California Privacy Act Policy Luxe Aesthetic Center

California Privacy Act Policy

Effective Date: July 04, 2026

This California Privacy Act Policy supplements Luxe Aesthetic Center’s Privacy Policy and explains the rights of California residents under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Note that medical information governed by HIPAA and the California Medical Information Act (CMIA) is addressed in our Privacy Policy & Notice of Privacy Practices.

1. Scope

This policy applies to California residents whose personal data we collect through our Site, online forms, in-person visits, or other communications.

2. Categories of Personal Information Collected

In the last 12 months, we may have collected:

Identifiers: name, address, phone number, email.
Commercial information: appointment details and services booked.
Health/medical information: treatment preferences or notes (voluntarily provided). Sensitive personal information is handled with additional protections.
Internet activity: IP address, browser data, and interactions with the Site.
Inferences: preferences or interests based on treatments or inquiries.

3. Sources of Information

We collect this information directly from you and from forms on our website, email or phone communication, cookies and analytics tools, and social media interactions.

4. Use of Personal Information

We may use this information to schedule and manage appointments, recommend treatments, communicate with you, improve our services, and comply with laws or respond to legal requests.

5. Disclosure of Personal Information

We may disclose your information to authorized service providers (e.g., schedulers, email marketing platforms), legal authorities when required, and third parties with your explicit consent. We do not sell your personal information.

6. Your California Privacy Rights

If you reside in California, you have the right to know what personal data we collect and how we use it; request deletion of your personal data; correct inaccurate data; opt out of the sale or sharing of personal information (if applicable); limit the use of sensitive personal information, including health information; and be free from discrimination for exercising these rights.

7. How to Exercise Your Rights

Submit your request by email at info@luxemedspa.net or by phone at (714) 970-9100. We may verify your identity before processing requests. Where required by law, we honor the Global Privacy Control (GPC) signal as a valid opt-out request.

8. Data Retention

We retain data only as long as needed for business purposes or legal compliance, based on treatment type, customer engagement, or regulatory requirements.

9. Do Not Sell or Share My Information

Luxe does not sell or share personal information as defined under the CCPA/CPRA. If this changes, we will update this policy and provide a method to opt out.