Privacy Policy

This Privacy Policy describes how B&B Laser & Med Spa ("we", "our", "us") collects, uses, and protects information when you visit our website, book an appointment, or receive services at our Cypress, Texas location.

1. Information We Collect

• Information you provide: name, contact details, date of birth, billing information, treatment history, medical and skin information you share for the safe delivery of services.
• Automatic information: device, browser, IP address, pages viewed, referrer, and similar analytics data collected through cookies and similar technologies.
• Booking platform data: information submitted through our online booking system at citas.bandblaserspa.com.

2. How We Use Your Information

• To schedule, confirm and deliver treatments safely and effectively.
• To process payments and maintain client records.
• To communicate appointment reminders, aftercare, promotions you have opted into, and customer support.
• To comply with Texas state law, HIPAA, and other applicable regulations.
• To improve our website, services, and operations.

3. Sharing of Information

We do not sell your personal information. We may share information with vetted service providers (booking platform, payment processors, communications, IT, analytics) under written confidentiality and HIPAA Business Associate Agreements where applicable, and with regulatory authorities when required by law.

4. Your Rights

You may request access to, correction of, or deletion of your personal information, subject to our legal and clinical record-keeping obligations. Texas residents have rights under the Texas Data Privacy and Security Act ("TDPSA"). To exercise your rights, please email bblaserspa99@gmail.com.

5. Security

We implement administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

7. Contact

This page is provided as a general template. It does not constitute legal advice. We recommend reviewing this policy with qualified legal counsel before publishing in production.