Privacy Policy
Elite Beauty, Inc. d/b/a Plus Cosmetic Surgery Center
This Privacy Policy explains how Elite Beauty, Inc., doing business as Plus Cosmetic Surgery Center (“we,” “us,” or “our”), collects, uses, stores, and protects personal information when you visit our website, submit an inquiry, participate in our SMS messaging program, contact us through Instagram Direct Messages or WhatsApp, or interact with our business on Meta platforms.
1. Who We Are
Elite Beauty, Inc. is a corporation registered in the State of Florida, United States, operating as Plus Cosmetic Surgery Center. We are responsible for the personal information described in this policy and act as its data controller where applicable law uses that term.
2. Scope of This Policy
This policy applies to personal information processed through:
- Our website and its inquiry and consultation request forms.
- Our SMS messaging program.
- Instagram Direct Messages sent to our business account.
- WhatsApp messages sent to our WhatsApp Business number, including through the WhatsApp Business Platform / Cloud API.
- Related interactions on Facebook, Instagram, and other Meta products that result in a message or inquiry to us
We use Chatwoot, a customer communication platform, to receive and respond to messages. Chatwoot acts as a data processor on our behalf. We also use messaging and technical service providers, including Twilio for SMS delivery.
Our Notice of Privacy Practices separately addresses protected health information and applicable patient rights, as explained in Section 8.
3. Information We Collect
Information You Provide
Depending on how you contact us, we may collect:
- Your name, telephone number, and email address.
- Information you provide about an inquiry, consultation, appointment, or service request.
- Messages and attachments you choose to send through our communication channels, including text, images, files, and voice notes.
- Your communication preferences and requests for assistance.
Our general website inquiry forms request contact information for responding to inquiries and arranging consultations.
We do not request passwords, payment card numbers, or sensitive medical information through general inquiry forms or ordinary messaging channels. Please do not send medical records, medical photographs, detailed health information, or payment card information through these channels. Contact our office for an appropriate way to provide sensitive information.
Information from Meta Platforms
We may receive:
- Public profile information made available by the platform, such as your username, display name, and profile picture.
- Platform-specific identifiers, such as your Instagram-scoped ID or WhatsApp telephone number, used to route and respond to messages.
- Message metadata, including timestamps and delivery status.
SMS Information and Consent Records
For our SMS program, we collect or maintain:
- Your mobile telephone number.
- Your consent choices for service-related and marketing messages.
- Records of consent, including the date, source, and disclosure associated with your subscription.
- Message content, timestamps, and delivery information.
- Opt-out requests and other messaging preferences.
Website and Technical Information
Our website and technical service providers may collect your IP address, browser and device information, access times, pages visited, and technical logs used to operate and secure the website.
4. How We Use Your Information
We use personal information to:
- Receive, read, and respond to inquiries and messages.
- Provide information about our services.
- Arrange consultations and manage appointments.
- Provide customer support and scheduling assistance.
- Send service-related SMS messages when you have opted in.
- Send occasional promotional SMS messages when you have separately opted in to marketing texts.
- Maintain correspondence, consent, and communication preference records.
- Operate, secure, and improve our website and communication services.
- Comply with legal obligations and protect our legal rights.
We do not sell your personal information, and we do not use the content of your messages for advertising targeting.
5. SMS Communications and Consent
Our SMS program operates under the name Plus Cosmetic Surgery Center.
With your consent, we may send service-related messages concerning your inquiry, consultation, appointment confirmations, reminders, scheduling updates, and customer support.
If you separately consent to marketing texts, we may also send occasional promotions, special offers, and information about our services.
SMS enrollment takes place through our website using optional consent checkboxes that are not selected in advance. Consent to service-related messages and consent to marketing messages are collected separately.
Providing your telephone number, submitting an inquiry, accepting website terms, or contacting us through Instagram or WhatsApp does not by itself enroll you in our SMS program.
Messages may be sent using automated technology. Message frequency varies according to your interactions with us and your selected message categories. Message and data rates may apply.
Consent to receive SMS messages is not a condition of purchase, consultation, or medical care.
Reply STOP to unsubscribe. Reply HELP for assistance.
You may also contact us at +1 (305) 778-7818 or info@pluscosmeticsurgerycenter.com.
After you opt out, we may send one confirmation message. We will stop further messages from the SMS program unless you provide new consent. We may retain information needed to honor your opt-out request and document compliance.
Opting out of SMS does not cancel an appointment or affect your eligibility for care.
For additional information, please review our Terms of Service.
6. Mobile Information and SMS Consent Protection
No mobile information will be shared with third parties or affiliates for their marketing or promotional purposes.
Text messaging originator opt-in data and consent will not be sold, rented, transferred, or shared with third parties or affiliates for their independent use.
We may provide limited access to mobile information and consent records to service providers acting on our behalf solely as necessary to deliver, administer, secure, and support our messaging program. These providers are not authorized to use that information for their own marketing or to enroll you in another messaging program.
The other information-sharing provisions in this policy do not permit the sale or transfer of SMS consent or the sharing of mobile information for third-party marketing.
7. How We Share Information
We share personal information only as necessary with:
- Meta platforms: To transmit and manage communications through Instagram, Facebook, and WhatsApp, subject to the platforms’ own privacy policies.
- Chatwoot: To receive, manage, and respond to communications on our behalf.
- Twilio and messaging service providers: To transmit and support SMS communications on our behalf.
- Hosting and IT providers: To operate, maintain, and secure our systems under appropriate confidentiality and use restrictions.
- Authorities: Where required by law, regulation, legal process, or an enforceable governmental request.
Service providers processing information on our behalf may use it only as necessary to provide their services, subject to applicable contractual and legal obligations.
SMS information and consent remain subject to the additional protections in Section 6.
8. Medical Information and Notice of Privacy Practices
This Privacy Policy describes our website and communication practices. It does not replace our Notice of Privacy Practices, which explains how protected health information may be used and disclosed and describes applicable patient rights under HIPAA.
Where information is protected health information, we handle it in accordance with applicable healthcare privacy laws and our Notice of Privacy Practices. You may request a copy from our office using the contact information below.
Submitting a website inquiry or consenting to SMS messages does not authorize us to publish patient photographs, testimonials, or medical information and does not replace a separate authorization where one is legally required.
9. Legal Bases for Processing
Where applicable law, such as the EU or UK GDPR, requires a legal basis for processing, we rely on the basis appropriate to the activity, including:
- Consent: For optional communications and other processing where consent is required.
- Legitimate interests: To respond to inquiries, administer business communications, and maintain the security and functioning of our services, where those interests are not overridden by your rights.
- Legal obligations: Where we must retain, process, or disclose information to comply with applicable law.
Where processing relies on consent, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
10. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support website functionality and understand website usage. Depending on the technologies enabled, information collected may include browser and device information, pages visited, and interactions with the website.
You may manage cookies through your browser settings and any privacy controls available on the website. Disabling cookies may affect certain features.
This policy does not authorize the disclosure of protected health information to advertising platforms. Processing of protected health information remains subject to applicable healthcare privacy requirements.
11. International Data Transfers
We are based in the United States. Meta platforms and other service providers may operate globally, and information may be processed in the United States or other countries where our providers operate.
Where required by applicable law, we rely on appropriate safeguards for international transfers.
12. Data Retention
We retain personal information only as long as reasonably necessary to respond to inquiries, provide services, maintain business and communication records, honor communication preferences, and meet legal obligations.
Retention periods may vary depending on the information and its purpose. Consent and suppression records may be retained to demonstrate consent and prevent further messaging after an opt-out.
When information is no longer needed, we delete or anonymize it as appropriate. Medical records and other legally required records remain subject to applicable retention requirements.
13. Data Security
We apply reasonable technical and organizational measures to protect information against unauthorized access, loss, or misuse, including access controls and secure transmission where supported.
No method of transmission or storage is completely secure. Ordinary SMS messages may be accessible to anyone with access to your device or mobile account. Contact our office for an appropriate channel for sensitive communications.
14. Your Rights and Choices
Depending on applicable law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of certain information.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us using the details below. We may need to verify your identity before responding. Requests are subject to applicable legal exceptions and retention requirements.
Rights relating to protected health information are described in our Notice of Privacy Practices.
15. How to Request Deletion of Your Data
Send a request to info@pluscosmeticsurgerycenter.com with the subject line “Data Deletion Request.”
Contact us from the account or telephone number you used to communicate with us, or provide enough information for us to identify the relevant interaction. Please do not include sensitive medical information in the request.
We will review and respond within the period required by applicable law, subject to identity verification and legal retention requirements.
Deleting communication information does not necessarily require deletion of medical records, consent records, or information needed to honor an opt-out.
16. Children’s Privacy
Our website inquiry forms and SMS program are intended for adults age 18 or older. Our services are not directed to children under age 13, and we do not knowingly collect personal information from children under 13 through these channels.
If you believe a minor has provided personal information, contact us so we can review the matter and take appropriate action under applicable law.
17. Third-Party Websites
Our website and communications may contain links to websites or services operated by third parties. Their handling of personal information is governed by their own privacy policies. Please review those policies before providing information.
18. Changes to This Policy
We may update this Privacy Policy. When we do, we will revise the “Last Updated” date and post the updated policy on this page. Where required, we will provide additional notice or obtain consent.
Changes to this policy do not automatically expand the scope of your SMS consent.