Privacy Policy

If you are a patient: the way we handle your medical information is described in our Notice of Privacy Practices. That notice, not this page, governs your protected health information.

This Privacy Policy explains what information Cape Cod Aesthetics and MediSpa, DBA Cape Cod Surgical Arts and Medispa (“we,” “us,” the “Practice”) collects when you visit capecodaesthetics.com, how we use it, and the choices you have. It applies to this website only. It does not apply to information you give us in person, on the phone, or as part of your care.

Please do not send medical details through this website

Our website chat, text line and email are convenient, but they are not secure channels. Please do not use them to send details of your medical history, symptoms, diagnoses, medications, photographs of a treatment area, insurance identifiers, or your Social Security number. If we need that information, we will collect it through a secure route and tell you how. Send only what is needed to reach you and arrange a conversation.

Information we collect

Information you give us

• Chat. If you use the chat window on this website, we receive your messages and anything you choose to type, such as your name, phone number or email address. The chat service is provided by tawk.to. It also records technical details about your visit (for example your IP address, approximate location, browser, and the pages you viewed) so our staff can see where your question came from. Chat is answered only by our practice staff.
• Phone, text and email. If you contact us using the phone number, text line or email address shown on this website, we receive your contact details and your message. Our email is provided by Google Workspace.
• Appointment booking and gift cards. Online booking and gift card purchases are handled by Square, on Square’s own pages. Information you enter there is collected by Square under its own privacy policy, and shared with us so we can prepare for your visit or fulfil your order.

This website has no contact form and no newsletter sign-up.

Information collected automatically

Like most websites, ours records limited technical information when you visit, which may include your IP address, browser and device type, the pages you view, the site or search that referred you, and the date and time of your visit.

Most browsers let you refuse or delete cookies in their settings. Blocking them may stop the chat window from working; the rest of the site will still work.

How we use this information

• To respond to your enquiry and arrange or confirm an appointment.
• To operate, secure and improve the website.
• To meet our legal and professional obligations.

We do not sell your personal information, and we do not rent or trade contact lists.

Who we share it with

We share information only with service providers who help us run the practice and the website, and only to the extent they need it. These currently include our website host (Cloudflare), our website chat provider (tawk.to), our scheduling and payment provider (Square), and our email provider (Google Workspace). HIPAA requires a Business Associate Agreement with any provider that handles protected health information on our behalf, and it is our policy to have one in place before such a provider receives patient information. We do not have a Business Associate Agreement with our chat provider, which is one more reason we ask you not to share medical details in chat.

We may also disclose information where the law requires it, or to protect the rights, safety or property of our patients, our staff or the public.

How long we keep it

Website enquiries received by email or text are retained for 24 months. Chat transcripts are kept only for a short period and then deleted. Medical records are retained under the schedule described in our Notice of Privacy Practices and applicable Massachusetts law, which is separate from this policy.

Your choices

• Text messages and email. If you would rather we did not contact you by text or email, tell us and we will stop.
• Cookies. Manage them in your browser settings.
• Access, correction and deletion. You can ask us what website information we hold about you and ask us to correct or delete it. Contact us using the details below. Rights over your medical record are different and stronger — they are set out in the Notice of Privacy Practices.

Children

This website is intended for adults. We do not knowingly collect personal information online from children under 13. If you believe a child has given us information through this site, contact us and we will delete it.

Links to other sites

Our site links to third parties, including our booking provider and our social media accounts. Once you leave capecodaesthetics.com, this policy no longer applies, and we are not responsible for the privacy practices of those sites.

Accessibility

If any part of this website is difficult for you to use, tell us and we will help you get the same information another way.

Changes to this policy

We may update this policy from time to time. The current version is always posted here, and the effective date below shows when it last changed.

Contact us

Effective October 20, 2026 · Last reviewed October 20, 2026

Related: Notice of Privacy Practices · Security