Last updated 1 September 2026

Privacy policy

Written in plain English, because a privacy policy you can’t read isn’t consent. Short version: I hold the minimum, I don’t sell it, and you can have it deleted.

a real person

Questions about your data come to me, not a legal inbox.

What I collect

Only what the order or the appointment needs. There is no tracking pixel following you around the internet on my behalf.

Health information

If you book a treatment I take a medical history: medications, allergies, past procedures, and what you want to change. This is confidential clinical information and it is held to the same standard as any medical record: encrypted, access-controlled, and never used for marketing. It is not in the same system as the shop.

Clinical photographs

I photograph before and after because it is the only honest way to assess a result. Those images are part of your clinical record. They are never published, shown to another client, or posted anywhere without separate written consent, and that consent is specific, revocable, and never a condition of treatment. Withdraw it at any time and the images come down.

How I use it

To fulfil your order, run your appointment safely, and answer you when you write. Marketing email only if you opted in, and every one has a working unsubscribe that I honour immediately.

Who else sees it

Four processors, each doing one job, none of whom get more than they need:

Cookies

Two kinds: the ones that keep your cart and your session working, which the site cannot function without, and a single analytics cookie that tells me which pages people read. No advertising cookies, no third-party retargeting, no data brokers. Decline analytics and nothing about the site breaks.

How long I keep it

Order records for seven years because tax law requires it. Clinical records for ten years after your last visit, as required for medical records in Arizona. Marketing preferences until you unsubscribe. Analytics for fourteen months. Anything past those windows is deleted, not archived.

Your rights, in one place

Email me and I’ll action any of these within thirty days, usually the same week. No forms, no fee.

Ask for a copy of everything I hold on you, clinical records included.
Have anything corrected if it’s wrong.
Have your marketing data deleted outright, and your clinical record deleted once the legal retention period has passed.
Withdraw photo consent at any time, for any reason, with no effect on your care.