Privacy Policy

Privacy Policy

Effective Date: 08/18/2025

Introduction

This Privacy Policy describes our policies and procedures for the collection, use, and disclosure of your information when you use the Service. It also informs You about Your privacy rights and how the law protects You. We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation And Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • You refers to the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. Under GDPR, You may be referred to as the Data Subject or the User.
  • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to LuxeSkin MedSpa, located at 620 N. Washington St, Naperville, IL, 60563 . For GDPR purposes, the Company is the Data Controller.
  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
  • Account means a unique account created for You to access our Service or parts of our Service.
  • Website refers to LuxeSkin MedSpa, accessible from www.luxeskinmedspa.com.
  • Service refers to the Website.
  • Country refers to: United States, Illinois.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, provide the Service on behalf of the Company, perform services related to the Service, or assist the Company in analyzing how the Service is used. Under GDPR, Service Providers are considered Data Processors.
  • Third-party Social Media Service refers to any website or social network through which a User can log in or create an account to use the Service.
  • Personal Data is any information that relates to an identified or identifiable individual. Under GDPR, Personal Data includes any information relating to You such as a name, identification number, location data, online identifier, or factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity. Under CCPA, Personal Data means any information that identifies, relates to, describes, or is capable of being associated with You.
  • Cookies are small files placed on Your computer, mobile device, or any other device by a website, containing details of Your browsing history on that website among its many uses.
  • Device means any device that can access the Service such as a computer, cellphone, or digital tablet.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (e.g., the duration of a page visit).
  • Eligible Users refers to individuals who are at least 13 years old, or 16 years old where required by applicable data protection laws; this Website is not intended for or directed to individuals under the minimum legal age.
  • Data Controller (GDPR) refers to the Company as the legal person which determines the purposes and means of the processing of Personal Data.

A2P Messaging Compliance

We comply with all applicable A2P messaging regulations. This includes obtaining explicit consent from users before sending any promotional messages. Users will be informed of the frequency of messages, message costs (if any), and how to opt-out.

Consent for Messaging

By providing your phone number, you consent to receive SMS messages from us regarding our services, promotions, and updates. Consent to receive marketing messages is not required as a condition of purchasing any goods or services. You may opt-out at any time by following the instructions provided in the messages or by contacting us directly.

Data Collection

We will collect your name, email address, mailing address, and mobile phone number when you sign up for SMS updates. The information will be collected via the website contact form, email, rental agreement, or third-party reservation systems.

Data Usage

We use your data solely for sending updates, promotions, and reminders related to our products or services

Data Security

We prioritize the security of your Personal Data. We protect your data with secure storage measures to prevent unauthorized access. While no method of transmission over the Internet or electronic storage is entirely secure, we implement appropriate measures to protect your information.

Data Retention

We retain your information as long as you are subscribed to our SMS service. You may request deletion at any time.

Opt-Out

You may opt-out of receiving SMS messages at any time by replying “STOP” to any message you receive. Upon receiving your opt-out request, we will send a confirmation message and cease further communication to that number, except for administrative purposes.

Opt-Out Confirmation

You can send HELP for additional assistance, and you will receive a text including our Phone number, email, and website. We are here to help you.

Message and Data Rates May Apply

Your mobile carrier may charge fees for sending or receiving text messages, especially if you do not have an unlimited texting or data plan. Messages are recurring, and message frequency varies.

Non-Sharing Clause

We do not share your data with third parties for marketing purposes. LuxeSkin MedSpa will not sell, rent, or share the collected mobile numbers.

Contact Information

Contact LuxeSkin MedSpa at (630) 544-2050 for HELP or to STOP receiving messages.

Children’s Privacy

This Website is not intended for individuals under the age of 13. We do not knowingly collect personal information from anyone under the age of 13. If we become aware that a user under 13 has provided personal information, we will promptly delete such data from our systems.

In jurisdictions that require a higher minimum age for data collection—such as 16 under the General Data Protection Regulation (GDPR)—we comply with those laws and do not knowingly collect or process data from individuals under the applicable age threshold.

If you believe that we may have collected personal data from a child in violation of these policies, please contact us.

California Consumer Privacy Act (CCPA) Compliance

 Your Rights Under the CCPA
If you are a California resident, you have specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.


Right to Know and Access
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

  • The categories of personal information we collected about you.
  • The categories of sources for the personal information we collected about you.
  • Our business or commercial purpose for collecting that personal information.
  • The categories of third parties with whom we share that personal information.
  • The specific pieces of personal information we collected about you.