Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how Red Carpet Aesthetics (“Red Carpet,” “we,” “our,” or “us”), operating under Trifecta Med Spa, collects, uses, protects, and discloses personal information when you visit our website (https://redcarpetaesthetics.com), interact with our booking platform, submit digital forms, or communicate with our staff.

By accessing our website or booking an appointment, you acknowledge that you have read and agree to the practices outlined in this Privacy Policy.

2. Information We Collect

We collect several types of information from and about users of our website:

• Contact & Identification Data: Full name, email address, mobile phone number, physical address, and communication preferences provided through contact forms, lead generation inquiries, or appointment scheduling.
• Booking & Treatment Inquiry Data: Requested treatments (e.g., Botox, Dermal Fillers, Chemical Peels, Laser Hair Removal), appointment dates, provider preferences, and consultation notes submitted via our Zenoti-integrated booking system.
• Payment & Billing Data: Cardholder details, tokenized payment card data, and billing addresses. Note: Payment card processing is handled securely by PCI-DSS compliant third-party payment gateways; we do not store unencrypted credit card numbers on our web servers.
• Technical & Usage Information: IP addresses, browser types, operating systems, referring URLs, device identifiers, and clickstream analytics gathered automatically via cookies and tracking pixels.

3. Medical Information & HIPAA Disclaimer

Information submitted through general website contact forms, chat widgets, or email inquiries does not constitute confidential medical records and is not fully encrypted for sensitive medical diagnoses.

Protected Health Information (PHI) collected during formal in-office patient intake, clinical medical consultations, and treatment charting is governed by our separate in-office Notice of Privacy Practices (NPP) pursuant to the Health Insurance Portability and Accountability Act (HIPAA) and applicable New York State health privacy laws.

Please avoid transmitting sensitive personal medical histories through standard website inquiry forms.

4. How We Use Your Information

We use your information exclusively for legitimate business and medical aesthetic purposes, including:

• Processing, confirming, and managing your appointments and consultations.
• Sending transactional notifications, appointment reminders, and follow-up care instructions via SMS and email.
• Responding to patient inquiries, feedback, and customer service requests.
• Delivering marketing communications, promotional VIP offers, and event invitations (subject to your explicit opt-out rights).
• Maintaining security, preventing fraud, and optimizing website performance and accessibility.

5. SMS / Text Messaging Policy (A2P 10DLC Compliance)

When you provide your mobile telephone number and opt in to receive text messages, you agree to receive SMS notifications regarding appointment confirmations, schedule changes, and promotional aesthetic specials.

• Message frequency varies according to your appointment schedule and promotions.
• Standard message and data rates may apply.
• You may opt out at any time by replying STOP to any SMS message. Reply HELP for assistance.

We do not sell, rent, or share mobile numbers or SMS consent with third parties or affiliates for their own direct marketing purposes.

6. Third-Party Service Providers

We may share your data with trusted third-party vendors strictly for operating our practice and website:

• Zenoti: Practice management, electronic appointment scheduling, and customer records.
• Payment Processors: Secure tokenized card processing conforming to PCI-DSS standards.
• Analytics & Infrastructure Providers: Hosting platforms, Google Maps/Places APIs, and security services.

7. Data Security & Retention

We implement industry-standard technical, administrative, and physical safeguards (including SSL/TLS 256-bit encryption, strict access controls, and firewall defenses) to protect against unauthorized access or alteration of your personal data.

While we take all reasonable precautions, no internet data transmission is 100% infallible; you transmit information at your own risk.

8. Your Rights & Opt-Out Choices

Depending on your jurisdiction, you have the right to:

• Request access to, correction of, or deletion of your personal contact data.
• Opt out of marketing emails by clicking “Unsubscribe” in any marketing message.
• Opt out of promotional SMS messages by texting “STOP”.

To exercise any privacy rights, contact us directly at info@redcarpetaesthetics.com.

9. Contact Information

For questions, concerns, or privacy requests regarding this Privacy Policy: