Privacy Policy

Effective date: June 4, 2026

CLA Aesthetics & Wellness ("CLA", "we", "us", "our") operates https://cla-wellness.com and the connected booking/portal experience. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We comply with applicable U.S. privacy laws including, where relevant, HIPAA standards for medical information and New York State consumer-privacy protections.

1. Information we collect
• Identity & contact details — name, email, phone, address.
• Booking details — service, date, time, notes you share with us.
• Medical intake — date of birth, medications, allergies, pregnancy status, skin concerns and consent (used only to deliver safe treatments).
• Payment details — handled by our PCI-compliant processor (Stripe). We never see or store your full card number or CVC.
• Usage data — pages visited, device and approximate location (for security and product analytics).

2. How we use your information
• To schedule, confirm and deliver your treatments.
• To contact you about appointments, follow-ups, recalls and aftercare.
• To process payments and issue refunds where applicable.
• To comply with legal, tax and medical record-keeping obligations.
• To send marketing communications you have opted into — you may unsubscribe at any time.

3. Sharing & disclosure
We never sell your personal information. We share it only with:
• Service providers acting on our behalf (e.g. Stripe for payments, our SMTP provider for confirmations, our cloud hosting).
• Health-care professionals involved in your care.
• Authorities when required by law (subpoena, court order or as needed to protect rights and safety).

4. Data retention
Medical records are kept for the minimum period required by applicable law. Booking and account data is retained while your account is active and for a reasonable period after closure for legal and accounting purposes.

5. Security
We use TLS in transit, encrypted databases at rest, role-based access and httpOnly secure cookies for authentication. No system is 100% secure — please use a unique password and notify us promptly of suspicious activity.

6. Your rights
You may request: access to your data, correction of inaccuracies, deletion (subject to medical retention laws), restriction of processing, data portability, and to opt out of marketing. Submit any request to cinthia@claaesthetics.com.

7. Cookies
We use strictly-necessary cookies for sign-in and booking, and limited analytics cookies. See our Cookie Policy for details.

8. Children
Our services are not directed to children under 18. We do not knowingly collect personal information from minors without parental consent.

9. Changes to this policy
We may update this policy as our practice evolves. The "Effective date" above reflects the latest version. Material changes will be highlighted on this page.

10. Contact
Questions or requests? Reach Cinthia Lariviere Alexandre at cinthia@claaesthetics.com · 516-620-9158 · 1078 Grand Avenue, South Hempstead, NY 11550.