Legal
Privacy policy
Effective Date: November 1, 2026
1. Overview
At Vein Clinic & Med Spa, we are committed to protecting your privacy and safeguarding your personal and health information.
This Privacy Policy explains how we collect, use, disclose, store, and protect information obtained through our website, appointment requests, contact forms, and electronic communications.
We do not sell or rent personal information. We may share limited information with authorized service providers when necessary to operate our practice, provide requested services, or comply with applicable laws.
Patient health information is handled in accordance with applicable federal and California privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA).
2. Information We Collect
We collect information reasonably necessary to provide our services, respond to inquiries, and improve our operations.
Information may include:
- Personal Information: Name, email address, telephone number, and other contact details.
- Appointment Information: Appointment requests, scheduling preferences, confirmations, and related communications.
- Health-Related Information: Information voluntarily provided regarding medical concerns, treatments, or services.
- Communication Information: Messages submitted through website forms, telephone calls, emails, or text messages.
- Website Usage Information: IP address, browser type, device information, cookies, and website activity collected through applicable technologies.
We encourage patients not to submit sensitive medical information through unsecured website forms, email, or standard text messaging.
3. How We Use Your Information
We may use collected information to:
- Schedule, confirm, and manage appointments.
- Respond to patient inquiries and service requests.
- Provide medical, aesthetic, and administrative services.
- Send appointment reminders, follow-up communications, and practice updates.
- Communicate information regarding services and treatments.
- Send educational materials, promotional offers, or special announcements when permitted by law and applicable consent requirements.
- Improve website functionality, security, and patient experience.
- Maintain records and comply with applicable legal and regulatory obligations.
We do not use or disclose Protected Health Information for purposes that require patient authorization without obtaining the appropriate authorization, unless otherwise permitted by law.
4. SMS and Text Messaging Privacy
Vein Clinic & Med Spa may offer SMS communications for appointment reminders, confirmations, scheduling updates, patient inquiries, and promotional messages where appropriate consent has been obtained.
SMS Consent
By affirmatively opting in to an applicable messaging program, you consent to receive text messages from Vein Clinic & Med Spa consistent with your selected communication preferences.
Consent to receive promotional text messages is not a condition of purchasing or receiving medical or aesthetic services.
Message Frequency and Charges
Message frequency varies based on appointment activity, inquiries, and selected messaging preferences. Message and data rates may apply.
Opt-Out
You may opt out of SMS communications at any time by replying STOP. Reply HELP for assistance or contact our office at 949-272-9919.
We honor applicable requests to withdraw messaging consent in accordance with law.
Mobile Information Sharing
No mobile information will be shared with third parties or affiliates for their independent marketing or promotional purposes.
Text messaging originator opt-in data and consent will not be shared with third parties or affiliates for their marketing or promotional purposes.
We may use authorized messaging service providers solely to deliver communications on our behalf, subject to applicable privacy and confidentiality obligations.
For additional information, please review our SMS Service & Privacy Policy.
5. Disclosure and Sharing of Information
Vein Clinic & Med Spa does not sell or rent personal information or Protected Health Information.
We may disclose information in the following circumstances:
- Authorized Service Providers: To vendors providing appointment scheduling, electronic medical records, secure messaging, website hosting, payment processing, or administrative support.
- Healthcare Operations: For treatment, payment, and healthcare operations, as permitted by applicable law.
- Patient Authorization: When you have provided legally valid authorization or consent.
- Legal Requirements: When disclosure is permitted or required by applicable laws, court orders, or legal processes.
- Business Transfers: In connection with a lawful merger, acquisition, or transfer of practice assets, subject to applicable confidentiality and healthcare privacy requirements.
Authorized service providers are required to protect information in accordance with applicable privacy and security obligations. Where required by HIPAA, appropriate Business Associate Agreements are maintained.
We may also disclose information that has been properly de-identified in accordance with applicable law.
We do not share SMS opt-in data or messaging consent with third parties or affiliates for their independent marketing purposes.
6. Protection of Health Information (HIPAA)
Vein Clinic & Med Spa is committed to protecting the privacy and confidentiality of patient health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable federal and California laws.
We maintain appropriate administrative, physical, and technical safeguards to protect health information from unauthorized access, use, or disclosure. Patient information is accessed, used, and disclosed only as permitted or required by law.
We respect patients' privacy rights and are committed to addressing privacy concerns in accordance with applicable regulations.
7. Data Security
We use reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, loss, misuse, or disclosure.
These safeguards may include access restrictions, secure systems, confidentiality procedures, and appropriate employee training.
Although we take precautions to protect personal information, no electronic storage or communication system can be guaranteed to be completely secure.
8. Data Retention
We retain personal information for as long as reasonably necessary to provide services, comply with legal and healthcare recordkeeping obligations, manage business operations, and resolve disputes.
10. California Privacy Rights
California residents may have certain rights concerning their personal information under applicable California privacy laws, including the California Consumer Privacy Act (CCPA), where applicable.
These rights may include access, correction, and deletion of certain personal information, subject to applicable legal exceptions. Certain medical records and Protected Health Information are governed by separate healthcare privacy laws.
For privacy-related requests, please contact our office using the information provided below.
11. Children's Privacy
We recognize the importance of protecting children's personal information.
Our website is not directed toward children under the age of 13, and we do not knowingly collect personal information directly from children under 13 in violation of applicable privacy laws, including the Children's Online Privacy Protection Act (COPPA), where applicable.
Information relating to minors receiving healthcare services is handled in accordance with applicable federal and California laws concerning parental consent, minors' confidentiality, and patient privacy.
12. International Data Processing
Certain authorized technology or service providers may process information in locations outside California or the United States.
Where such processing occurs, we require applicable privacy and security protections and comply with legal requirements governing patient information.
13. Third-Party Websites
Our website may contain links to third-party websites, scheduling platforms, or other external services.
Vein Clinic & Med Spa is not responsible for the privacy practices, content, or security of websites that we do not control.
We encourage visitors to review the privacy policies of external websites before providing personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, technology, privacy practices, or legal obligations.
Revisions will be posted on our website with an updated effective date.
We encourage visitors to review this policy periodically.
15. Accessibility Statement
Vein Clinic & Med Spa is committed to improving the accessibility and usability of our website for all visitors, including individuals with disabilities.
We continue to review our website and third-party tools, including contact forms, scheduling features, and chat functions, to identify opportunities to improve accessibility.
We are working with our service providers to address accessibility limitations, including labeling and navigation issues that may affect users of assistive technologies.
If you experience difficulty accessing our website, need information in an alternative format, or require assistance scheduling an appointment, please contact us.
Phone: 949-272-9919 Email: info@veinandmedspa.com
Please identify the website page or feature involved and describe the assistance needed. For privacy and security reasons, do not include sensitive medical information in standard email communications.
We will make reasonable efforts to assist you and provide accessible alternatives where appropriate.
16. Contact Information
For questions regarding this Privacy Policy, patient privacy rights, or our information practices, please contact:
Vein Clinic & Med Spa 431 N. Tustin Ave., Suite B Santa Ana, CA 92705
Phone: 949-272-9919 Email: info@veinandmedspa.com Website: www.veinandmedspa.com
We are committed to protecting your privacy and maintaining the confidentiality of the information entrusted to our practice.