Privacy Policy

Last Updated: April 21, 2026

Introduction

Charlotte Medical Aesthetics ("CMA," "we," "our," or "us") is committed to protecting the privacy of our patients, website visitors, and anyone who interacts with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at charlottemedicalaesthetics.com, book an appointment, receive treatment, or communicate with us through any channel.

By using our website or services, you consent to the practices described in this policy. If you do not agree, please discontinue use of our website and services.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide to us, including:

  • Contact information such as your name, email address, phone number, and mailing address
  • Appointment and scheduling details submitted through our online booking system or contact forms
  • Health and medical history provided during consultations, intake forms, or treatment planning
  • Payment and billing information processed through our secure third-party payment providers
  • Communications you send to us via email, phone, text message, or our website contact form
  • Before-and-after photographs taken with your written consent for treatment documentation or marketing use

Information Collected Automatically

When you visit our website, we may automatically collect:

  • Device and browser information including IP address, browser type, operating system, and screen resolution
  • Usage data such as pages visited, time spent on pages, referring URLs, and click behavior
  • Location data derived from your IP address at the city or regional level
  • Cookies and similar tracking technologies as described in the Cookies section below

Information From Third Parties

We may receive information from third-party platforms you use to interact with us, including online scheduling systems, social media platforms, and review sites.

How We Use Your Information

We use the information we collect for the following purposes:

  • Providing, managing, and improving our medical aesthetic services
  • Scheduling and confirming appointments
  • Communicating with you about your treatment plan, appointments, and follow-up care
  • Processing payments and maintaining billing records
  • Sending marketing communications, promotions, and service updates when you have opted in
  • Responding to your inquiries and requests
  • Complying with legal, regulatory, and professional obligations
  • Maintaining and improving our website functionality and user experience
  • Analyzing website traffic and usage patterns to improve our services
  • Protecting against fraud, unauthorized access, and other security concerns

Protected Health Information and HIPAA

Charlotte Medical Aesthetics is a physician-led medical practice and a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). This means we are required to maintain the privacy of your protected health information (PHI) and provide you with notice of our legal duties and privacy practices.

Your Rights Under HIPAA

You have the following rights with respect to your protected health information:

Right to Access. You may request to inspect and obtain a copy of your medical records and other PHI maintained by our practice.

Right to Request Amendment. You may request that we amend your PHI if you believe it is inaccurate or incomplete.

Right to an Accounting of Disclosures. You may request a list of certain disclosures we have made of your PHI.

Right to Request Restrictions. You may request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations.

Right to Request Confidential Communications. You may request that we communicate with you about your health information using a specific method or at a specific location.

Right to a Copy of This Notice. You have the right to receive a paper copy of this notice upon request.

To exercise any of these rights, contact us using the information provided at the end of this policy.

How We May Use and Disclose Your PHI

We may use and disclose your protected health information without your authorization for the following purposes:

  • Treatment: To provide, coordinate, and manage your medical aesthetic care
  • Payment: To bill and collect payment for the services we provide
  • Healthcare Operations: To support business activities such as quality assessment, staff training, licensing, and accreditation

We will obtain your written authorization before using or disclosing your PHI for purposes not described above, including marketing purposes and before-and-after photography used in promotional materials.

Notice Regarding Substance Use Disorder Records

In compliance with the 2026 HIPAA Privacy Rule update, any substance use disorder (SUD) patient records maintained by our practice receive the same protections as all other PHI under this notice.

SMS and Marketing Communications

Text Messages

If you opt in to receive SMS messages from Charlotte Medical Aesthetics, you agree to receive text messages related to appointment reminders, treatment follow-ups, promotional offers, and service updates. Message and data rates may apply. Message frequency varies.

You may opt out of SMS messages at any time by replying STOP to any message. After opting out, you will receive one confirmation message and no further texts unless you re-subscribe. We will honor your opt-out request within 10 business days.

We will never send SMS messages to individuals who have not provided express written consent. Your consent to receive SMS messages is not a condition of purchasing any goods or services.

Email Marketing

If you opt in to receive marketing emails, we may send you information about treatments, skincare tips, special offers, and clinic updates. You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

Telephone Communications

We may contact you by phone for appointment confirmations, treatment-related follow-ups, and wellness check-ins as permitted under the Telephone Consumer Protection Act (TCPA).

Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help us understand how you use our site and improve your experience.

Cookies We Use

Strictly Necessary Cookies. Required for core website functionality such as page navigation and secure areas. These cannot be disabled.

Analytics Cookies. Help us understand how visitors interact with our website by collecting information about pages visited, time on site, and traffic sources. We use Google Analytics for this purpose.

Marketing Cookies. Used to track visitors across websites to display relevant advertisements. These may be set by third-party advertising partners.

Functional Cookies. Remember your preferences and choices to provide a more personalized experience.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect website functionality.

Third-Party Analytics

We use Google Analytics to analyze website traffic. Google Analytics uses cookies to collect anonymized data about your visits. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Data Sharing and Third Parties

We do not sell your personal information to third parties. We may share your information with:

  • Service Providers: Third-party vendors who assist with payment processing, appointment scheduling, email delivery, website hosting, and analytics. These providers are contractually obligated to protect your information and use it only for the services they perform on our behalf.
  • Legal Compliance: When required by law, regulation, legal process, or government request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
  • With Your Consent: When you provide explicit consent for a specific disclosure.

We maintain Business Associate Agreements (BAAs) with all third-party vendors who have access to protected health information, as required by HIPAA.

Data Security

We implement administrative, technical, and physical safeguards to protect your personal information and PHI from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of electronic PHI at rest and in transit
  • Access controls limiting PHI access to authorized personnel
  • Regular security risk assessments
  • Staff training on privacy and security practices

While we take reasonable measures to protect your information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information and medical records in accordance with applicable federal and state requirements. Medical records are retained for a minimum period as required by North Carolina law. Non-medical personal information is retained for as long as necessary to fulfill the purposes described in this policy or as required by law.

Breach Notification

In the event of a security breach involving your personal information, we will notify affected individuals without unreasonable delay in accordance with the North Carolina Identity Theft Protection Act (N.C. Gen. Stat. 75-61 et seq.) and HIPAA breach notification requirements. Notification will include a description of the breach, steps we are taking to address it, and guidance on how to protect yourself.

Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a child under 18, we will delete it promptly.

Your North Carolina Privacy Rights

North Carolina residents have the right to be notified of security breaches involving their personal information under the Identity Theft Protection Act. You also have the right to place a security freeze on your credit report at no cost.

As of the date of this policy, North Carolina has not enacted a comprehensive consumer data privacy law. If such legislation is enacted, we will update this policy to reflect any additional rights afforded to North Carolina residents.

Links to Other Websites

Our website may contain links to third-party websites and services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes your acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your HIPAA rights, or want to file a privacy complaint, contact us at:

Charlotte Medical Aesthetics
1818 Cumberland Ave
Charlotte, NC 28203
Phone: (980) 704-4206
Email: hello@charlottemedicalaesthetics.com

You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated.

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Toll-free: 1-877-696-6775
Website: hhs.gov/ocr/privacy

Filing a complaint will not affect the care you receive from Charlotte Medical Aesthetics.