Privacy

What we collect

Any contact form on this website collects your name, email address, phone number, your message, and, if you check the box, your consent to receive text messages. Our hosting provider records standard technical request logs (such as IP address and timestamp) for security and reliability. This site also sets analytics and advertising cookies; what they collect and what it is used for is set out under “Analytics and advertising” below. If you arrive by clicking one of our Google ads, the site also sets one cookie of its own and records the ad click; that is set out under “Ad click and booking measurement” below.

Analytics and advertising

This site uses Google Analytics 4 to measure how visitors find and use it — which pages are read, which treatments are looked at, how people arrive, and general device, browser, and approximate location information. It also records certain actions you take on the site: taps on our phone number, clicks on our booking link, clicks on links that lead off this site, the fact that a request form was submitted, and use of the treatment finder in the counts-only form described below. Google Analytics sets cookies in your browser and receives your IP address as part of that measurement. Google advertising domains, including google.com and doubleclick.net, may also set or read cookies in your browser for the purposes described next.

We use this data for advertising as well as measurement. Google Signals is turned on for this site. That means that where a visitor is signed in to a Google account and has ads personalization switched on in their own Google settings, Google may associate that visitor’s activity here with their Google account and with their activity on their other devices. We use the result to build remarketing audiences — groups of people who have visited this site or particular treatment pages — to show advertising to those audiences on Google’s services and partner sites, and to measure how that advertising performs. Google also processes this data for its own purposes under Google’s privacy policy, not only as our service provider.

What goes to Google is website browsing data, the booking-page steps described below, and at most a report that an ad click led to a booking. The advertising and audience-building described above cover pages you view on this website, actions you take on it, and those booking-page steps, and nothing else. What you type is not sent: your name, email address, phone number, and the message you write in a contact form are never sent to Google. Where a request form is submitted, Google receives the fact that a submission happened and nothing else from it. Your mobile number and your text-message opt-in record — including whether you ticked the text-message box — are never sent to Google, are never shared with any third party for marketing or promotional purposes, and are never used to build or target an advertising audience. Nothing from an intake form or your clinical record is ever sent to Google. If you book after clicking one of our Google ads, we may tell Google Ads that the click led to a booking, by sending back that click’s identifier, the time of the booking and a value for it; we never send your name, email address, phone number, the treatment you booked, or anything clinical.

We do not send Google any name, email address, phone number, or customer list of our own. The only identifier we may send Google is the ad click identifier Google itself created, in the booking report described above. Google does not report individual visitors back to us by name. Analytics and advertising data is never combined with your medical record.

If you would rather not be measured or advertised to, most browsers can block these cookies, Google publishes a browser add-on that opts you out of Google Analytics on every site, and you can switch off ads personalization for your own Google account at Google’s Ads Settings. Any of these can be used on their own or together. Blocking any of it has no effect on your ability to use this site, book an appointment, or receive care.

Appointments are booked through Pabau, our practice management system, on their own website. Anything you enter there is handled under Pabau’s privacy policy and our clinical privacy practices, not this page.

The booking page asks whether you accept analytics cookies. If you decline, it sends nothing to Google. If you accept, it reports to our Google Analytics which step of the booking page you are on, that the page was opened, the date and time you picked, that you finished the details step, and the amount due when the payment step began. It does not report which treatment or provider you chose, your name, email address or phone number, or anything else you type into it.

The treatment finder, on our home page and at /treatment-finder, runs in your browser. The concerns you pick, your answers about how your skin reacts to sun, and the optional questions about pregnancy, Accutane, tanning and cold sores are used on your device to choose which treatments to show you. They are not stored by this website and are never sent to Google. Google Analytics receives only that the finder was used: how many concerns were picked and how many treatments were shown, never which ones, and that a request was submitted, never what it contained.

If you ask the finder to email you your list, it asks for your name and email address, and optionally your mobile number. That, the concerns you picked, and the list of treatments it showed you are sent through this website to Pabau, our practice management system, so we can email you the list and so your consultation starts from it. This website does not keep a copy. Your skin type answers and the optional questions are not included. Once in Pabau it is handled under Pabau’s privacy policy and our clinical privacy practices, in the same way as a booking. Please do not put detailed medical information in it.

That request carries one unchecked box offering emails about current specials and promotions. Ticking it is the only thing on this website that adds you to a marketing list, it is never required to get your list, and every such email carries an unsubscribe link. The treatment finder does not ask for, and does not collect, consent to receive text messages, and a mobile number given there is used to reply to you — never added to a text-message list.

The chat window on this site is also provided by Pabau. Messages you type into it go to Pabau and to us, not to Google, and are handled under Pabau’s privacy policy and our clinical privacy practices in the same way as a booking. The chat is for questions about treatments, prices and appointments — please do not include detailed medical information in it. If you would rather speak to someone, call (757) 586-4575.

Ad click and booking measurement

When you click one of our Google ads, Google adds a click identifier to the link (named gclid, gbraid or wbraid). If you arrive that way, this site sets a cookie of its own, named “pam_lid”, holding a random reference number, and keeps it for 90 days. It also records that reference number, the click identifier, the page you landed on, the ad campaign name if the link carries one, and the time, in a measurement database we run ourselves on Cloudflare. If you arrive any other way — a search result, a bookmark, typing our address — no cookie is set and nothing is recorded.

Separately, our booking system, Pabau, notifies the same database when an appointment, invoice or payment is created. The database keeps only the date and time, the service booked, the price or amount, the appointment status or payment method, whether it was booked online, and Pabau’s reference numbers for the client, appointment and invoice. It does not keep your name, email address, phone number, intake answers or clinical notes.

We use these records for one thing: to tell which of our ads lead to bookings, so we stop paying for the ones that do not. They are not sold or shared, they are not combined with your medical record, and the only thing that leaves them for Google is the booking report described under “Analytics and advertising” above.

Why we collect it

Request logs exist to keep the site available and secure. What you send through a contact form is used only to reply to you. The only marketing list we run from this website is the specials email described above, which you join only by ticking that box and can leave from any message it sends. The only profiling we do is the advertising audience-building described above, which is built from website browsing data alone. Ad click and booking measurement is used to judge our ads, not to target you.

SMS / Text Messaging and Mobile Information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who provide support services on our behalf — such as our practice management platform, scheduling system, and messaging carriers — is permitted solely to deliver the messages you have requested. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Peninsula Aesthetic Medicine LLC does not sell, rent, or lease mobile phone numbers or SMS opt-in data to any third party under any circumstance.

How we obtain consent. We send text messages only to individuals who have expressly opted in. Consent is collected through an unchecked checkbox on our appointment request form, through our patient intake forms, or by your written request. Consent to receive text messages is never a condition of receiving treatment or any other service.

Message types. Opted-in individuals may receive appointment confirmations and reminders, scheduling changes, pre- and post-treatment care instructions, forms and paperwork requests, billing notifications, and responses to inquiries you initiate.

Message frequency. Message frequency varies based on your appointments and interactions with our practice.

Cost. Message and data rates may apply. Peninsula Aesthetic Medicine LLC does not charge for text messages; your mobile carrier’s rates apply.

Opting out. Reply STOP to any message to stop receiving text messages. You will receive a single confirmation and no further messages. Reply HELP for assistance, or contact us at 757-586-4575.

Carrier liability. Carriers are not liable for delayed or undelivered messages.

Protected health information. Text messages are not a secure channel. We limit message content accordingly and do not transmit detailed clinical information by SMS. See our Notice of Privacy Practices for how we handle protected health information under HIPAA.

Who handles it

The site is hosted on Cloudflare, which also runs our ad click and booking measurement database. Booking and the website chat are provided by Pabau. Website analytics and advertising are provided by Google, which receives the website browsing data described above and uses it for its own purposes as well as ours. Text messages are carried by our messaging carriers and their aggregators, who deliver only the messages you have requested. We do not sell, rent, or trade your information. Apart from the website browsing data Google receives, we do not share your information with anyone except these service providers as needed to operate the site and provide your care.

How long we keep it

Technical request logs are kept only as long as our hosting provider retains them for security and reliability. Ad click and booking measurement records are deleted automatically after 90 days, and the “pam_lid” cookie expires after 90 days. Booking and clinical records are kept under our clinical retention policy, which is separate from this page.

Your choices

• You may request a copy of, correction of, or deletion of your information at any time.

Contact

For any privacy request, reach us at the practice address: Peninsula Aesthetic Medicine LLC, 12551 Jefferson Ave STE 187, Newport News, VA 23602. You can also reach us by phone at 757-586-4575.

Changes

We will update this page if our practices change, and we will revise the “last reviewed” date above when we do.