Privacy Policy
Short version: We collect your name, contact info, and skin health information to prepare and personalize your treatment. We don't sell your data. We don't share it with third parties beyond what's needed to deliver our services. You can request deletion at any time.
1. Who We Are
Kennedy Skincare is a licensed esthetic studio operated by Kelsey Kennedy, located at 3848 Campus Dr, Suite 107, Newport Beach, CA 92660. We operate this website at kennedy-skincare.com. For questions about this policy, email us at [email protected].
2. Information We Collect
We collect information you provide directly to us, including:
- Contact information — name, email address, phone number
- Health and skin information — skin concerns, skin type, medical history, current medications, known allergies, recent procedures, lifestyle factors — collected via our client intake form
- Booking and transaction information — appointment dates, services booked, payment records (processed by Vagaro — we do not store payment card data)
- Communications — messages sent via our contact form, text messages, or email
- Quiz responses — answers submitted through our skin quiz tool
We also collect certain information automatically when you visit our site:
- Usage data — pages visited, time on site, referring URL, browser type, device type
- Cookies and tracking technologies — via Google Tag Manager and Google Analytics (see Section 5)
3. How We Use Your Information
We use the information we collect to:
- Prepare and personalize your facial treatment
- Communicate with you about appointments, confirmations, and follow-ups
- Send you information you've requested (skin recommendations, at-home routine guidance)
- Respond to your questions and inquiries
- Improve our services and understand how clients find us
- Comply with applicable legal obligations
We do not use your health information for marketing purposes without your explicit consent.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:
- Service providers — Resend (email delivery), Vagaro (appointment booking and payment processing), Upstash (data storage), Vercel (website hosting). These providers are contractually bound to use your data only to provide services to us.
- Legal requirements — If required by law, court order, or government authority.
- Business transfer — In the event of a sale or transfer of the business, your information may transfer to the new owner, who would be bound by this policy.
5. Cookies and Tracking
This website uses Google Tag Manager, which may load Google Analytics and other tracking scripts. These tools use cookies — small text files stored in your browser — to collect anonymous usage data such as pages visited and time on site.
We use this data to understand which pages are most helpful and how visitors find our site. We do not use it to identify you personally.
You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on. You can also control cookies through your browser settings.
6. Health Information
Kennedy Skincare is not a HIPAA-covered entity (we are a licensed esthetic studio, not a medical provider). However, we treat your skin and health information with the same level of care and confidentiality we would expect for sensitive personal data. Your health information is used exclusively to prepare and deliver your treatment and is never shared or sold.
7. Data Retention
We retain your intake form and contact information for as long as you are an active client, and for up to 3 years after your last appointment, unless you request deletion sooner. Anonymous analytics data may be retained longer.
8. Your Rights Under California Law (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know — You can request a summary of the personal information we have collected about you and how we've used it.
- Right to delete — You can request that we delete your personal information, subject to certain exceptions (e.g., legal obligations).
- Right to correct — You can request that we correct inaccurate personal information.
- Right to opt out of sale — We do not sell personal information, so this right does not apply.
- Right to non-discrimination — We will not discriminate against you for exercising any of these rights.
To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request." We will respond within 45 days.
9. Children's Privacy
Our services are intended for adults 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information to us, please contact us immediately so we can delete it.
10. Security
We use industry-standard security measures to protect your information, including encrypted data transmission (HTTPS), access-controlled storage, and third-party providers with their own security certifications. No system is completely secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this policy or how your information is handled, contact us at:
- Email: [email protected]
- Phone: (949) 402-2117
- Address: 3848 Campus Dr, Suite 107, Newport Beach, CA 92660