Privacy Policy

Natural Rejuvenation MedSpa | Bellevue, Washington

Effective date: July 2026 | Last updated: July 2026

Natural Rejuvenation MedSpa ("Natural Rejuvenation," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through our website at naturalrejuvenationmedspa.com, how we use and share it, the choices you have, and the rights you hold under the Washington My Health My Data Act, the Washington Consumer Protection Act, and other applicable law.

By using our website or submitting information to us, you agree to the practices described in this Privacy Policy. Submitting information through this website does not create a provider and patient relationship.

1. Scope of This Policy and Relationship to HIPAA

Natural Rejuvenation MedSpa is a medical spa that provides health care services. Health information that we create or receive in the course of providing care to you as a patient is Protected Health Information (PHI) governed by the Health Insurance Portability and Accountability Act (HIPAA) and described in our separate Notice of Privacy Practices, not by this Privacy Policy.

Under the Washington My Health My Data Act, information regulated by HIPAA, including PHI, is exempt from that Act. This Privacy Policy therefore governs the personal information and consumer health data we process that is not PHI, including website-visitor data, marketing and contact-form submissions, lead inquiries from prospective (non-patient) consumers, analytics data, and email and text-message marketing data.

2. Information We Collect

A. Information you provide to us. We collect personal information you give us voluntarily, which may include:

• Name, email address, telephone number, and mailing address
• Date of birth
• Appointment, consultation, or treatment-interest details
• Information you submit through contact forms, scheduling tools, or text-message opt-in

If you provide health or treatment-related information through our website, that information may be considered consumer health data (see Section 4). Please do not submit detailed medical history or emergency information through the website.

B. Information collected automatically. When you visit our website, we may automatically collect IP address, browser type, device type, pages viewed, referring URLs, and the date and time of your visit, through cookies, analytics tools, and similar technologies (see Section 8).

C. Payment information. Payments are processed by secure third-party providers. We do not store full payment-card numbers on our website servers.

3. Categories of Personal Data and Sources

For transparency under Washington law, the categories of personal data we process are: identifiers and contact data; demographic data such as date of birth; commercial and transaction data; internet and device activity; general location inferred from IP address; and, where you choose to provide it, consumer health data relating to your health interests. We collect this data directly from you, automatically from your device, and from service providers such as our scheduling and analytics platforms.

4. Consumer Health Data and Your Consent

Washington's My Health My Data Act treats information that identifies your past, present, or future physical or mental health status, or your attempt to obtain health services, as consumer health data. Before we collect consumer health data, we obtain your consent, and before we share it, we obtain your separate consent. We collect health-related information through the website only when you choose to provide it, for example by describing a treatment interest in a contact form, and we treat that submission as your consent to process it for the purpose of responding to your inquiry.

You may withdraw your consent at any time using the contact details in Section 18. We will stop the related processing without undue delay, except where we are permitted or required by law to retain the information.

5. How We Use Your Information

We use personal information to:

• Schedule and confirm appointments and consultations
• Respond to your inquiries and provide the information you request
• Send appointment reminders and service-related communications
• Send promotional communications when you have opted in
• Operate, maintain, and improve our website and services
• Detect and prevent fraud and protect the security of our systems
• Comply with our legal obligations

6. Text Message (SMS) Program

If you provide your mobile number and opt in, you may receive text messages from Natural Rejuvenation related to appointment confirmations, appointment reminders, practice updates, and, if you separately opt in, promotional offers. Consent to receive marketing text messages is not a condition of receiving services or making a purchase.

Message frequency: Message frequency varies.

Cost: Message and data rates may apply.

How to stop or get help: Reply STOP to opt out at any time. Reply HELP for help.

Terms: Your use of the text-message program is also governed by our Terms and Conditions (https://naturalrejuvenationmedspa.com/legal/terms-and-conditions). The opt-in point on our website links to both these Terms and this Privacy Policy.

7. Email Communications

If you opt in, we may send promotional emails. You may unsubscribe at any time by using the unsubscribe link in any marketing email. We will continue to send service-related messages, such as appointment confirmations, as needed to provide the services you request.

8. Cookies, Analytics, Advertising, and Consumer Health Data

We use cookies and similar technologies to operate the website, analyze traffic and usage, and support advertising and remarketing. We may use third-party analytics and advertising tools, such as Google Analytics and the Meta Pixel.

To the extent any of these tools would collect or share consumer health data, we do so only with your consent under the Washington My Health My Data Act, and we obtain your separate consent before sharing consumer health data with an advertising or analytics partner. You can disable cookies through your browser settings, though some website features may not function properly if you do.

9. How We Share Information

We do not sell your personal information for money, and we do not sell consumer health data. Washington law prohibits the sale of consumer health data without a valid, signed authorization, and we do not seek or rely on any such authorization. We may share personal information with the following categories of third parties, described so you can understand what type of entity each is and how it may process your data:

• Service providers and processors: website hosting, scheduling and booking systems, payment processors, email and SMS messaging platforms, and analytics providers, which process data only to perform services for us.
• Advertising and analytics partners: platforms that help us measure and deliver marketing, which may receive website-activity data for analytics and advertising, subject to the consent rules in Section 8.
• Professional advisors: attorneys, accountants, and similar advisors, as needed.
• Legal and safety recipients: government authorities or other parties when required by law or to protect rights, safety, and property.

As stated in Section 6, text-messaging opt-in data and consent are excluded from all of the above sharing for marketing or promotional purposes and are never sold.

10. Your Washington Privacy Rights

If you are a Washington resident, you have the following rights regarding the consumer health data we process, subject to the Washington My Health My Data Act:

• Right to confirm and access: confirm whether we are collecting, sharing, or selling your consumer health data and access that data.
• Right to know recipients: obtain a list of all third parties and affiliates with whom we have shared or to whom we have sold your consumer health data, together with contact information for each.
• Right to withdraw consent: withdraw your consent to our collection and sharing of your consumer health data.
• Right to delete: request that we delete your consumer health data, after which we will notify affiliates, processors, and third parties that received it of your deletion request.
• Right to appeal: appeal our refusal to act on a request, as described in Section 11.

We will not discriminate against you for exercising any of these rights.

11. How to Exercise Your Rights

You may submit a request by emailing us at info@naturalrejuvenationmedspa.com or by calling see our Contact page. You do not need to create an account to submit a request. We may ask you for information to verify your identity before acting on an access or deletion request. An authorized agent may submit a request on your behalf.

We will respond without undue delay and within 45 days of receipt. When reasonably necessary, we may extend that period once by an additional 45 days and will notify you within the first 45 days, with the reason for the extension. Your first request in any 12-month period is complimentary.

Appeals. If we decline to act on your request, we will tell you why and how to appeal. To appeal, reply to our decision or contact us using the details in Section 18. We will respond to an appeal in writing within 45 days. If we deny your appeal, you may contact the Washington State Attorney General to submit a complaint at atg.wa.gov. The My Health My Data Act is enforced under the Washington Consumer Protection Act.

12. Global Privacy Control and Browser Signals

Your browser or device may let you send a privacy preference signal, such as Global Privacy Control. Washington law does not currently require businesses to honor a universal opt-out signal. As a courtesy, where technically feasible, we treat a recognized signal as a request to limit non-essential cookies and advertising activity on that browser or device. You can also disable cookies through your browser settings.

13. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information at a level consistent with the volume and sensitivity of the data. No method of internet transmission or electronic storage is fully secure, and we cannot guarantee absolute security.

14. Data Retention

We retain personal information only as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.

15. Children's Privacy

Our website and services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.

16. Health Information and HIPAA

Natural Rejuvenation is a medical spa. Information you provide in connection with treatment may be protected under HIPAA and Washington health-privacy law, including the My Health My Data Act. This website is not intended for transmitting emergency or highly sensitive medical information. If you become a patient, you will receive our Notice of Privacy Practices, which governs how your PHI is handled.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page with a revised effective date. Material changes will take effect on the date stated in the updated policy.

18. Contact Us

Reach Our Privacy Officer: