Privacy Policy
Version pp-v1.1 · Effective Date: [PENDING]
Our promise in plain language
CAMI Aesthetics is a medical aesthetics practice. Information about your health and identity deserves a higher standard of care than typical website data, and we built this booking experience around that idea: no advertising trackers, no analytics scripts, and no cookies run on our booking pages; the only third-party code is our scheduling partner's attribution script, described in Section 3. The information you enter goes only to the systems that operate your appointment, each under a signed agreement requiring them to protect it.
1. Who we are
This booking experience is operated for Carolina Age Management Institute, LLC, d/b/a CAMI Aesthetics ("Cami," "we," "us"), with locations in Huntersville and Greensboro, North Carolina, with technology and marketing services provided by Alpha Aesthetics Partners acting on the practice's behalf. Your health information is protected under HIPAA and governed by the practice's Notice of Privacy Practices at [PENDING]; where that notice and this policy overlap, the notice governs health information.
This policy covers this booking experience specifically. The practice's main website has its own privacy policy describing that site's practices.
2. What we collect, and when
Our booking flow asks for information step by step:
- Contact details — name, email, mobile phone
- Booking details — location, new vs. returning patient, treatment of interest, appointment preferences, and your answers to optional questions about what matters to you in your care
- Chart details — date of birth, sex, ZIP code, which the practice's scheduling and medical-records systems require to create or match your patient chart
- Advertising click identifiers — if you arrived from an ad, technical identifiers of the ad click (not your health information)
We save your progress as you go
As you complete each step, the information you have entered so far is securely transmitted to us and held, so if you get interrupted or step away, your booking is not lost and our team can help you finish. This means we may receive your contact information even if you do not complete a booking. We use partially completed information only to assist you with the booking you started and as described in this policy. To have information from an incomplete booking deleted, contact [PENDING].
3. What we do NOT do on these pages
We run no advertising pixels, analytics vendors, or session-recording tools on our booking pages. The only third-party code present is our scheduling partner's attribution script, which records how you arrived (for example, which ad or link brought you here) so the practice can measure its advertising. That partner operates under a HIPAA Business Associate Agreement. We set no cookies here; the only browser storage is a temporary, first-party record of ad-click parameters and arrival source, cleared when you close the tab.
We do not sell your personal information, and we do not share your name, contact information, health information, or date of birth with advertising platforms.
4. Where your information goes
Your information is transmitted directly from your browser to service providers operating under written agreements (including, where applicable, HIPAA Business Associate Agreements) that limit use to services on the practice's behalf:
- Scheduling and patient-records systems — to book your appointment and create or match your chart
- A patient communication platform — confirmations, reminders, and, only with your consent, other communications
- Secure infrastructure providers — hosting
We may share limited conversion outcomes with advertising platforms: the ad-click identifier plus the fact that a booking-related action occurred, to measure advertising effectiveness. We do not send your name, contact information, date of birth, or treatment details to advertising platforms. We may disclose information when required by law, or as described in the Notice of Privacy Practices.
5. Texts, calls, and email
During booking we ask for consent to contact you. Consent to marketing messages is optional and never a condition of booking or receiving care. Appointment-related messages are sent as part of operating your appointment. Reply STOP to opt out of texts, HELP for help; message and data rates may apply; frequency varies. We record the date, time, and version of the consent language you agreed to.
6. Your choices and rights
Access, correction, deletion: [PENDING] (health-record rights are described in the Notice of Privacy Practices).
Marketing opt-out: reply STOP by text, use the unsubscribe link in email, or contact us.
California residents: we do not sell personal information; to the extent sharing an ad-click identifier with an advertising platform is "sharing" under California law, you may opt out via [PENDING] [COUNSEL: confirm mechanism]. Access and deletion requests are honored without discrimination.
Residents of other states with comprehensive privacy laws: we honor applicable access, correction, and deletion rights.
7. Minors
This booking flow is intended for individuals 18 or older. We do not knowingly collect information from anyone under 18 and will delete such information on notice.
8. Retention and security
Booking and contact information is retained as needed to operate your care relationship and as medical-records laws require; incomplete-booking information only as long as useful to assist you. All transmission is encrypted (HTTPS).
9. Changes
This policy is versioned (top of page). Material changes will be posted with a new effective date; the version presented at the time of any consent is retained in our records.
10. Contact
[PENDING] · (704) 686-8511
Huntersville: 16315 Northcross Dr, Suite A, Huntersville, NC 28078
Greensboro: 1507 Westover Terrace, Suite B, Greensboro, NC 27408
Health-information rights: [PENDING]
COUNSEL ITEMS (do not ship without review): confirm the d/b/a filing status of "CAMI Aesthetics" (NC assumed business name certificate); CA "sharing" analysis and opt-out mechanism; WA My Health My Data / NV consumer-health-data exposure check; NC medical-records retention alignment; operational supportability of incomplete-booking deletion in GHL; NPP interplay language; confirm the NPP actually exists at a public URL; review the pp-v1.1 attribution-script disclosure (plain-language promise + Section 3, added 2026-08-31).