Privacy Notice

Last updated April 27, 2026

This Privacy Notice explains how Narcissus Aesthetics., P.C., doing business as Narcissus Aesthetics ("narcissus," "we," "us," or "our"), collects, uses, stores, discloses, and protects personal information when you use our services, visit www.narcissusaesthetics.com, book or manage appointments, communicate with us, participate in marketing or events, or otherwise interact with us (collectively, the "Services").

By using our Services, you acknowledge this Privacy Notice. If you do not agree with our practices, please do not use the Services. Questions may be sent to hello@narcissusaesthetics.com.

At a Glance

We collect the information needed to provide aesthetic services, manage appointments, process payments, communicate with you, keep our records accurate, improve our website and client experience, protect our business, and comply with law.

Depending on how you interact with Narcissus, we may process information you provide directly, information collected automatically through our website, information from social media or marketing partners, and limited sensitive information such as health data, biometric data, race or ethnic origin information, or payment-related data when necessary, with your consent, or as permitted by law.

We may share information with service providers, business partners, affiliates, payment and booking systems, analytics and advertising partners, Google services, Boulevard, and other vendors that help us deliver the Services. We do not sell personal information, and we do not share mobile opt-in data or SMS consent with third parties for their marketing or promotional purposes.

Your rights depend on where you live. You may be able to access, correct, delete, copy, limit, or opt out of certain uses of your personal information. You can contact us at hello@narcissusaesthetics.com or submit a data subject access request.

Contents

1. Information We Collect
2. How We Use Personal Information
3. When and With Whom We Share Personal Information
4. Cookies, Analytics, Tracking, and Advertising
5. Boulevard and AI-Enabled Features
6. Social Logins
7. How Long We Keep Information
8. How We Protect Information
9. Children and Minors
10. Your Privacy Choices and Rights
11. Do-Not-Track and Global Privacy Control
12. United States State Privacy Rights
13. Updates to This Privacy Notice
14. Contact Us
15. Review, Update, or Delete Your Information

1. Information We Collect

Information You Provide to Us

We collect personal information you voluntarily provide when you request information, book or receive services, communicate with us, participate in promotions or events, use features on our website, or otherwise contact Narcissus.

The personal information we collect may include:

• Name
• Phone number
• Email address
• Billing address
• Debit or credit card number
• Contact or authentication data
• Contact preferences
• Username
• Instagram username

Sensitive Information

When necessary, with your consent, or as otherwise permitted by applicable law, we may process sensitive information, including:

• Health data
• Biometric data
• Information revealing race or ethnic origin

All personal information you provide must be true, complete, and accurate. Please notify us of changes so we can keep our records current.

Information Collected Automatically

When you visit, use, or navigate our Services, we automatically collect certain technical and usage information. This information does not usually identify you by name, but it may include device and usage details such as:

• IP address
• Browser and device characteristics
• Operating system
• Language preferences
• Referring URLs
• Device name
• Country or general location
• Information about how and when you use the Services
• Other technical information needed for security, analytics, reporting, and site operation

Like many businesses, we use cookies and similar technologies to collect some of this information.

Log and Usage Data

Our servers may automatically collect service-related, diagnostic, usage, and performance data and record it in log files. Depending on your interaction with us, this may include your IP address, device information, browser type, browser settings, date and time stamps, pages and files viewed, searches, features used, system activity, error reports, crash data, and hardware settings.

Device Data

We may collect information about the computer, phone, tablet, or other device you use to access the Services. Depending on your device, this may include IP address or proxy server, device and application identifiers, browser type, hardware model, internet service provider, mobile carrier, operating system, and system configuration information.

Location Data

We may collect location data, which may be precise or imprecise depending on your device and settings. For example, GPS and similar technologies may provide geolocation data, and your IP address may provide general location information. You can disable location access through your device settings or decline access when prompted. Some Services may not function fully if location access is disabled.

Google API Data

If we receive information from Google APIs, our use of that information will follow the Google API Services User Data Policy, including Google's Limited Use requirements.

Information From Other Sources

We may collect limited information from public databases, marketing partners, affiliate programs, data providers, social media platforms, and other third parties to improve our ability to provide relevant services, offers, event information, and marketing, and to keep our records current.

This may include mailing addresses, job titles, email addresses, phone numbers, intent or behavior data, IP addresses, social media profiles, social media URLs, and custom profiles for targeted advertising and event promotion.

If you interact with us through social media, we may receive information from that platform, such as your name, email address, gender, and other information allowed by your privacy settings. The platform's own use of your information is governed by its privacy notice, not ours.

2. How We Use Personal Information

We process personal information when we have a valid reason to do so, including to provide our Services, communicate with you, improve our business, protect our systems, comply with law, or process information with your consent.

We may use your information to:

• Deliver and facilitate services you request
• Respond to inquiries and provide client support
• Fulfill and manage orders, payments, returns, and exchanges
• Send marketing and promotional communications according to your preferences
• Deliver targeted advertising and personalize content based on interests, location, and similar signals
• Post testimonials that may include personal information, where appropriate
• Administer prize draws, contests, surveys, or promotions
• Evaluate and improve our Services, products, marketing, website, and client experience
• Identify usage trends
• Measure the effectiveness of marketing and promotional campaigns
• Comply with legal obligations, respond to legal requests, and exercise, establish, or defend legal rights

3. When and With Whom We Share Personal Information

We may share personal information in specific situations and with specific third parties, including:

• Service providers and contractors. We may disclose personal information to vendors that perform services for us under written contracts, such as appointment management, payment processing, customer support, communications, analytics, advertising, website hosting, security, and business operations.
• Business transfers. We may share or transfer information in connection with, or during negotiations of, a merger, sale of company assets, financing, acquisition, or similar business transaction involving all or part of our business.
• Google Maps Platform APIs. We may share information with Google Maps Platform APIs, such as Google Maps API or Places API. Google Maps may use GPS, Wi-Fi, and cell tower data to estimate location. We may obtain and store location information on your device as a cache. You may revoke consent by contacting us.
• Affiliates. We may share information with our affiliates, including parent companies, subsidiaries, joint venture partners, or companies under common control, and we require them to honor this Privacy Notice.
• Business partners. We may share information with business partners to offer certain products, services, or promotions.

We may use personal information for internal business purposes, including research, technology development, and demonstration. This is not considered selling personal information.

We have not disclosed, sold, or shared personal information with third parties for a business or commercial purpose in the preceding twelve months, and we will not sell or share personal information in the future belonging to website visitors, users, or consumers.

4. Cookies, Analytics, Tracking, and Advertising

We may use cookies, web beacons, pixels, and similar tracking technologies to collect and store information when you interact with the Services.

Some tracking technologies help us maintain site security, prevent crashes, fix bugs, save preferences, and support basic website functions. We may also allow third-party service providers to use tracking technologies for analytics and advertising, including to help manage and display ads, tailor ads to your interests, and send abandoned cart or booking reminders when permitted by your communication preferences.

Where these technologies are considered a "sale," "sharing," or targeted advertising under applicable state privacy laws, you may opt out as described in the United States state privacy rights section below.

Google Analytics

We may share information with Google Analytics to track and analyze use of the Services. Google Analytics Advertising Features we may use include:

• Remarketing with Google Analytics
• Google Analytics Demographics and Interests Reporting
• Google Display Network Impressions Reporting

You can opt out of Google Analytics tracking at https://tools.google.com/dlpage/gaoptout. You can also adjust Google Ads Settings at https://adssettings.google.com. Additional opt-out resources include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more about Google's privacy practices, visit https://policies.google.com.

Specific information about how we use these technologies and how you can refuse certain cookies is set out in our Cookie Notice.

5. Boulevard and AI-Enabled Features

Some parts of our Services may include products, features, or tools powered by artificial intelligence, machine learning, automation, or similar technologies ("AI Products"). These features are designed to support the client experience, improve operations, and help us deliver the Services more efficiently.

We provide AI Products through third-party service providers, including Boulevard. When you use these features, your input, output, and personal information may be shared with and processed by Boulevard or other AI service providers so they can support the feature being used.

Our AI Products may be used for:

• AI insights
• AI automation

All personal information processed through AI Products is handled according to this Privacy Notice and our agreements with the applicable third parties. You must not use AI Products in a way that violates the terms or policies of Boulevard or any other AI service provider.

6. Social Logins

If we offer the option to register or log in using a social media account, such as Facebook, X, or another platform, we may receive certain profile information from that provider.

The information we receive may vary by platform, but it often includes your name, email address, friends list, profile picture, and other information you choose to make public. We use this information only for the purposes described in this Privacy Notice or otherwise made clear through the Services.

We do not control, and are not responsible for, how social media providers use your personal information. Please review their privacy notices and privacy settings.

7. How Long We Keep Information

We keep personal information only as long as necessary for the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law, such as tax, accounting, or other legal requirements.

When we no longer have an ongoing legitimate business need to process personal information, we will delete or anonymize it. If deletion or anonymization is not immediately possible, such as when information is stored in backup archives, we will securely store it and isolate it from further processing until deletion is possible.

For sensitive personal information collected under Category L in the state privacy section below, we retain it as long as the user has an account with us, unless a different retention period is required or permitted by law.

8. How We Protect Information

We use reasonable technical and organizational safeguards designed to protect personal information we process.

No electronic transmission over the internet or information storage technology can be guaranteed to be completely secure. We cannot promise that unauthorized third parties will never defeat our safeguards or improperly collect, access, steal, or modify information. Please access the Services through a secure environment and share personal information with care.

9. Children and Minors

We do not knowingly collect, solicit, sell, or market personal information from children under 18.

By using the Services, you represent that you are at least 18 or that you are the parent or guardian of a minor dependent and consent to that minor dependent's use of the Services. If we learn that we have collected personal information from a person under 18, we will deactivate the account when applicable and take reasonable steps to promptly delete the information from our records.

If you believe we may have collected information from a child under 18, contact us at hello@narcissusaesthetics.com.

10. Your Privacy Choices and Rights

Depending on your country, province, or state of residence, you may have rights to review, change, access, correct, delete, copy, limit, or withdraw consent for certain personal information.

Withdrawing Consent

If we rely on your consent to process personal information, you may withdraw that consent at any time by contacting us using the details in the Contact us section. Withdrawal will not affect processing that occurred before withdrawal, and where law allows, it will not affect processing based on lawful grounds other than consent.

Marketing Communications

You can unsubscribe from marketing and promotional emails by using the unsubscribe link in our emails. You can opt out of SMS messages by replying "STOP" or "UNSUBSCRIBE." You can also contact us using the details below.

After opting out, we may still send non-marketing messages, such as service-related communications, account or appointment messages, responses to requests, and administrative notices.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors that support our Services, such as customer service providers. Text messaging originator opt-in data and consent will not be shared with third parties.

Cookies

Most browsers accept cookies by default. You can usually set your browser to remove or reject cookies. Removing or rejecting cookies may affect certain website features or Services.

Questions about privacy rights may be sent to hello@narcissusaesthetics.com.

11. Do-Not-Track and Global Privacy Control

Some browsers, mobile operating systems, and mobile applications offer a Do-Not-Track ("DNT") setting. Because no uniform technology standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals or similar automatic tracking preference mechanisms. If a standard is adopted that requires us to follow it, we will update this Privacy Notice.

California law requires us to disclose how we respond to DNT signals. Because there is no current industry or legal standard for honoring DNT signals, we do not respond to them at this time.

We recognize and honor Global Privacy Control ("GPC") signals. If you use a browser or extension that supports GPC, we will treat that signal as a valid request to opt out of the sale or sharing of personal information for targeted advertising purposes under applicable state privacy laws, including the California Consumer Privacy Act ("CCPA"). When we detect a GPC signal, we will automatically apply the opt-out preference. More information is available at https://globalprivacycontrol.org.

12. United States State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, obtain a copy of your information, delete your information, or withdraw consent to processing.

These rights may be limited in some circumstances by applicable law.

Categories of Personal Information Collected

The table below describes categories of personal information under certain state privacy laws. It includes examples for each category and indicates whether we have collected that category in the preceding twelve months. For a fuller description of the information we process, see the Information we collect section above.

We collect sensitive personal information only as defined by applicable privacy laws, for purposes allowed by law, or with your consent. Sensitive personal information may be used or disclosed to a service provider or contractor for additional specified purposes. You may have the right to limit use or disclosure of sensitive personal information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

We may also collect personal information outside these listed categories when you interact with us in person, online, by phone, or by mail, including when you:

• Receive help through customer support channels
• Participate in customer surveys or contests
• Use our Services or contact us with inquiries

Sources of Personal Information

The sources of personal information are described in the Information we collect section above.

How We Use and Share Personal Information

We may use personal information in profiling and automated processes that could produce legal or similarly significant effects. More detail is provided in the How we use personal information section.

We may disclose personal information to service providers under written contracts. More detail is provided in the When and with whom we share personal information section.

We have not disclosed, sold, or shared personal information to third parties for a business or commercial purpose in the preceding twelve months, and we will not sell or share personal information in the future belonging to website visitors, users, or consumers.

Your State Privacy Rights

Depending on your state, you may have the right to:

• Know whether we are processing your personal data
• Access your personal data
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Obtain a copy of personal data you previously shared with us
• Exercise your rights without discrimination
• Opt out of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

Depending on your state, you may also have the right to:

• Access the categories of personal data being processed, as permitted by applicable law, including Minnesota privacy law
• Obtain a list of categories of third parties to which we disclosed personal data, as permitted by applicable law, including California, Delaware, and Maryland privacy laws
• Obtain a list of specific third parties to which we disclosed personal data, as permitted by applicable law, including Minnesota and Oregon privacy laws
• Obtain a list of third parties to which we sold personal data, as permitted by applicable law, including Connecticut privacy law
• Review, understand, question, and in some states correct how personal data has been profiled, as permitted by applicable law, including Connecticut and Minnesota privacy laws
• Limit use and disclosure of sensitive personal data, as permitted by applicable law, including California privacy law
• Opt out of collection of sensitive data and personal data collected through voice or facial recognition features, as permitted by applicable law, including Florida privacy law

How to Exercise State Privacy Rights

To exercise your rights, you may submit a data subject access request, email hello@narcissusaesthetics.com, or use the contact details below.

We will honor opt-out preferences sent through the Global Privacy Control signal.

Under certain state privacy laws, you may designate an authorized agent to make a request on your behalf. We may deny an agent's request if the agent does not provide proof that they are validly authorized to act for you under applicable law.

Request Verification

When we receive a request, we may need to verify your identity to confirm that you are the person whose information is in our system. We will use personal information provided in the request only to verify identity or authority to make the request. If we cannot verify your identity from information we already maintain, we may request additional information for verification, security, or fraud-prevention purposes.

If an authorized agent submits a request, we may need additional information to verify your identity, and the agent may need to provide written, signed permission from you.

Appeals

Under certain state privacy laws, if we decline to take action on your request, you may appeal by emailing hello@narcissusaesthetics.com. We will inform you in writing of any action taken or not taken in response to the appeal and explain the reasons for our decision. If your appeal is denied, you may submit a complaint to your state attorney general.

California Shine the Light Law

California Civil Code Section 1798.83, known as the "Shine The Light" law, allows California residents to request, once per year and free of charge, information about categories of personal information, if any, that we disclosed to third parties for direct marketing purposes and the names and addresses of those third parties for the immediately preceding calendar year.

California residents may submit a written request using the contact details below.

13. Updates to This Privacy Notice

We may update this Privacy Notice from time to time to remain compliant with relevant laws and reflect our practices. The updated version will be identified by an updated "Last updated" date. If we make material changes, we may notify you by posting a prominent notice or sending a direct notification. Please review this Privacy Notice periodically.

14. Contact Us

If you have questions or comments about this Privacy Notice, you may email us or contact us by mail:

Narcissus Aesthetics., P.C.
306 Virginia St
Seattle, WA 98101
United States

15. Review, Update, or Delete Your Information

Depending on the laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we processed it, correction of inaccuracies, deletion of your personal information, or withdrawal of consent.

To request review, update, or deletion of your personal information, please submit a data subject access request through Termly at https://app.termly.io/ or email us.

This Privacy Policy was created using Termly's Privacy Policy Generator and has been rewritten and organized for Narcissus Aesthetics.