Privacy Policy

Effective Date: October 5, 2026

At Elysian Skin & Wellness, we are committed to protecting your privacy and safeguarding your personal, financial, and medical information. This Privacy Policy outlines how we collect, use, disclose, and protect your information in strict compliance with New York State laws, including the New York SHIELD Act and the data retention requirements of the New York State Department of Health.

1. Information We Collect

To provide you with safe, high-quality luxury medical aesthetic treatments, we collect the following categories of information:

• Personal Identifiers: Name, email address, phone number, mailing address, and date of birth.

• Health and Medical Information: Comprehensive medical histories, skin types, allergies, current medications, and past cosmetic treatments required to safely perform clinical procedures like Botox, fillers, smooth PDO threads, microneedling, and PRP hair restoration.

• Visual Information: Before-and-after photographs taken for mandatory medical tracking, clinical charts, and (only with your explicit, separate written consent) marketing or social media purposes.

• Financial Information: Credit card and billing data collected via our secure, encrypted payment processor to secure bookings and enforce our $25 no-show/late cancellation fee.

• Communications: Any data or text messages sent to our dedicated business line at 516-780-0445, emails, or digital intake forms submitted through our portal.

2.How We Use Your Information

We use your information strictly to operate our medical spa practice and deliver your services safely under New York medical guidelines:

• To manage, schedule, and confirm your appointments.

• To review your mandatory digital intake and consent forms at least 24 hours prior to your arrival.

• To tailor and safely administer your aesthetic and wellness treatment plans

.• To enforce our 24-hour cancellation policy and collect booking fees.

• To send you operational text alerts and portal updates.

3. Information Sharing and Disclosure

We do not sell, rent, trade, or lease your personal or health information to third parties. We only disclose your data under the following conditions:

• Service Providers: Secure, HIPAA-compliant, and PCI-compliant software vendors who manage our scheduling, client portal, intake forms, and payment processing.

• Medical Oversight: When necessary to coordinate care with our New York-licensed Medical Directors, clinicians, or supervising practitioners.

• Legal Compliance: If required by law, regulation, subpoena, or government authority, or to protect the safety and rights of our practice and clients.

4. Text Messaging (SMS) Communications

By providing your phone number and interacting with our client portal, you consent to receive text messages from Elysian Skin & Wellness regarding appointment updates and booking confirmations.

• You can text 516-780-0445 at any time for last-minute cancellations or general questions.

• You may opt out of automated SMS text communications at any time by replying "STOP".

5. New York SHIELD Act & Data SecurityIn compliance with the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act, we maintain robust administrative, technical, and physical safeguards to protect your private information. All financial transactions are encrypted using secure socket layer technology (SSL) via PCI-DSS compliant processors. Your health questionnaires and digital records are stored securely in encrypted, password-protected electronic medical records (EMR) systems.

6. Patient Rights and New York Medical Data RetentionUnder New York State law, you have specific rights regarding your information:

• Access and Correction: You have the right to request access to and review your personal and medical records.

• Data Retention: In accordance with New York State Department of Health and medical board regulations, Elysian Skin & Wellness retains adult medical records for a minimum of six (6) years from the date of the last treatment.

Because these records are legally mandated clinical charts, they cannot be deleted or destroyed upon request prior to the expiration of this statutory period.

7. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect operational or legal updates. Any changes will be posted on this page with an updated "Effective Date."

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy, your rights, or how your data is handled, please contact us at:

• Elysian Skin & Wellness•

Text/Phone: 516-780-0445