Privacy Policy
The short version
- Reading the site does not require an account, and we do not ask who you are.
- We do not sell personal information, and we do not share it with the clinics we are affiliated with, or with anyone else, for their marketing.
- If you email us, we use your message to reply and to keep a record of corrections. Please do not send us health information.
- Provider listings are not open. If they open and you apply for one, we will collect professional details, check them against public licensing records, and publish the fields described on the application page.
- You can ask us at any time what we hold about you and to correct or delete it.
Who we are
The site is published by MedSpa Marketing SEO, a subsidiary of The Search Sherpa LLC, a medical spa marketing agency that provides paid marketing services to Express Med Spa and Catara Med Spa. The clinics are separate businesses with their own websites and their own privacy policies. This policy covers chemicalpeel.org only. When you follow a link to a clinic’s website, that clinic’s policy applies.
What we collect and why
When you read the site
Our hosting provider records standard server log data for every request: your IP address, the date and time, the page or file requested, the page that referred you, and your browser and device type. These logs are used to keep the site running, to defend it against attacks and abuse, and to diagnose errors. Our host may also operate automated abuse and bot filtering in front of the site, which can record the addresses of requests it blocks. Server logs are kept for a limited period set by the hosting provider and are then deleted or anonymized.
The site uses caching to load faster. Caching does not identify you. When you use the site’s search box, the words you search for appear in the page address and in the server logs described above.
Third-party resources loaded by the site
Pages load fonts from Google Fonts (Google LLC) and emoji images from WordPress.org. Author images may be loaded from Gravatar (Automattic Inc.). When your browser fetches those files it sends your IP address and browser information to that provider, subject to that provider’s privacy policy. We do not receive anything back from them about you.
Analytics and advertising
The site runs no analytics tool and no advertising tag. We do not track you across other websites, and there is no advertising identifier to opt out of. If we add an analytics tool we will name it here, say what it collects, and say how to opt out, before it goes live.
When you contact us
If you email us, we receive your email address, your name if you include it, and whatever you write. We use it to reply, to investigate and record corrections, and to keep a record of requests about profiles and listings. Correction records are kept as long as the page they relate to exists, because our editorial policy requires a dated record of every material correction. Other messages are kept for up to two years and then deleted. Please do not send us health information, photographs of your skin, or medical records: we do not need them to answer you, and if you send them we delete them once we have replied.
When you apply to be listed as a provider
Listings are not open yet, so no application form exists on the site today. This section describes what an application will collect when it does. When an application exists, a clinician or clinic applying for a listing will give us: their name, credential and licence type, licence state and number, National Provider Identifier if they have one, practice name, address, phone number, email address and website, education and certifications, a headshot if they provide one, and their confirmation that the information is accurate. We will use those details to verify the licence against public licensing records such as the state licensing board’s lookup and the federal NPPES registry, to contact the applicant, and, if the listing is approved, to publish the fields described on the application page. We will not publish licence numbers. Declined applications and removed listings will be kept for up to three years so that we can answer questions about them and prevent repeat submissions, then deleted. Accounts will store a username, a hashed password and sign-in times. We will update this policy before any of this goes live.
Cookies
Reading the site does not require cookies. Cookies are set in these cases: by WordPress, only if you sign in to an account (login cookies last up to two weeks and a cookie that checks whether your browser accepts cookies is discarded when you close it); No analytics cookie is set, because the site runs no analytics tool. You can block or delete cookies in your browser settings; the site will still work for reading.
How we share information
The only parties who process personal information for us are our hosting and security provider and our email provider, and they are bound to use it only for that purpose. Separately, when a page loads Google Fonts, WordPress.org emoji or a Gravatar image, your browser sends your IP address and browser information directly to that provider under its own privacy policy, as described above; we receive nothing back. We disclose information to public licensing registries only in the sense that we look up the details you gave us. We may disclose information if the law requires it, to enforce our terms, or to protect the rights and safety of readers, listed providers or the public. If MedSpa Marketing SEO, a subsidiary of The Search Sherpa LLC is sold or merged, information may transfer to the new owner under this policy.
We do not sell personal information, and we have not sold any in the preceding twelve months. We do not share personal information with Express Med Spa, Catara Med Spa or any other business for their own marketing. If you ask us to pass a message to a clinic, we will, and we will tell you we have done so.
Your choices and rights
You can ask us what personal information we hold about you, ask us to correct it, ask us to delete it, or object to a use of it, by emailing seo@thesearchsherpa.com. We will confirm your identity in a way proportionate to the request, respond within 45 days, and tell you if the law requires us to keep something. We will not treat you differently for making a request. A reviewer can ask us to correct or remove their entry at any time. Where a page carries a published review record, that record keeps the name of the clinician who signed it, because our editorial policy requires it; no page carries one today.
California residents
Whether or not California’s privacy statute applies to us, we will honor these requests from California residents. You have the right to know the categories of personal information we collect (identifiers, professional information for provider applicants, internet activity such as server logs, and the contents of messages you send), the purposes described above, the categories of recipients (our hosting, security and email providers, plus the third-party resource providers named above), and the right to request access, correction or deletion. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. You may use an authorized agent to make a request. We will not discriminate against you for exercising these rights.
Children
The site is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has sent us information, email seo@thesearchsherpa.com and we will delete it.
Security
The site is served over HTTPS and access to the site’s administration is limited to a small number of accounts held by the people who run the site. There are no provider accounts yet; if we add them, passwords will be stored hashed. No website is perfectly secure; if we learn of a breach affecting your information we will notify you as the law requires.
Changes
We will post any change here and update the effective date. If a change materially reduces your rights, we will say so at the top of this page for at least 30 days.
Contact
MedSpa Marketing SEO, a subsidiary of The Search Sherpa LLC
seo@thesearchsherpa.com