PRIVACY POLICY

This Policy describes how and why Avalon Body Sculpting and Face Tightening and its affiliates (Company) collects, stores, uses and/or shares (Process) our clients (Client) information when Client uses Company services (Services) for example:

=       Sign up on Company website or any website of Company’s that links to this Specific Privacy Policy

=       Download and use Company’s web/mobile applications, Company’s Facebook, Instagram, Twitter, Google, Envision, Clover or any other application that links to this  Privacy Policy

=       Engage with Company in other related ways, included to but not limited to sales, disputes, marketing or events.

This Policy will help all related parties understand their privacy rights and choices. If you do not agree with Company policies and practices, please refrain from using our services. If you have any questions or concerns relating to this Policy please feel free to contact us by email at Avalon@avalonbodysculpting.com.

Processing Information

- When Client visits, uses or navigates Company Services, Company considers all Client information that is inputted into Company systems as Private and as such will not be shared with anyone outside our internal systems.

- The Client information we record will depend on how you verbally interact with Company, the Service type, the choices you select and the features you use.

- Company does not collect information from Clients under 18 years old.

- All collected Client information is stored behind secure firewalls that require pre- approved user authorization codes to access. These codes are only available to - Company employees and management who are all under strict Code of Conduct and Information Security Agreements.

- All Sensitive information is treated as confidential and the storage and handling of such information is administered under HIPAA ACT of 1996 guidelines.  https://www.cdc.gov/phlp/publications/topic/hipaa.html#:~:text=The%20Health%20Insurance%20Portability%20and,the%20patient's%20consent%20or%20knowledge.

- Company processes Client information to provide, improve and administer Company services, payments, communicate with the Client, for security and fraud protection/ prevention and to comply with regulations and the law.  Company will only process Client information only when Company has a legitimate reason to do so.

- Some Client information is shared internally with Company processing Backoffice affiliates, in which case these affiliates are bound by this Policy including parent/child companies, any subsidiaries, JV partners, or other companies that Company controls.

- Company may use cookies and similar technologies to access or connected applications. Our current technologies do not allow external cookies through application/browser firewall blocks.

Information Provided

- Generally, Company collects personal information that Client voluntarily provides to Company when you register for services, expresses an interest in obtaining information about our services, when you participate in our services, of otherwise when you contact us.

- Some information, such as your IP, country, device location, and or browser and device characteristics, is automatically collected when you visit our services or sites.

- Company specifically will only collect, the following information from Client:

=       General Health information including Demographics

=       Payment Information

=       Contact Information and Address

- Information collected when Client uses Facebook and all other SEO platforms that are made public by you is not protected under our Policy as it is already in the public domain.

Rights

- Clients have the right to have their personal data protected and not being unlawfully processed, and Company has the responsibility to do all within its power to protect Client’s data.

- Client can exercise Client’s rights by contacting Company and notifying Company by email of any potential breach of Policy. The Potential Breach information must be sent in within 48 hours of detection and be detailed enough to give Company sufficient information to address and mitigate potential breach in the shortest time possible. Company will consider and act upon any requests in accordance with applicable data protection laws.

- Client has the right at any time to change/review or terminate Client account and related information by emailing a formal request to Avalon@avalonbodysculpting.com . Once accepted by Company, Company will proceed to deactivate Client account and information from Company active databases. However, Company will retain certain information in our filing system to prevent fraud, trouble shoot problems, assist with investigations, enforce our legal terms and/or comply with applicable legal requirements.

Notice

- Company does not control, and are not responsible for other uses of your personal information, by your social media providers. We recommend that you review their individual privacy  policies to understand how they protect your rights to information privacy.  Company maintains all client files for Seven (7) years after Client has received a service from Company. Our Privacy Policy is reviewed and update once a year or in the event there is regulatory and or change required to improve the protection of our Clients and Company.(Whichever is earlier)