With your consent, we may use advertising platforms (such as Google Ads or Meta) to serve relevant content. These tools may place cookies to measure campaign performance.

You may control cookie preferences through your browser settings or by declining non-essential cookies when prompted. Please note that disabling certain cookies may affect website functionality.

To operate our clinic and website effectively, we engage trusted third-party service providers. These partners are contractually obligated to protect your data and may only use it for the specific purpose for which it was shared.

• Booking and Practice Management Systems: Scheduling platforms that securely store appointment data and clinical records
• Payment Processors: PCI-DSS compliant processors that handle credit card and digital payment transactions
• Email and Communications Platforms: Services used to send appointment confirmations and newsletters
• Analytics Providers: Google Analytics and similar tools for website performance monitoring
• Cloud Storage: HIPAA-compliant cloud infrastructure for secure storage of clinical records

We do not sell, trade, or rent your personal information to any third party. Any sharing of personal information is strictly for operational purposes as described above.

Aurelia Aesthetics implements industry-standard administrative, technical, and physical safeguards to protect your personal and health information from unauthorized access, disclosure, alteration, or destruction.

• Encrypted transmission of data via SSL/TLS protocols
• Access controls and role-based permissions for staff accessing patient records
• HIPAA-compliant electronic health record systems
• Secure physical storage for paper records
• Regular staff training on privacy and data security protocols
• Incident response procedures in the event of a data breach

In the unlikely event of a data breach involving your protected health information, we will notify you in accordance with applicable HIPAA Breach Notification Rules and New York State data breach law, within the timeframes required by law.

Under HIPAA and applicable New York State law, you have the following rights regarding your personal and health information:

• Right to Access: Request a copy of your medical records and personal data we hold
• Right to Correct: Request corrections to inaccurate or incomplete information in your records
• Right to Restrict: Request restrictions on certain uses or disclosures of your PHI (we will inform you if we cannot accommodate a request)
• Right to an Accounting: Receive a list of disclosures of your PHI we have made, subject to certain exceptions
• Right to Confidential Communications: Request that we communicate with you via a specific method or at a specific address
• Right to Revoke Authorization: Withdraw consent for uses of your information not covered by treatment, payment, or operations
• Right to a Notice of Privacy Practices: Receive our full HIPAA Notice of Privacy Practices at any time

To exercise any of these rights, please contact our Privacy Officer using the information below. We will respond to verifiable requests within the timeframes required by applicable law.

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18 without verified parental or guardian consent. If a minor requires treatment, a parent or legal guardian must be present and must provide authorization. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can take appropriate steps to remove it.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify patients directly. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal and health information, please contact our Privacy Officer:

If you believe your privacy rights have been violated and we have not resolved your concern to your satisfaction, you have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/hipaa, without fear of retaliation.