Privacy Policy

About this policy

This Privacy Policy explains how we collect, use, and share information when you visit and use the Utah Facial Plastics website at https://www.utahfacialplastics.com (the "Site"), and describes your privacy rights.

Who this policy covers

This policy covers the following affiliated legal entities:

• Utah Plastic Surgery, LLC, doing business as Utah Facial Plastics ("Utah Facial Plastics")
• UFP Surgery Center LLC, our QUAD A accredited surgical facility ("the Surgery Center")
• Utah Facial Aesthetics LLC, our med spa ("the Med Spa")

Where this Privacy Policy says "we," "us," "our," or "our practice," it means all three unless a specific entity is named.

Our mailing address is 2255 N 1700 W #200, Layton, UT 84041.

Website information versus medical information

This policy applies to information collected through our Site. It does not govern your medical information.

Protected health information — your medical records, treatment information, insurance and billing records, and anything else covered by the Health Insurance Portability and Accountability Act (HIPAA) or by Utah medical records law — is governed by our Notice of Privacy Practices, not by this policy. You can read the Notice of Privacy Practices at https://www.utahfacialplastics.com, request a copy at any of our offices, or ask the front desk.

If you contact us through the Site about your care, the information you send becomes part of your patient record and is handled under the Notice of Privacy Practices from that point forward.

Definitions

• Cookies are small files placed on your computer, phone, or other device by a website, which record information about your use of that site.
• Device means anything you use to access the Site — a computer, phone, or tablet.
• Personal Data means information that relates to an identified or identifiable individual.
• Service Provider means a company or person that processes data on our behalf to help us operate, provide, or analyze the Site.
• Usage Data means information collected automatically by the Site or its infrastructure, such as how long you spend on a page.
• You means the individual visiting or using the Site.

Information we collect

Information you give us

When you use the Site, we may ask you for:

• Your first and last name
• Email address
• Phone number
• Mailing address, city, state, ZIP or postal code
• Information you choose to include in a message, appointment request, or form

Information collected automatically

We collect Usage Data automatically when you visit the Site, including your device's IP address, browser type and version, the pages you visit, the date and time of your visit, how long you spend on each page, unique device identifiers, and other diagnostic data. If you visit from a mobile device, this may also include your device type, operating system, mobile browser, and mobile device identifiers.

Payment card information

We do not collect or store payment card information through the Site.

Payment cards are collected in our offices and processed through Nextech Payments, the payment service built into our practice management system. If you choose to authorize it, your card is saved on file there for future charges under the terms of the Financial Agreement you signed. Your card is stored by our payment processor, not by this website, and we do not have access to your full card number.

You may remove a card on file at any time by contacting the office. How a card on file may be charged is described in your Financial Agreement and in our Notice of Privacy Practices.

Cookies and tracking technologies

We use cookies and similar technologies — including web beacons, tags, pixels, and scripts — to operate the Site, remember your preferences, and understand how the Site is used.

Cookies are either session cookies, which are deleted when you close your browser, or persistent cookies, which remain on your device. We use both:

• Necessary cookies (session). Required for the Site to function — page navigation, forms, and preventing fraudulent use. Without these, parts of the Site will not work.
• Preference cookies (persistent). Record the choices you make, such as whether you have accepted our cookie notice, so you do not have to set them again.
• Analytics and advertising cookies (persistent). Help us measure how the Site is used and deliver advertising. These are the cookies you can decline — see Your Privacy Choices below.

You can set your browser to refuse all cookies or to warn you when one is being sent. If you refuse cookies, some parts of the Site may not work.

How we use your information

We use the information we collect to:

• Operate, maintain, and monitor the Site
• Respond to your questions, appointment requests, and other messages
• Contact you by email, phone, or text about a request you have made or a service you have asked about
• Send you news, promotions, and information about services and products similar to those you have purchased or asked about, unless you have opted out
• Analyze how the Site is used, identify trends, and measure the effectiveness of our marketing
• Detect and prevent fraud, identity theft, and other unlawful activity
• Comply with legal obligations, respond to subpoenas or valid requests from public authorities, and protect our legal rights
• Evaluate or carry out a merger, sale, or other transfer of our business, in which case information about Site users may be among the assets transferred

How we share your information

We share information with:

• Service providers who host the Site, send our email, manage our forms, and provide analytics and advertising services on our behalf
• Advertising and analytics partners, as described in the next section
• Public authorities, when required by law or in response to a valid legal request
• A successor, if we are involved in a merger, acquisition, or asset sale. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

We do not sell your personal information, and we never sell your protected health information for advertising purposes.

Analytics and advertising partners

Google Analytics. We use Google Analytics to understand how the Site is used, including which pages you visit, the sites you visited before ours, and the IP address of the device you use. Google sets and reads cookies to collect this data. You can prevent this by installing the Google Analytics Opt-out Browser Add-on in each browser you use.

Google Ads. We use Google Ads to serve advertising across the internet and on the Site. Google uses cookies and similar identifiers to collect information about your visits and generate advertising on other sites you visit. You can opt out or adjust your preferences through Google's Ad Settings.

Meta (Facebook) Pixel. We use pixels provided by Meta Platforms, Inc. so we can measure the effectiveness of our Facebook and Instagram advertising and, in some cases, show ads to people who have visited the Site. Meta stores and processes this data and may associate it with your Facebook account. You can adjust what advertising Meta shows you through your Facebook ad preferences, and you can read how Meta uses this data in Meta's Privacy Policy.

AdRoll. Our display advertising partner AdRoll places cookies so we can show you advertising on other sites based on your previous visits to the Site. You can opt out of AdRoll and its partners' targeted advertising through the AdRoll opt-out page.

To change your preferences for online advertising generally, visit the Network Advertising Initiative consumer opt-out page or the Digital Advertising Alliance self-regulatory program. Changing your settings in one browser or with one ad network does not carry over to others, so you may still see our ads from time to time.

Your Privacy Choices — Do Not Sell or Share My Personal Information

We do not sell your personal information, and we never sell your protected health information for advertising purposes.

Like most healthcare and aesthetics websites, we use third-party analytics and advertising technologies on our public website — including Google Analytics, Google Ads, and Meta (Facebook) tools. Under certain state privacy laws, the transfer of website data (such as cookie identifiers, IP address, and browsing activity) to these advertising partners may be considered a "sale" or "sharing" of personal information, or may be treated as "targeted advertising."

You have the right to opt out. You may do so in any of the following ways:

• Adjust your cookie preferences. Use the cookie settings on this Site to decline advertising and analytics cookies at any time.
• Turn on a browser privacy signal. See the "Global Privacy Control and Universal Opt-Out Signals" section below.
• Submit a request to us directly. Email us at info@utahfacialplastics.com with the subject line "Privacy Request," or call our office at 801.776.2220.

What to include in a request. So we can locate your information and confirm your identity, please provide your full name, the email address and phone number associated with you, and a description of the request. We will not use this information for any purpose other than responding to your request.

Authorized agents. You may designate someone to submit a request on your behalf. We may ask that person for proof of authorization, and we may ask you to verify your identity directly with us.

Our response. We will confirm receipt of your request and respond within 45 days. If we need additional time, we will notify you of the extension and the reason for it. If we decline a request, we will explain why, and you may ask us to reconsider by replying to our response.

No penalty for exercising your rights. We will not deny you services, charge you a different price, or provide you a different level of care or service because you exercised a privacy right.

Important limits. Certain information is not covered by these choices. Protected health information governed by HIPAA, medical records governed by state law, and information we are legally required to retain are handled under those laws and under our Notice of Privacy Practices rather than under this section. An opt-out also does not stop us from contacting you about your care, your appointments, or your account.

Global Privacy Control and Universal Opt-Out Signals

Some browsers and browser extensions allow you to send an automatic signal telling websites that you do not want your personal information sold or shared, or used for targeted advertising. The most widely used of these is the Global Privacy Control (GPC).

We use a consent management tool on this Site to manage advertising and analytics cookies, and we are working to ensure that universal opt-out signals such as GPC are recognized automatically. In the meantime, you can opt out at any time using the cookie settings on this Site, or by contacting us directly using the methods in "Your Privacy Choices" above.

A few things to know about how browser signals work:

• A signal applies only to the browser and device you are using. If you visit from a different browser, a different device, or in private/incognito mode, you would need to enable it there as well.
• Clearing your cookies may reset the setting. If you clear your browsing data, your preference may need to be re-applied on your next visit.
• Browser signals do not affect your patient records. They apply to website advertising and analytics activity. It does not change how we maintain, use, or disclose your medical information, which is governed by HIPAA and our Notice of Privacy Practices.
• Essential website functions continue. Cookies necessary for the site to work — such as those that keep forms and page navigation functioning — remain in place.

To learn more about the Global Privacy Control, including which browsers and extensions support it, visit globalprivacycontrol.org.

If you would prefer to opt out manually instead of using a browser signal, see "Your Privacy Choices — Do Not Sell or Share My Personal Information" above.

Your other privacy rights

In addition to the opt-out rights above, you may ask us to:

• Confirm whether we hold personal information about you, and tell you what we collect and who we share it with
• Provide a copy of the personal information you have given us, in a portable format where required by law
• Correct personal information that is inaccurate or incomplete
• Delete personal information we have collected about you

To make any of these requests, use the contact methods in Your Privacy Choices above. We may need to retain certain information where we have a legal obligation or lawful basis to do so — including medical records, which are subject to retention requirements under state and federal law and are addressed in our Notice of Privacy Practices.

You may also update or opt out of future marketing communications at any time by using the unsubscribe link in our emails or by contacting us.

How long we keep your information

We keep personal information only as long as necessary for the purposes described in this policy, and as long as needed to comply with our legal obligations, resolve disputes, and enforce our agreements. Usage Data is generally kept for a shorter period, except where we use it to strengthen security or improve the Site, or where we are required to retain it longer.

Where your information is processed

Your information is processed at our offices and at the locations of the service providers involved in processing it, which may be outside your state or country, where data protection laws may differ. We take steps reasonably necessary to ensure your information is treated securely and in accordance with this policy.

Security

The security of your information matters to us. However, no method of transmitting information over the internet or storing it electronically is completely secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.

Children's privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Site. If you are a parent or guardian and believe your child has provided us with personal information through the Site, please contact us and we will delete it.

Minors do receive care at our practice. When a parent or guardian submits information about a minor patient, or a minor is treated by us, that information is part of the patient record and is handled under our Notice of Privacy Practices rather than under this policy.

Social media

We are active on social media, including Facebook, Instagram, X, YouTube, Pinterest, and TikTok. If you comment on or post to our social media pages, we may repost that content on our websites and social media pages. We are not responsible for how third parties may repost or interpret content once it appears on a third-party platform.

We also use advertising services offered by these platforms, which may set cookies or pixels to deliver ads to you while you are logged in to the platform. For your advertising choices on a particular platform, see that platform's privacy policy.

Links to other websites

The Site may link to websites we do not operate. If you follow a third-party link, you will be taken to that site, and we have no control over and take no responsibility for its content or privacy practices. We encourage you to review the privacy policy of every site you visit.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the "Last updated" date above. If the changes are material, we will provide notice through a prominent notice on the Site, by email where we have your address, or both, before the change takes effect. Changes take effect when posted unless we state otherwise.

We encourage you to review this policy periodically.

Contact us

If you have questions about this Privacy Policy or want to exercise a privacy right:

• Email: info@utahfacialplastics.com
• Phone: 801.776.2220
• Mail: 2255 N 1700 W #200, Layton, UT 84041
• Online: use the Contact form at https://www.utahfacialplastics.com

For questions about your medical information or our HIPAA practices, contact our Executive Director, Jenny Yergensen, at jenny@utahfacialplastics.com or the mailing address above.