LEGAL
Last updated: October 7, 2026
Hella Tight Aesthetics (“Hella Tight,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit hellatightaesthetics.com, contact us, request or schedule an appointment, make a payment, or otherwise interact with our online services. Information collected as part of your medical care may be subject to additional federal and state privacy protections and, where applicable, our Notice of Privacy Practices.
1. Information We Collect
Information You Provide to Us. We may collect personal information that you voluntarily provide, including your name, email address, telephone number, mailing or billing address, appointment and scheduling information, information submitted through contact, intake, consultation, or appointment forms, communications you send to us, payment and transaction information, health-related information you voluntarily provide in connection with requesting or receiving services, photographs or other information provided in connection with treatment, and other information you choose to provide.
Please avoid submitting sensitive medical information through general website contact forms or ordinary email unless requested by us. When available, medical information should be submitted through the secure systems designated by our practice.
Information Collected Automatically. When you visit our Website, certain information may be collected automatically, including your IP address, browser and device information, operating system, pages visited, referring website, date and time of visits, and general Website activity and interaction information. Our Website is hosted by Squarespace, which may use cookies and similar technologies necessary to operate, secure, and understand the use of the Website. We do not currently use Meta Pixel, Google Analytics, or similar third-party advertising tracking technologies on our Website.
2. Health and Medical Information
Because Hella Tight Aesthetics provides healthcare services, information collected in connection with your care may include information about your health, medical history, medications, treatments, photographs, or other healthcare information. Medical information collected in connection with your care may be maintained through our electronic health record, scheduling, or practice-management systems. Where applicable, protected health information is handled in accordance with HIPAA, applicable New York law, and our Notice of Privacy Practices. This Website Privacy Policy does not replace any Notice of Privacy Practices required under HIPAA.
3. Appointment Scheduling and Practice Management
We use Boulevard for certain appointment scheduling and practice-management functions. When you schedule an appointment or otherwise interact with our booking system, information such as your name, contact information, appointment details, service selections, and other information you provide may be processed through Boulevard. Information submitted through third-party scheduling or practice-management platforms may also be subject to the privacy and security practices applicable to those services.
4. How We Use Your Information
We may use information we collect to respond to inquiries and appointment requests; schedule, confirm, modify, and manage appointments; provide medical aesthetics and wellness services; maintain appropriate patient and business records; communicate with you regarding appointments, services, treatment, or your account; process and document payments; provide administrative and customer support; send promotional communications where permitted by law and consistent with your communication preferences; operate, secure, maintain, and improve our Website; understand general Website usage and performance; prevent fraud, misuse, or security incidents; comply with applicable healthcare, licensing, regulatory, tax, accounting, and legal obligations; and establish, exercise, or defend our legal rights. We do not use protected health information for advertising or marketing in a manner prohibited by applicable healthcare privacy laws.
5. When We Share Information
We do not sell your personal information. We may disclose personal information to service providers that assist us in operating our Website and practice, including providers of website hosting and functionality, appointment scheduling and practice management, electronic health records, payment processing, communications, information technology and security, and accounting, legal, and other professional services. Depending on how you interact with us, these providers may include Squarespace, Boulevard, Stripe, Square, Venmo, Zelle, our electronic health record provider, and other vendors necessary to provide or administer our services. Service providers receive information only as appropriate for the services they perform for us and are subject to applicable contractual and legal requirements. Where a third party handles protected health information on our behalf and is considered a business associate under HIPAA, we require appropriate safeguards and agreements as required by law. We may also disclose information where required or permitted by law, including responding to valid legal process or regulatory requirements and protecting the rights, safety, or security of our patients, practice, or others.
6. Payments
We may accept payment through our practice-management or electronic health record systems as well as payment services such as Stripe, Square, Venmo, and Zelle. When you make a payment through a third-party payment provider, that provider may collect information necessary to complete the transaction. Depending on the payment method, this may include your name, payment account information, billing information, transaction amount, and other information necessary to process your payment. We generally receive information confirming the transaction but may not receive or store complete credit or debit card numbers when payments are processed directly by a third-party payment processor. Your use of a third-party payment service may also be subject to that provider’s privacy policy and terms.
7. Cookies and Website Analytics
Our Website is hosted by Squarespace. Squarespace uses cookies and similar technologies to provide and secure Website functionality and may collect information about Website usage. Cookies are small files stored on your device that may help websites operate correctly, remember preferences, maintain security, and understand Website activity. We do not currently use Google Analytics, Meta Pixel, or similar third-party advertising tracking technologies. You may be able to control cookies through your browser settings and, where available, through our Website’s cookie preferences. Disabling certain cookies may affect Website functionality.
8. Email and Text Messages
If you provide us with your email address or telephone number, we may use it to communicate with you regarding inquiries, appointments, services, payments, or other practice-related matters. If you separately consent to promotional email or text communications, you may withdraw that consent at any time. You may unsubscribe from promotional emails using the unsubscribe mechanism included in the message. For promotional text messages, you may reply STOP to opt out. Opting out of promotional communications does not prevent us from sending communications reasonably necessary for your appointments, care, transactions, or relationship with the practice. We do not sell mobile telephone numbers, text-message opt-in information, or text-message consent information to third parties for their independent marketing or promotional purposes.
9. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe information you provided to us has been compromised, please contact us promptly at hello@hellatightaesthetics.com.
10. Data Retention
We retain personal information for as long as reasonably necessary to provide our services, maintain our relationship with you, fulfill the purposes described in this Privacy Policy, and comply with applicable healthcare, professional, regulatory, tax, accounting, and legal requirements. Medical records and clinical information may be subject to separate legal retention requirements and may therefore be retained even if you request deletion of other personal information.
11. Your Privacy Rights
Depending on applicable law and your place of residence, you may have certain rights concerning your personal information, including rights to request access to certain personal information we maintain about you, correction of inaccurate information, deletion of certain personal information, information about certain disclosures of your information, and withdrawal of certain consents. These rights are not absolute and may be subject to legal exceptions. For example, we may be required to maintain certain medical, financial, or business records despite a request for deletion. To make a privacy request, contact us at hello@hellatightaesthetics.com. We may take reasonable steps to verify your identity before fulfilling a request. Additional rights concerning your medical records and protected health information may be described in our Notice of Privacy Practices.
12. Children’s Privacy
Our Website and services are intended for adults and are not directed toward children under 18. We do not knowingly use our Website to solicit personal information from children under 18 without appropriate authorization. If you believe a child has submitted personal information to us without appropriate authorization, please contact us.
13. Third-Party Services and Links
Our Website may contain links to or integrations with third-party websites and services, including scheduling, payment, social-media, or other services. We do not control the independent privacy practices of third parties. When you interact directly with a third-party service, that provider’s privacy policy and terms may apply. We encourage you to review the privacy practices of services you choose to use.
14. Do Not Track and Privacy Controls
Some browsers and devices provide “Do Not Track” or other privacy preference signals. Because there is not a universally accepted standard governing all such signals, our Website may not respond to every Do Not Track signal. Where applicable law requires recognition of a particular privacy preference signal or opt-out mechanism, we will comply with those requirements.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our Website, services, technology, vendors, privacy practices, or legal requirements. When we make changes, we will update the Effective Date at the top of this Privacy Policy. We encourage you to review this Policy periodically.
16. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact Hella Tight Aesthetics at 109 N 12th Street, Suite 806, Brooklyn, NY 11249; hello@hellatightaesthetics.com; or hellatightaesthetics.com.
17. Medical Information and Notice of Privacy Practices
This Privacy Policy governs our general Website and business privacy practices. It is not intended to replace rights or obligations applicable to protected health information under HIPAA or other healthcare privacy laws. Where HIPAA or another applicable healthcare privacy law provides additional protections for information collected in connection with your medical care, those requirements will govern that information. Please refer to our Notice of Privacy Practices for additional information concerning how medical information may be used or disclosed and your rights concerning that information.