Privacy Policy

 Medspa In a Box

1. Introduction

Welcome to Medspa In a Box ("Company," "we," "our," "us"). Your privacy is important to us, and we are committed to protecting the information you share with us. This Privacy Policy explains how we collect, use, and safeguard your personal information when you interact with our services, including our website, communications, and customer relationship management system.

2. Information We Collect

We may collect the following types of information:

Personal Information: Name, email address, phone number, and other identifying details voluntarily provided by you.
 

Transactional Information: Details of products or services purchased.
 

Automated Information: IP address, device details, and browsing activity collected through cookies and tracking technologies.
 

Communication Data: Messages sent via SMS, email, or phone, including through our CRM system.
 

Note: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
 

3. How We Use Your Information

We use the information collected for:

Providing and improving our services
 

Processing transactions and sending order confirmations
 

Customer support and responding to inquiries
 

Marketing and promotional communications (with opt-out options)
 

Compliance with legal obligations and industry standards
 

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.
 

4. A2P Compliance and Communication

Medspa In a Box is committed to Application-to-Person (A2P) messaging compliance to ensure secure, transparent, and permission-based communication. We only send messages to individuals who have opted in and provide clear opt-out mechanisms. All SMS and email marketing follow applicable laws, including the TCPA and CTIA guidelines.

No mobile information will be shared with third parties or affiliates for marketing/promotional purposes.
 

Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the Text Message services.
 

5. Use of GoHighLevel as Our CRM

We utilize GoHighLevel as our Customer Relationship Management (CRM) system. GoHighLevel maintains its own data security and privacy policies. Your personal data stored in this system is safeguarded and is not shared for any marketing or promotional purposes.

6. Data Handling Practices

We may engage subcontractors or vendors to assist with customer service, payment processing, or IT support under strict confidentiality requirements. These relationships are designed to support our service delivery only.

All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.
 

7. Data Security

We implement appropriate safeguards including secure servers, encryption, and regular security reviews to protect your data against unauthorized access or alteration.

8. Your Rights and Choices

You have the right to:

Access, correct, or delete your personal information
 

Opt-out of marketing communications at any time
 

Request details about how your data is collected and used
 

To exercise these rights, contact us at Eugene@medspainabox.info.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be posted on our website and/or shared via email.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:
Email: Eugene@medspainabox.info
Phone: 520.225.9681