Privacy Policy

At Arbora Medical Spa, your privacy and trust are our highest priorities. This Privacy Policy explains how we collect, use, and safeguard your personal and health information when you visit our website, schedule appointments, or receive services in our clinic.

1. Information We Collect

We may collect the following information to provide safe, personalized care:

a. Personal Information

  • Name, address, phone number, email address

  • Date of birth, gender

  • Payment information (credit card, CareCredit, Cherry)

  • Emergency contact details

b. Health Information

  • Medical history, medications, allergies, and current health conditions

  • Treatment notes and documentation

  • Photos for clinical progress (only with your written consent)

c. Website & Usage Data

  • IP address, browser type, device information

  • Pages visited and time spent on our site

  • Cookies and tracking technologies (see Section 6)

2. How We Use Your Information

Your information helps us to:

  • Schedule, confirm, and manage appointments

  • Provide safe, effective treatments tailored to your needs

  • Maintain accurate medical records

  • Process payments and issue receipts

  • Share updates, promotions, or reminders (only if you consent)

  • Comply with legal, regulatory, and medical obligations

3. How We Share Information

We never sell your personal data. We may share limited information:

  • With medical professionals and Arbora staff involved in your care

  • With trusted third-party service providers (e.g., booking and payment systems) under strict confidentiality

  • As required by law, court order, or to protect the rights, property, or safety of Arbora, our clients, or others

4. Data Storage & Security

We use industry-standard safeguards to protect your data against unauthorized access, disclosure, or misuse. Health records are stored securely and accessible only by authorized personnel.

5. Your Rights

You may have the right to:

  • Access and update your personal information

  • Request deletion of data where legally applicable

  • Withdraw consent for marketing communications at any time

  • File a complaint with a data protection authority if you believe your rights have been violated

To make a request, please contact us at hello@arboramedicalspa.com or call (541) 600-0878.

6. Cookies & Tracking

We may use cookies and similar tools to improve website experience and analyze usage. You can manage or disable cookies in your browser settings.

7. Third-Party Links

Our website may contain links to other sites. Arbora Medical Spa is not responsible for the content or privacy practices of those sites.

8. HIPAA Compliance

As a medical spa in the United States, we comply with the Health Insurance Portability and Accountability Act (HIPAA) for handling Protected Health Information (PHI).

9. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with an updated effective date.

10. Contact Us

If you have questions about this Privacy Policy, please contact:

Arbora Medical Spa
📞 (541) 600-0878
📍 935 Willagillespie Rd, Suite A, Eugene, OR 97401
📧 info@arboramedicalspa.com