Privacy Policy
Updated: August 11, 2026
Welcome to Grand Medical Spa! This Privacy Policy describes how we collect, use, disclose, and store your personal information when you interact with our website, applications, products, and services. By accessing or using Grand Medical Spa, you consent to the collection and processing of your personal information as described in this Privacy Policy.
1. Information We Collect
We may collect various types of information when you interact with Grand Medical Spa, including:
1.1 Personal Information: When you create an account, make a purchase, contact us, or use certain features of Grand Medical Spa, we may collect personal information, such as your name, email address, billing address, and other contact details.
1.2 Usage Information: We may collect information about how you interact with Grand Medical Spa, such as your IP address, browser type, device information, access times, and pages viewed. This information is collected using cookies and similar technologies.
2. Use of Information
We may use the collected information for the following purposes:
2.1 Providing and Personalizing Grand Medical Spa: We may use your personal information to provide, maintain, and improve Grand Medical Spa, and to personalize your experience.
2.2 Communication: We may use your personal information to communicate with you, respond to your inquiries, and provide customer support.
2.3 Analytics and Research: We may use the collected information for analytical purposes, such as understanding user behavior, improving our services, and conducting research.
2.4 Legal Compliance: We may use your personal information to comply with applicable laws, regulations, and legal processes.
3. Sharing of Information
We may share your personal information in the following circumstances:
3.1 Service Providers: We may engage trusted third-party service providers to assist us in providing Grand Medical Spa or performing related services. These service providers will have access to your personal information only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.
3.2 Business Transfers: If Grand Medical Spa undergoes a change in ownership, such as a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you via email or prominent notice on Grand Medical Spa of any such change in ownership or control.
3.3 Legal Requirements: We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
3.4 Marketing: Grand Medical Spa may share your email address and other contact information with trusted third-party companies for marketing purposes, including but not limited to promotional offers, advertisements, and product/service recommendations. By using our website, you consent to the sharing of your information for these purposes. However, Grand Medical Spa will not sell or rent your personal information to third parties for their marketing purposes without your explicit consent.
No mobile numbers, personal information data, or opt-in consent data will be shared with third parties for commercial purposes. We do not share or sell your personally identifiable information to third parties for marketing purposes, and no mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
4. Data Security
We employ industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, please be aware that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Your Choices
You have certain choices regarding the personal information we collect and how it is used:
5.1 Account Information: You may review, update, or delete your account information by accessing your account settings within Grand Medical Spa or by contacting us directly.
5.2 Communications: You may opt out of receiving promotional communications from us by following the instructions in those communications or by contacting us. Please note that even if you opt out, we may still send you non-promotional messages, such as administrative or transactional notifications.
6. Children's Privacy
Grand Medical Spa is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us, and we will take appropriate steps to remove that information.
7. Notice of Privacy Practices
THIS SECTION DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Understanding Your Health Record/Information
This notice describes the practices of Grand Medical Spa with respect to your protected health information created while you are a patient of Grand Medical Spa. Grand Medical Spa and personnel authorized to have access to your medical chart are subject to this notice.
We create a record of the care and services you receive from Grand Medical Spa. We understand that medical information about you and your health is personal. The Health Insurance Portability and Accountability Act of 1996 ("HIPAA") is a federal statute that requires that all protected health information used or disclosed by Grand Medical Spa in any form, whether electronically, on paper, or orally, is kept confidential. We are committed to protecting medical information about you. This notice applies to all of the records of your care by Grand Medical Spa.
This notice will tell you about how we may use and disclose medical information about you. We also describe your rights and certain obligations we have regarding the use and disclosure of medical information.
Your Health Information Rights
Although your health record is the physical property of Grand Medical Spa, the information belongs to you. You have the right to:
• Inspect and request a paper or electronic copy of your health record as provided by law;
• Request that we amend your health record as provided by law. We will notify you if we are unable to grant your request to amend your health record;
• Request communication of your health information by alternative means or at alternative locations. We will accommodate reasonable requests;
• Request a restriction on certain uses and disclosures of your information for treatment, payment, health care operations and as to disclosures permitted to persons, including family members involved with your care and as provided by law. However, we are not required by law to agree to a requested restriction, unless the request relates to a restriction on disclosures to your health insurer regarding health care items or services for which you have paid out-of-pocket and in full;
• Obtain an accounting of disclosures of your health information as provided by law;
• Obtain a paper copy of this notice of information practices; and
• Choose someone to act for you if you have given someone medical power of attorney or if someone is your legal guardian. We will verify the person's authority before we take action.
You may exercise your rights set forth in this notice by providing a written request to Grand Medical Spa at contact@grandmedspaca.com.
Our Responsibilities
In addition to the responsibilities set forth above, we are also required to:
• Maintain the privacy of your health information;
• Subject to certain exceptions under the law, provide notice of any unauthorized acquisition, access, use or disclosure of your protected health information to the extent it was not otherwise secured;
• Provide you with a notice as to our legal duties and privacy practices with respect to information we maintain about you;
• Abide by the terms of this notice; and
• Notify you if we are unable to agree to a requested restriction on certain uses and disclosures.
Uses and Disclosures of Medical Information That Do Not Require Your Authorization
The following categories describe different ways that we may use and disclose medical information without your authorization. For each category of uses or disclosures we will explain what we mean, but not every use or disclosure in a category will be listed. However, all of the ways we are permitted to use and disclose information without your authorization should fall within one of the categories.
We will use your health information for treatment.
For example: We may disclose medical information about you to doctors, nurses, technicians, or other personnel who are involved in taking care of you. We may share medical information about you in order to coordinate different treatments, such as prescriptions and lab work. We may also provide your physician or a subsequent healthcare provider with copies of various reports to assist in treating you once you are discharged from care by Grand Medical Spa.
We will use your health information for payment.
For example: A bill may be sent to you or a third-party payer. The information on or accompanying the bill may include information that identifies you, as well as your diagnosis, procedures, and supplies used.
We will use your health information for regular health care operations.
For example: We may use the information in your health record to assess the care and outcome in your case and others like it. This information will then be used in an effort to continually improve the quality and effectiveness of the health care and services we provide.
We will use and disclose your health information as otherwise allowed by law. Examples of those uses and disclosures follow:
Business associates: There are some services provided in our organization through agreements with business associates. Examples include answering services and copy services. To protect your health information, however, we require business associates to appropriately safeguard your information.
Notification: Unless you object, we may use or disclose information to notify or assist in notifying a family member, personal representative, or another person responsible for your care about your location and general condition.
Individuals involved in your care: Unless you object, we may disclose to a family member, other relative, a close personal friend or other person you identify the health information that is directly relevant to that person's involvement in your health care or payment for your health care. If you are not able to agree or object to such disclosure, we may disclose the information as necessary if we determine it is in your best interest in our professional judgment.
Disaster relief: We may use or disclose your health information to public or private disaster relief organizations to coordinate your care or to notify your family or friends of your location or condition in a disaster. We will provide you with an opportunity to agree or object to these disclosures when practical.
Research: We may disclose information to researchers when their research has been approved by an institutional review board that has reviewed the research proposal and established protocols to protect the privacy of your health information.
Communications regarding treatment alternatives and appointment reminders: We may contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you.
Food and Drug Administration (FDA): We may disclose to the FDA health information relative to adverse events with respect to medications, medical devices, supplements, products, and product defects, or post-marketing surveillance information to enable product recalls, repairs, or replacement.
Worker's compensation: We may disclose health information to the extent authorized by and to the extent necessary to comply with laws relating to worker's compensation or other similar programs established by law.
Public health: As required by law, we may disclose your health information to public health or legal authorities charged with preventing or controlling disease, injury, or disability.
Abuse, neglect or domestic violence: As required by law, we may disclose health information to a governmental authority authorized by law to receive reports of abuse, neglect, or domestic violence.
Judicial, administrative and law enforcement purposes: Consistent with applicable law, we may disclose health information about you for judicial, administrative and law enforcement purposes.
Health oversight activities: We may disclose health information to a health oversight agency for activities authorized by law, such as audits, investigations, inspections and licensure.
Threats to health or safety: We may use or disclose health information as allowed by law if we believe in good faith that it is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, or for law enforcement authorities to identify or apprehend an individual involved in a crime.
Special government functions: We may disclose health information to authorized federal officials for intelligence, counter-intelligence and other national security activities authorized by law, or for protective services to the President of the United States or certain other government officials. If you are a member of the military, we may disclose health information to military authorities under some circumstances. If you are an inmate of a jail, prison or other correctional facility or in the custody of law enforcement personnel, we may disclose health information necessary for your health and the health and safety of others.
Required or allowed by law: We will disclose medical information about you when required or allowed to do so by federal, state or local law.
Electronic Health Information Exchange: We use a third party to maintain our electronic medical records ("EMR") and store electronic health information about you in the EMR. We monitor who can view your EMR and limit access to the personnel with an actual need to access your information.
When We Need Your Written Authorization
Any uses or disclosures outside the scope described above will be made only with your written authorization. Most uses or disclosures of psychotherapy notes, and of protected health information for marketing purposes and the sale of protected health information, require an authorization. You may revoke such authorization in writing at any time and Grand Medical Spa is required to honor and abide by that revocation, except to the extent that it has already taken actions relying on your authorization.
8. SMS Communication Policy
8.1 Consent to Receive SMS Messages: By providing your phone number, you expressly consent to receive SMS messages from Grand Medical Spa for purposes including, but not limited to, marketing, promotions, account notifications, and customer service.
8.2 Frequency of SMS Messages: The frequency of SMS messages will vary based on your interactions with Grand Medical Spa. We may send you SMS messages for updates, promotions, and important information regarding your account or transactions.
8.3 Opt-Out of SMS Messages: You can opt out of receiving SMS messages at any time. To stop receiving SMS messages, reply "STOP" to any message you receive from us. You will receive a confirmation message indicating that you have been unsubscribed. You can also contact our customer service team directly to be removed from our SMS messaging list.
8.4 Message and Data Rates: Standard message and data rates may apply for any SMS messages sent to you by Grand Medical Spa. Please contact your mobile phone carrier for details about your specific plan and any applicable fees.
8.5 Security and Privacy: We take your privacy seriously. The information you provide to us is governed by this Privacy Policy. We use appropriate technical and organizational measures to protect the personal data that we collect and process about you.
8.6 Collection of Personal Information: When you opt in to receive SMS messages from Grand Medical Spa, we may collect certain personal information such as your phone number, your carrier's name, and the date, time, and content of your messages. We use this information to provide you with the SMS services you have requested and to operate and improve our services.
8.7 Use of Information: Your information may be used to:
• Send you SMS messages you have requested;
• Manage and operate our SMS services;
• Improve customer service and support; and
• Ensure compliance with relevant laws and regulations.
8.8 Third-Party Disclosure: We do not sell, trade, or otherwise transfer your personal information to outside parties without your consent, except as required by law or to trusted third parties who assist us in operating our services, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.
8.9 Changes to this SMS Communication Policy: Grand Medical Spa reserves the right to modify or update this SMS Communication Policy at any time. We will notify you of any significant changes by posting the new policy on our website and updating the effective date at the top of the policy.
9. Changes to This Privacy Policy
It is our policy to post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat our users' personal information, we will notify you through a notice on the Website home page. The date this Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Website and this Privacy Policy to check for any changes.
We may change our policies and this notice at any time and have those revised policies apply to all the protected health information we maintain. Grand Medical Spa will periodically post, from time to time, and you may request a written copy of, any updated versions of this notice.
10. Contact Information & How to Report a Problem
To ask questions or comment about this Privacy Policy and our privacy practices, contact us at contact@grandmedspaca.com or [Grand Medical Spa phone number].
If you believe your privacy rights have been violated, you can send a complaint to Grand Medical Spa at contact@grandmedspaca.com. You may also contact Grand Medical Spa directly by telephone at [Grand Medical Spa phone number]. For all complaints, please ask for or direct attention to the Privacy Officer.
You can also send a complaint to the U.S. Department of Health and Human Services, Office for Civil Rights, Centralized Case Management Operations, 200 Independence Ave., S.W., Suite 515F, HHH Building, Washington, D.C. 20201, by calling the Customer Response Center at (888) 368-1019, by facsimile at (202) 619-3818, by TDD at (800) 537-7697, by email at ocrmail@hhs.gov, or by visiting https://www.hhs.gov/hipaa/filing-a-complaint/index.html.
There will be no retaliation against you for filing a complaint.