Privacy Policy

Skën Med Spa is committed to protecting your privacy and maintaining the highest standards of client data protection.

Effective Date: January 1, 2024
Last Updated: January 1, 2024

Introduction

At Skën Med Spa, we understand that your privacy is paramount. This Privacy Policy reflects our Swedish-inspired commitment to precision and care in all aspects of our service, including the protection of your personal and medical information. This policy applies to all services provided at our Arlington, Virginia and Lakewood, Colorado locations, as well as our website and digital platforms.

By using our services, visiting our facilities, or accessing our website, you consent to the collection and use of your information as outlined in this Privacy Policy. We are committed to transparency in our data practices and maintaining the trust you place in us.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us, including:

  • Name, address, phone number, and email address
  • Date of birth and emergency contact information
  • Payment and billing information, including credit card details
  • Insurance information when applicable

Medical and Health Information

As a medical spa, we collect health information necessary to provide safe and effective treatments:

  • Medical history and current health conditions
  • Current medications and allergies
  • Previous aesthetic and medical treatments
  • Treatment goals and preferences
  • Before and after photographs (with your written consent)

Website and Digital Information

When you visit our website or use our digital services, we may collect:

  • Browser type, device information, and IP address
  • Pages visited and time spent on our website
  • Booking and appointment information submitted through our forms
  • Communication preferences and consent records

How We Use Your Information

Treatment and Medical Care

We use your information primarily to provide exceptional aesthetic and wellness treatments:

  • Planning and delivering personalized treatment plans
  • Ensuring your safety through medical screening and monitoring
  • Following up on your treatment progress and satisfaction
  • Coordinating care between our Arlington and Lakewood locations

Business Operations

Your information supports our day-to-day operations:

  • Scheduling and managing appointments
  • Processing payments and managing billing
  • Communicating about your treatments and appointments
  • Improving our services and website functionality
  • Sending marketing communications (only with your consent)

Information Sharing and Disclosure

We maintain strict control over your information and never sell your personal data. We may share your information only in these limited circumstances:

Healthcare Providers

We may share relevant medical information with other healthcare providers involved in your care, such as your primary care physician or referring specialist, when appropriate and with your consent.

Service Providers

We work with trusted third-party service providers who assist us in operating our business:

  • Payment processors for secure transaction handling
  • Booking system providers for appointment management
  • IT service providers for data security and system maintenance
  • Marketing platforms for communications (only with your consent)

Legal Requirements

We may disclose information when required by law, court order, or to protect the safety and rights of our clients, staff, or the public.

Data Security Measures

We implement comprehensive security measures that reflect our Swedish-inspired commitment to precision and excellence:

Technical Safeguards

  • Industry-standard encryption for data transmission and storage
  • Secure, password-protected systems with regular updates
  • Firewalls and intrusion detection systems
  • Regular security audits and vulnerability assessments

Physical Security

  • Controlled access to facilities and records at both locations
  • Secure storage of physical files and documents
  • Surveillance systems and alarm systems

Administrative Safeguards

  • Comprehensive staff training on privacy and security protocols
  • Role-based access controls limiting information access to necessary personnel
  • Regular review and updating of security policies
  • Incident response procedures for any security breaches

Your Privacy Rights

You have important rights regarding your personal information:

Access and Correction

You have the right to access your personal information in our records and request corrections to any inaccurate or incomplete information. We will respond to such requests within 30 days.

Communication Preferences

You may opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in our emails
  • Contacting us directly at either location
  • Updating your preferences during your visit

HIPAA Rights

For medical information, you have additional rights under HIPAA:

  • Right to request restrictions on use and disclosure of your health information
  • Right to request confidential communications
  • Right to inspect and copy your medical records
  • Right to request an accounting of disclosures

Data Retention

We retain your information only as long as necessary to provide services and comply with legal requirements. Medical records are retained according to state and federal regulations.

Cookies and Website Technologies

Our website uses cookies and similar technologies to enhance your experience:

Types of Cookies

  • Essential cookies: Required for website functionality and security
  • Analytics cookies: Help us understand how visitors use our website
  • Marketing cookies: Used to deliver relevant advertisements (only with consent)

Third-Party Services

We use Google Analytics and similar services to improve our website performance. You can control cookie preferences through your browser settings or opt out of Google Analytics tracking.

Third-Party Services

We work with select third-party services to enhance your experience:

  • Square/Boulevard: Appointment booking and payment processing
  • Google Analytics: Website performance and user experience analysis
  • Email Marketing Platforms: Communications and newsletters (with consent)
  • Social Media Integration: Social sharing features and advertising

These services have their own privacy policies, and we encourage you to review them.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes:

  • We will post the updated policy on our website with a new effective date
  • We will notify you by email if you have provided consent for communications
  • We will inform you of significant changes during your next appointment
  • Continued use of our services after changes constitutes acceptance

Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Privacy Officer: Daniel Lundquist

Arlington Location:
Skën Med Spa
2300 Wilson Blvd, Suite 150
Arlington, VA 22201
Phone: (703) 555-0123

Lakewood Location:
Skën Med Spa
7405 W Colfax Ave
Lakewood, CO 80214
Phone: (303) 555-0123

Email: privacy@skenmedspa.com

We commit to responding to privacy inquiries within 5 business days. For urgent concerns, please call either location directly.

Questions About Your Privacy?

Our team is here to address any concerns about your personal information and data protection.