Privacy policy

Last updated: September 19, 2026

Main Street Med Spa, LLC ("Main Street Med Spa," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you visit our websites (including mainstreetmedspa.com, start.mainstreetmedspa.com, and our online store), fill out a form or quiz, book or request an appointment, or communicate with us by phone, email, or text message (together, our "Services").

Your health information and HIPAA

If you become a patient, the health information in your medical record is protected under the Health Insurance Portability and Accountability Act (HIPAA). At your first appointment, you'll review and electronically sign our HIPAA consent, which explains how we use and protect your health information and your rights regarding it. A copy is available anytime on request. If this Privacy Policy and our HIPAA notice ever conflict about your protected health information, the HIPAA notice controls.

Some of our online forms and quizzes ask about symptoms and wellness goals so our team can follow up with you. We treat that information as confidential. We store it in secure systems operated by vendors who have agreed in writing to protect it, and we use it only to respond to you and to help you with our services. Please don't use our website forms, email, or text messages for urgent medical needs. If you have a medical emergency, call 911.

Information we collect

  • Information you give us: your name, phone number, email address, answers to quizzes and forms (such as symptoms, goals, and preferences), appointment requests, messages you send us, and payment details, which are handled by our payment processors.
  • Information collected automatically: your IP address, device and browser type, the pages you visit, the time spent on pages, the website or ad that referred you (for example, ad-click identifiers and campaign tags), and information collected through cookies and similar technologies.
  • Information from others: limited information from advertising and analytics partners, such as whether you clicked one of our ads.

How we use information

  • To respond to your inquiry and contact you about the next step you asked about
  • To schedule appointments, send reminders, and provide our services
  • To send educational information and, with your consent, marketing and promotional messages
  • To process payments and orders
  • To understand how our website and advertising perform, and to improve them
  • To keep our Services secure, prevent fraud, and meet our legal obligations

How we share information

We never sell or share your health information, including quiz answers, symptoms, or patient records. We share other information only as described below:

  • Service providers that help us run the practice, such as our customer relationship and communications platform, electronic health record, scheduling, email and text-message delivery, payment processing, and website hosting. They may use your information only to provide services to us.
  • Advertising and analytics partners (for example, Google and Meta), which use cookies and similar technologies to measure how our ads and website perform. We do not share your quiz answers, symptoms, or other health information with advertising platforms.
  • Online skincare store advertising. Our online store (operated on Shopify) sells skincare products only. We use Shopify's advertising services, such as Shopify Audiences, which may share store customer information (like name, email, and skincare purchase history) with Shopify and advertising partners so we can show relevant ads. Under some state laws, this may be considered a "sale" or "sharing" of personal information. It never includes quiz answers, symptoms, or patient health information, and services and treatments are not sold through our online store. You can opt out at any time at privacy.shopify.com or by contacting us.
  • Legal and safety reasons, when required by law or to protect the rights, safety, and property of our patients, our practice, or others
  • Business transfers, if our practice is sold or transferred, subject to applicable law

Text messaging privacy: Mobile opt-in information and consent will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all information-sharing categories described in this policy.

Cookies and advertising choices

We use cookies and similar tools to run our website, remember your preferences, and measure advertising. You can control cookies through your browser settings. You can also manage ad personalization through Google's Ad Settings (adssettings.google.com) and Meta's ad preferences in your Facebook or Instagram account settings. Our website does not currently respond to "Do Not Track" browser signals.

Your choices

  • Email: click "unsubscribe" in any marketing email.
  • Text messages: reply STOP to any message to opt out, or HELP for help.
  • Access, corrections, and deletion: contact us to request access to or correction of your information, or deletion of website and marketing information. Medical records are kept as required by law.

How we protect and keep information

We use administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, but we work to protect your information and limit access to those who need it. We keep information as long as needed for the purposes described here and as required by law, including medical record retention requirements.

Children

Our Services are intended for adults 18 and older. We do not knowingly collect personal information from children under 13 through our website.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date above.

Contact us

Main Street Med Spa
308 W Main St, Highland, KS 66035
(785) 377-6281
hello@mainstreetmedspa.com