Privacy,
itemized.

We may collect the following personal information when you interact with our website or services:

• Full Name
• Email Address
• Date of Birth
• Phone Number

We also use cookies and tracking tools, such as Google Analytics, to collect data about your website usage for analytical purposes.

During a homepage comparison, we store the version assigned to your browser and local assignment and exposure times so return visits can see the same version. We use Google Analytics to compare website engagement, visits to information pages, return visits, and booking-link clicks by homepage version. Booking-link clicks do not tell us whether an appointment was made. The comparison continues until we explicitly end it; it has no preset end date. Its browser state remains in use for that experiment until we retire it and is removed when your browser next runs the updated website. Preview selection lasts until you exit or your browser tab session ends. Preview and measurement-check markers keep testing activity excluded from the comparison until the experiment is retired. No new patient, appointment, or cross-device identifier is created. You can remove this state by clearing this site's data.

Homepage comparison disclosure amended September 15, 2026.

The information we collect is used for the following purposes:

• To send you requested materials, such as downloadable PDFs or newsletters.
• To enroll you in marketing campaigns and provide relevant email content.
• To manage our relationship with you via our CRM (Customer Relationship Management) platform.

As a California resident, you are entitled to specific rights under the California Consumer Privacy Act (CCPA):

1. Right to Access

   You may request to know what personal data we have collected about you.

2. Right to Deletion

   You may request that we delete your personal information from our records.

3. Right to Opt-Out

   You may opt out of receiving marketing communications at any time.

To exercise any of these rights, please contact us at hello@calistamedspa.com.

If you no longer wish to receive marketing emails, you can unsubscribe using the link provided at the bottom of each email. Your request will be processed promptly.

We do not knowingly collect personal information from individuals under 13 years of age. If you believe a child has provided us with their personal data, please contact us at hello@calistamedspa.com.

Our Skincare Shop may collect your full name, phone number, email address, acknowledgement of transactional contact, and the products and quantities you request. We use this information only to review your purchase request, confirm availability, and contact you about next steps. Sending a request does not place an order, reserve inventory, or collect payment.

We use Amazon Web Services to securely receive the request and deliver it to our hello@calistamedspa.com mailbox. Staging test requests go to danny@calistamedspa.com. Only authorized Calista staff may access the notification. We delete the request notification and any provider delivery-feedback message after follow-up is complete and any needed record is entered into our existing business system, or within 30 days, whichever occurs first. This transactional contact permission is separate from marketing consent, and we do not use the request to enroll you in marketing.

On the Skincare Shop, Google Analytics records when visitors select a product details link, add or remove a product in the cart, open or clear the cart, begin a purchase request, or receive confirmation that a new request was accepted. Product events include the public catalog product ID and the number of units added or removed. Google Analytics uses browser identifiers, so these actions can be associated with a visit, and a sequence of product actions may reveal an approximate cart. We do not send your name, phone number, email address, form entries, or purchase-request identifier to Google Analytics. A purchase request is not a purchase or payment.

Amazon Web Services also briefly processes your IP address to route the request, check its IP reputation, and limit automated abuse. We do not put the IP address in the request, notification, application storage, analytics, or retained evidence, and request logging and sampling are disabled.

Please do not submit payment information, shipping information, medical or skin information, or other sensitive details. To ask about or request deletion of your information, contact hello@calistamedspa.com.

This Privacy Policy is effective as of November 18, 2024. We may update it from time to time, and any changes will be reflected here. Please check back periodically for updates.

If you have any questions about this Privacy Policy, please contact us at hello@calistamedspa.com.