PRIVACY POLICY
PRIVACY POLICY Effective Date: 11/5/25 Last Updated: 11/3/25 Please read carefully. Introduction The Things We Do, PC (“TWD”, “Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our online booking or contact forms, or communicate with us via SMS text messages or other electronic means. By accessing our website or providing your personal information, you agree to the terms of this Privacy Policy. This Policy is provided in accordance with applicable federal and state privacy, consumer protection, and healthcare laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Health Insurance Portability and Accountability Act (HIPAA), and the Telephone Consumer Protection Act (TCPA). By using our website or services, you consent to the data practices described herein and acknowledge that this policy applies to users located in the United States, including California residents. Notice at Collection: We collect personal information as described below. We do not sell or share personal information for cross-context behavioral advertising without your consent. To exercise your rights, please see Section 9. Information We Collect We collect the following categories of information: Personal Information: Name, date of birth, phone number, email address, mailing address Medical or treatment information you voluntarily provide (e.g., skin type, allergies, medical history relevant to your care) and photos or videos used for medical documentation or treatment progress Sensitive personal information (as defined under the CPRA), such as health information, biometric identifiers, or precise geolocation data, when required for treatment or regulatory compliance. Commercial and Financial Information Payment card details and billing information (processed securely through compliant vendors) Records of services purchased or inquired about Technical Information: IP address, browser type, operating system, referring URLs, time and date of visits, interactions with our site, and usage data collected automatically through cookies, analytics tools, and similar technologies Communications Information: Information you provide when contacting us via web forms, chat, email, or SMS We collect only the information necessary to fulfill the purposes described in this Policy and retain it only as long as required by law or business necessity. SMS Text Messaging and Communications By checking the box or otherwise signing up for one or more text messaging programs, you provide express prior written consent (as required under the Telephone Consumer Protection Act, 47 U.S.C. §227) to receive SMS text messages from TWD related to informational messages and promotional messages. Message & Data Rates May Apply. You may opt out of SMS communications at any time by replying “STOP.” You may request help by replying “HELP.” We do not sell or share your phone number with third parties for marketing purposes. SMS communications are transmitted through secure third-party messaging platforms compliant with applicable privacy laws. When you opt-in to receive SMS messages from TWD, we may collect certain personal information such as your phone number, your carrier’s name, and the date, time, and content of your messages. We use this information to provide you with the SMS services you have requested and to operate and improve our services. Your consent remains valid until revoked. We maintain records of SMS consent and opt-out requests as required by applicable regulations. All messaging vendors are contractually bound to maintain confidentiality and comply with TCPA and HIPAA standards. For more information please see our SMS TERMS AND CONDITIONS Collection of Personal Information We use collected information to: Schedule and confirm appointments Provide requested treatments or services Send confirmations, reminders, and follow-up communications (including via SMS with opt-out options) Send promotional materials, newsletters, or special offers (including via SMS with opt-out options) Improve our website and services Process payments and maintain records Respond to inquiries and provide customer support Comply with relevant legal, regulatory, and safety obligations (including HIPAA, where applicable) We collect and process personal information only as necessary to provide our services or as otherwise permitted by law. User Responsibility and Representations You represent and warrant that all information you provide is accurate, current, and complete, and that you have the legal right to provide it. You agree not to provide any false or misleading information or to impersonate another person. You are responsible for maintaining the confidentiality of your account and for all activities that occur under your account. TWD is not responsible for any loss or damage resulting from your failure to safeguard your credentials or update your information. Use and Disclosure of Medical and Health Information If you receive medical or aesthetic treatments that generate Protected Health Information (PHI), such information is handled under HIPAA standards. PHI is used and disclosed only for treatment, payment, and healthcare operations, unless you authorize otherwise in writing. We implement administrative, technical, and physical safeguards to protect PHI. You have rights under HIPAA, including the right to access, amend, and request an accounting of disclosures of your PHI. For more information, please see our Notice of Privacy Practices. In the event of any conflict between this Policy and our Notice of Privacy Practices, the Notice of Privacy Practices shall control with respect to PHI. Disclosure of Information We do not sell personal information and do not share personal or mobile data with third parties for cross- context behavioral advertising or independent marketing purposes. We may disclose personal information only to service providers and contractors who assist us in operating our business and are contractually restricted from retaining, using, or disclosing the information for any purpose other than providing services on our behalf. Business Operations: We may share your information with third-party service providers who assist us in essential operational functions, including but not limited to: Appointment scheduling and customer service Payment and billing processing (compliant processors) Secure data hosting and website maintenance IT and cybersecurity support Email or SMS delivery platforms used solely to send communications authorized by you Marketing and Communications: We may use your contact information (such as your email address or phone number) to send you promotional offers, newsletters, or product and service recommendations directly from TWD. We may engage trusted vendors to help us deliver these communications on our behalf. These vendors do not have the right to use your information for their own marketing purposes. We will only share your information for marketing with your explicit opt-in consent, collected through a clear and affirmative action (for example, checking an opt-in box on a web form). You may withdraw consent or opt out at any time by clicking “unsubscribe” or replying “STOP.” Compliance with Legal Requirements: We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to: Comply with legal obligations, court orders, or regulatory requests; Protect and defend our rights or property; Prevent or investigate possible wrongdoing or fraud; or Protect the personal safety of our staff, clients, or the public. Sale, Merger, or Corporate Transfer: In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will ensure that your information continues to be protected in accordance with this Privacy Policy, and you will be notified of any material changes in how your data is handled. Cookies, Analytics, and Online Tracking When you visit or log in to our website, we and our third-party analytics or advertising partners may use cookies, pixels, analytic technologies (e.g., Google Analytics) and similar technologies to collect data about your activity, understand user behavior, and improve our services. This information may be linked to other identifiers (such as an email or home address) to deliver more relevant advertising from TWD. You may opt out of such advertising and data sharing by visiting ___________, or by using the “Do Not Sell or Share My Personal Information” link on our website. You will have the opportunity to accept or decline cookies. You can also manage cookie preferences through your browser settings. You may disable cookies via your browser, though certain features may not function properly. Retention of Information We retain information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and maintain business records. Retention periods vary depending on the category of information and are determined based on statutory requirements, business needs, and data minimization principles. Medical and billing records are retained according to California Health & Safety Code §123145 and applicable federal requirements. Your Rights Under California Law California residents have the following rights under the CCPA/CPRA: Right to Know: Request disclosure of the categories and specific pieces of personal information collected. Right to Delete: Request deletion of personal information, subject to legal exceptions. Right to Correct: Request correction of inaccurate data. Right to Opt-Out of Sale/Sharing: We do not sell personal information, but you may opt out of any sharing for cross-context behavioral advertising. Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of health-related or biometric information. Right to Non-Discrimination: You will not be penalized or denied services for exercising your rights. To exercise your rights, contact us at: Email: info@thethingswedo.co Phone Number: 213-278-0358 We will verify your identity before fulfilling any request, as required by law. Email If you provide your email, you may receive updates, offers, or newsletters. You may unsubscribe at any time by clicking the “unsubscribe” link in the email or emailing us directly. Emails regarding treatment, billing, or compliance are not considered marketing and cannot be opted out if necessary for service delivery. All marketing emails comply with the CAN-SPAM Act (15 U.S.C. §7701 et seq.) and include our valid business contact information. Children’s Privacy Our services are intended for individuals 18 years and older. We do not knowingly collect or solicit personal information from minors. If we learn that we have inadvertently collected such data, we will promptly delete it. Security We maintain administrative, technical, and physical safeguards designed to protect personal and health information against unauthorized access, disclosure, alteration, or destruction. We comply with the HIPAA Security Rule (45 C.F.R. §164.300 et seq.) and maintain appropriate safeguards. If a data breach occurs involving your personal information, we will notify you and applicable authorities as required by law. However, no transmission over the internet or mobile network can be guaranteed completely secure. You use our website and SMS services at your own risk. Disclaimer of Warranties The information, services, and materials provided on our website are provided “as is” and without warranties of any kind, either express or implied. To the fullest extent permitted by law, TWD disclaims all warranties, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, non-infringement, and title. We do not warrant that our website or SMS services will be uninterrupted, error- free, or free of viruses or other harmful components. Limitation of Liability To the fullest extent permitted by law, TWD, its affiliates, and their officers, directors, employees, and agents shall not be liable for any indirect, incidental, consequential, special, exemplary, or punitive damages arising out of or related to your use of our website, SMS programs, or services, even if advised of the possibility of such damages. In no event shall our total liability exceed the amount you paid to TWD for the services giving rise to the claim, if any. Do Not Track Some internet browsers may transmit “do-not-track” signals to websites with which the browser communicates. The Site does not currently respond to these “do-not-track” signals. Third- Party Links Our site and our services may contain links to other websites or applications (“Linked Sites”) that are not owned by TWD. We do not control the collection or use of any information, including personal information, which occurs while you visit Linked Sites. Therefore, we make no representations or warranties for —and will not in any way be liable for—any content, products, services, software, or other materials available on Linked Sites, even if one or more pages of the Linked Site are framed within a page of the Site. Furthermore, we make no representations or warranties about the privacy policies or practices of the Linked Sites, and TWD is not responsible for the privacy practices of those Linked Sites. We encourage you to be aware of when you leave the Site and read the privacy policies of Linked Sites. Changes to This Privacy Policy We may update this Policy periodically. The “Last Updated” date at the top will reflect the latest revision. Material changes will be posted on our website, and we may notify you by email or SMS where legally required and depending on your communication preference. Indemnification You agree to indemnify, defend, and hold harmless TWD, its affiliates, officers, directors, employees, agents, contractors, and licensors from and against all claims, liabilities, damages, losses, costs, expenses, or fees (including reasonable attorneys’ fees) arising from or relating to your violation of this Policy, your misuse of our website or services, or your violation of any law or the rights of a third party. Dispute Resolution Please read this carefully. It affects your rights. By using our website or services, including SMS programs, you acknowledge that you have read and understand the arbitration provision below, that it is a condition of your use of our services, and that you knowingly and voluntarily waive the right to a trial by jury and to participate in any class or representative proceeding. YOU AND TWD AGREE THAT ANY DISPUTE, CONTROVERSY, OR CLAIM ARISING OUT OF, OR RELATING TO, THIS AGREEMENT OR THE SERVICE SHALL BE RESOLVED ONLY BY FINAL AND BINDING, BILATERAL ARBITRATION. This agreement to arbitrate is intended to be broadly interpreted, and expressly includes claims brought under the Telephone Consumer Protection Act, 47 U.S.C. § 227 et seq., or any other statute, regulation, or legal or equitable theory. You and TWD hereby agree that the Federal Arbitration Act, 9 U.S.C. § 1 et seq. (“FAA”), applies to this agreement to arbitrate, and governs all questions of whether a dispute is subject to arbitration. Unless you and TWD agree otherwise in writing, arbitration shall be administered by the American Arbitration Association (“AAA”) under its Consumer Arbitration Rules in effect at the time of the filing of the arbitration (the “AAA Rules”). The arbitration shall take place exclusively in Honolulu, Hawaii, unless both parties agree in writing to a different location. The arbitration decision and award shall be final and binding, with limited exceptions under the FAA, and judgment on the award may be entered in any court of competent jurisdiction. YOU AGREE THAT, BY ENTERING INTO THIS AGREEMENT, YOU AND TWD ARE EACH WAIVING THE RIGHT TO A TRIAL BY JURY AND THE RIGHT TO PARTICIPATE IN ANY CLASS, REPRESENTATIVE, OR COLLECTIVE PROCEEDING. THIS AGREEMENT DOES NOT ALLOW FOR CLASS ARBITRATIONS EVEN IF THE PROCEDURES OR RULES OF THE AAA WOULD OTHERWISE PERMIT THEM. YOU AND TWD AGREE THAT ANY DISPUTES RELATED TO THIS SMS PROGRAM SHALL BE RESOLVED SOLELY ON AN INDIVIDUAL BASIS. YOU AGREE NOT TO PARTICIPATE AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, OR REPRESENTATIVE PROCEEDING. YOU AND TWD ARE ONLY ENTITLED TO PURSUE ARBITRATION ON AN INDIVIDUAL, BILATERAL BASIS. FURTHER, UNLESS YOU AND TWD AGREE OTHERWISE IN WRITING, THE ARBITRATOR(S) MAY NOT CONSOLIDATE MORE THAN ONE INDIVIDUAL PARTY’S CLAIMS WITH ANY OTHER PARTY’S CLAIMS AND MAY NOT OTHERWISE PRESIDE OVER ANY FORM OF A REPRESENTATIVE OR COLLECTIVE PROCEEDING. Governing Law and Venue This Agreement, and any dispute, claim, or controversy arising out of or relating to it (whether sounding in contract, tort, statute, or otherwise), shall be governed by and construed in accordance with the laws of the State of Hawaii, without regard to its conflict of law principles. The exclusive venue for any arbitration, judicial enforcement of arbitration awards, or any other proceedings arising under this Agreement shall be in Honolulu, Hawaii. Severability and Survival If any provision of this arbitration agreement is found to be invalid, unenforceable, or illegal, such provision shall be severed, and the remaining provisions shall continue in full force and effect. The obligations to arbitrate and all related waivers under this section shall survive the termination, rescission, or expiration of this Agreement. Contact If you have questions or need assistance, please contact us at: The Things We Do, PC. Address: info@thethingswedo.co Email: 787 S Alameda St. #100, Los Angeles, CA 9002 Phone: (213) 278 - 0358 If you require these SMS Terms and Conditions in an alternative format for accessibility purposes, please contact us at info@thethingswedo.co. this link