This Privacy Policy explains how Mila MD, LLC and its affiliated professional entities (collectively, “Mila Face,” “we,” “us,” or “our”) collect, use, disclose, and protect personal information when you visit milaface.com, contact us, or request a consultation.
01 / SCOPE
What This Policy Covers
This Policy applies to personal information we collect through our website, online forms, text and email communications, telephone and AI-assisted phone interactions, and in-person or virtual consultation inquiries. It does not cover information governed by HIPAA in our capacity as a healthcare provider, which is addressed in our Notice of Privacy Practices, or the independent privacy practices of third parties we link to or work with (such as patient-financing providers).
02 / COLLECTION
Information We Collect
We collect the categories of personal information below. Not every category is collected from every individual; what we collect depends on how you interact with us.
| CATEGORY | EXAMPLES |
|---|---|
| Identifiers | Name, email address, phone number, mailing address, IP address, and online identifiers. |
| Consultation & inquiry information | Information you provide in booking or contact forms, areas of aesthetic interest, and the substance of your messages to us. |
| Communications content | Text (SMS), email, chat, and call content, including recordings and transcripts where applicable. |
| Commercial / transaction information | Consultations requested, deposits or payments, and financing inquiries directed to third-party providers. |
| Internet & device activity | Pages viewed, referring/exit pages, device and browser data, and information from cookies and similar technologies. |
| Approximate location | General location inferred from IP address or used to route you to the nearest location. |
| Sensitive personal information | Information that may reveal health interests or conditions you choose to share when inquiring about a procedure. |
03 / SOURCES
How We Collect Information
- Directly from you — when you complete a form, call or text us, or correspond with us.
- Automatically — through cookies, pixels, and analytics tools when you use our website.
- From service providers — such as our communications, scheduling, and analytics vendors acting on our behalf.
04 / USE
How We Use Information
- To respond to inquiries, schedule and confirm consultations, and provide customer service.
- To communicate with you by phone, text, and email, including appointment and payment messages you have consented to receive.
- To operate, secure, maintain, and improve our website and services.
- To process deposits and payments and to direct financing inquiries to third-party providers at your request.
- To comply with legal obligations and enforce our terms.
- For marketing consistent with your choices and applicable law.
05 / DISCLOSURE
How and With Whom We Share Information
We do not sell your personal information for money. We disclose personal information in the following ways:
- Service providers / processors — vendors that perform services for us, such as website hosting, scheduling and communications (including our messaging and AI front-desk provider), payment processing, and analytics, under contracts that restrict their use of the information.
- Patient-financing providers — when you choose to apply for financing (for example, CareCredit, Cherry, Alphaeon), your information goes to that provider, which is an independent company with its own privacy policy.
- Affiliated Mila Face entities — within our corporate and professional-entity structure as needed to provide services.
- Legal and safety — to comply with law, respond to legal process, or protect rights, safety, and property.
- Business transfers — in connection with a merger, financing, acquisition, or sale of assets.
06 / COOKIES
Cookies & Tracking Technologies
We use cookies and similar technologies, grouped into categories such as strictly necessary, preference, and analytics cookies. We do not currently use advertising or marketing cookies. The specific cookies in each category, and their current status, are listed in our cookie preference center, which is managed by Enzuzo and refreshed from periodic scans of the site. You can manage cookies through your browser settings and through our Enzuzo cookie preference center [Cookie Settings link].
Global Privacy Control. We recognize opt-out preference signals, including the Global Privacy Control (GPC), as a valid request to opt out of sale/sharing for the browser sending the signal, as required in California and Texas.
Do Not Sell or Share My Personal Information. You may exercise this choice at [link to opt-out page].
07 / TEXT MESSAGING
SMS / Text Communications
If you provide your mobile number and consent, we may send you text messages relating to consultations, appointments, and payments, and (separately) marketing texts where you have opted in. Message and data rates may apply. Reply STOP to opt out and HELP for help. Consent to receive texts is not a condition of any service.
08 / CALLS & AI ASSISTANT
Call Recording & Automated Phone Assistance
When you call us, your call may be answered or assisted by an automated virtual assistant and may be recorded or transcribed for quality, scheduling, and record-keeping. Where required, we will disclose recording at the start of the call and obtain any consent the law requires.
09 / RETENTION
How Long We Keep Information
We retain personal information for as long as needed to fulfill the purposes described in this Policy, and thereafter as required for legal, regulatory, accounting, or security purposes, in accordance with our records-retention schedule [reference internal schedule / state medical-record retention periods].
10 / SECURITY
How We Protect Information
We maintain administrative, technical, and physical safeguards designed to protect personal information appropriate to its sensitivity. No method of transmission or storage is completely secure. In the event of a breach of private information, we will notify affected individuals and regulators as required by applicable law, including the New York SHIELD Act and other state breach-notification laws.
11 / YOUR RIGHTS
Your Choices
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to opt out of sale/sharing or targeted advertising, and to limit the use of sensitive personal information. State-specific details follow. To make a request, see Contact Us. We will not discriminate against you for exercising these rights.
12 / CALIFORNIA
California Privacy Notice
This section supplements the Policy for California residents and is provided under the California Consumer Privacy Act, as amended (CCPA/CPRA).
Notice at Collection
The categories of personal information and sensitive personal information we collect, the purposes for which we use them, and whether we sell or share them are described in Sections 02–05 above. We retain each category as described in Section 09.
Categories Collected, Disclosed, Sold, or Shared (Prior 12 Months)
| ACTIVITY | DETAIL |
|---|---|
| Categories collected | See Section 02. |
| Categories disclosed for a business purpose | Identifiers, consultation/inquiry information, commercial information, and internet activity, disclosed to service providers. |
| Categories “sold” | None for monetary value. |
| Categories “shared” for cross-context behavioral advertising | [Depends on ad-tech — see Draft Note in Section 05] |
| Sensitive personal information | Used only for permitted business purposes; not used to infer characteristics. |
Your California Rights
- Know / Access — request the categories and specific pieces of personal information we have collected.
- Delete — request deletion of personal information, subject to legal exceptions.
- Correct — request correction of inaccurate personal information.
- Opt out of sale/sharing — direct us not to sell or share your personal information.
- Limit use of sensitive personal information — restrict use to permitted purposes.
- Non-discrimination — exercise your rights without being denied service or charged a different price.
How to Exercise & Authorized Agents
Submit a request via [request method / webform / toll-free number]. We will verify your identity before responding. You may use an authorized agent, with proof of authorization. We will respond within the timeframes the CCPA requires.
Shine the Light
California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. [Confirm whether any such disclosures occur.]
13 / TEXAS & OTHER STATES
Notice for Texas and Other State Residents
If you are a resident of Texas, you may have rights to confirm whether we process your personal data, access and obtain a copy of it, correct it, delete it, and opt out of targeted advertising, sale, and certain profiling.
Sensitive data. We obtain your consent before processing sensitive data, as required under Texas law.
How to exercise & appeals. Submit a request via privacy@milaface.com If we decline your request, you may appeal in writing to our Privacy Officer at dhopkins@milaface.com if your appeal is denied, you may contact the Texas Attorney General.
14 / CHILDREN
Children’s Privacy
Our website and services are intended for adults and are not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children. [Confirm minimum age and any minor-patient handling with counsel.]
15 / THIRD PARTIES
Third-Party Links
Our website may link to third-party sites and services, including financing providers. We are not responsible for their privacy practices, and we encourage you to review their policies.
16 / CHANGES
Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new “Last Updated” date and, where required, provide additional notice.
17 / CONTACT
Contact Us
| Mila Face – Mila MD, LLCPrivacy requests: privacy@milaface.com Mail: 128 Central Park South, New York, NY 10019Phone: 322-301-2610 |