Privacy Policy

Effective date: September 8, 2026

New Medical Spa (“New Medical Spa,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect through newmedicalspausa.com (the “Site”), how we use and share it, the cookies and tracking technologies we use, and the choices you have. It applies to this Site and to online forms, appointment requests, and purchases you submit through it.

This Privacy Policy is separate from our obligations under HIPAA. Protected health information created or maintained as part of your treatment relationship with New Medical Spa is governed by our Notice of Privacy Practices, not by this policy. If you have questions about your medical records, please contact our office directly.

Information we collect

Information you give us. When you request an appointment, contact us, subscribe to updates, complete a form, or make a purchase, you may provide:

  • Name, email address, phone number, and mailing or billing address
  • Appointment preferences, the service or treatment you are asking about, and any comments you choose to include in a form
  • Information you submit on intake or consent forms, including electronic signatures
  • Payment information, which is collected and processed by our payment processors and is not stored on this Site

Information collected automatically. When you visit the Site, we and our analytics and advertising providers may automatically collect:

  • IP address, general location derived from it, browser type, device type, and operating system
  • Pages viewed, links clicked, referring website or ad, search terms that brought you here, and time spent on pages
  • Cookie and device identifiers used to recognize a returning browser and to measure advertising performance

We do not sell your personal information for money, and we do not knowingly collect personal information from children under 13.

Cookies and tracking technologies

The Site uses cookies, pixels, and similar technologies. Some are strictly necessary to make the Site work; others are used only with your consent. The categories are:

  • Strictly necessary. Required for the Site to function — page delivery, security, form submission, shopping cart, and remembering your cookie choices. These cannot be turned off.
  • Analytics. Google Analytics 4, delivered through Google tag manager services, and site statistics, used to understand how visitors find and use the Site so we can improve it.
  • Advertising. The Meta (Facebook and Instagram) pixel and Google advertising tags, used to measure the performance of our ads and to show you relevant ads on those platforms.
  • Functional. Tools that support forms, scheduling requests, and content features.

Analytics and advertising technologies do not load until you consent to them. When you first visit the Site you will see a consent banner. If you decline, or take no action, only strictly necessary cookies are used. You can reopen the banner and change your choice at any time using the cookie preferences link in the Site footer, and you can delete cookies through your browser settings. We also honor Global Privacy Control signals sent by your browser.

How we use your information

  • To respond to appointment requests, questions, and messages you send us
  • To provide, confirm, and follow up on services and purchases
  • To send you information about services, promotions, or events, where you have asked to receive it — you can unsubscribe at any time using the link in any marketing email
  • To measure and improve the Site and our marketing, with your consent for analytics and advertising technologies
  • To maintain the security of the Site, prevent fraud and abuse, and comply with legal obligations

How we share information

We do not sell your personal information. We share it only as follows:

  • Service providers who work on our behalf and are bound to protect it — website hosting, form and e-signature processing, email delivery, payment processing, scheduling, and our marketing agency
  • Analytics and advertising platforms such as Google and Meta, where you have consented to those technologies. Depending on your jurisdiction, sharing information with advertising platforms may be treated as “targeted advertising” or a “sale” under state privacy law, and you may opt out as described below
  • Legal and safety reasons — when required by law, subpoena, or legal process, or to protect the rights, safety, or property of our patients, our staff, or the public
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy

Your privacy choices

You may, at any time:

  • Change or withdraw your cookie consent using the cookie preferences link in the Site footer
  • Opt out of analytics and advertising technologies, including targeted advertising, by declining those categories in the consent banner
  • Unsubscribe from marketing email using the link in any message we send
  • Ask us to access, correct, delete, or provide a copy of the personal information we hold about you

Virginia residents. Under the Virginia Consumer Data Protection Act you have the right to confirm whether we process your personal data and to access it, to correct inaccuracies, to delete it, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not process sensitive data, including data revealing a health condition, for these purposes without your consent. To exercise a right, contact us using the details below. We will respond within 45 days. If we decline your request, you may appeal by replying to our response with the word “appeal,” and we will inform you in writing of the outcome within 60 days; if your appeal is denied, you may contact the Virginia Attorney General to submit a complaint.

Residents of other states with comprehensive privacy laws may have similar rights, and we honor those requests on the same basis.

Data retention and security

We keep personal information for as long as needed to provide the services you requested, to meet our legal, tax, and recordkeeping obligations, and to resolve disputes. We use reasonable administrative, technical, and physical safeguards to protect it. No website or transmission over the internet can be guaranteed completely secure, so please do not send medical details or sensitive information through a general contact form — call our office instead.

Third-party links

The Site may link to other websites, including social media pages and third-party scheduling or payment tools. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of the page. Material changes will be highlighted on the Site.

Contact us

New Medical Spa
2235 Old Brick Rd, Short Pump, VA 23060
Phone: (804) 424-4981
Email: newmedicalspa@formulawellness.com