Privacy Policy
Entre Nous Website
Effective Date: September 1, 2026
Last Updated: September 1, 2026
Entre Nous Aesthetics (“Entre Nous,” “we,” “our,” or “us”) respects the privacy of our patients, clients, prospective patients, website visitors, and others who interact with us. Privacy is particularly important to us as a healthcare practice, and we are committed to handling personal and medical information responsibly.
This Privacy Policy explains how we collect, use, disclose, and protect information when you visit enaesthetics.com or other websites or online services operated by Entre Nous Aesthetics, communicate with us, request information, schedule or inquire about services, sign up for communications, or otherwise interact with us online.
This Privacy Policy applies primarily to information collected through our website and related consumer interactions. Medical information that we create or receive in connection with providing healthcare may be protected by the Health Insurance Portability and Accountability Act (“HIPAA”), the California Confidentiality of Medical Information Act (“CMIA”), and other healthcare privacy laws. Our handling of protected health information is also described in our Notice of Privacy Practices .
Information We Collect
The information we collect depends on how you interact with us.
Information You Provide Directly
We may collect information that you voluntarily provide, including:
- Your name, telephone number, email address, mailing address, and other contact information.
- Appointment requests, scheduling information, consultation requests, and information about services or treatments in which you are interested.
- Information you submit through contact forms, consultation forms, questionnaires, surveys, or other website forms.
- Communications you send to us by email, text message, telephone, website form, or other means.
- Marketing and communication preferences.
- Account or portal information when you use a patient portal or other authenticated service.
- Photographs, treatment concerns, or other information you voluntarily submit through an authorized consultation or patient platform.
- Transaction and payment-related information when you purchase services or products. Payment card information may be collected and processed directly by our payment-processing providers rather than stored by Entre Nous.
- LeadPost Services: We may use a service to obtain personal and non-personal information about You. This collection is triggered when you access our Website through a pixel placed on our Website. The Service may collect the following information when you interact with the page(s) on our Website where the pixel is present: (i) information about your web browser; (ii) your IP address, (iii) web pages visited; and (iv) cookies stored in your browser. We may use the data collected by the service to obtain personal information about You and use this data for marketing to You. For more information about the service data use and collection policies and practices and your opt out rights, please review the Privacy Policy located at https://leadpost.com/privacy-policy.
- Other information you choose to provide to us.
Because Entre Nous is a healthcare practice, information you submit in connection with seeking or receiving treatment may reveal information about your health or treatment interests. When such information constitutes protected health information or medical information under applicable law, we handle it in accordance with HIPAA, CMIA, our Notice of Privacy Practices, and other applicable requirements.
Please do not submit highly sensitive medical information through a general website contact form unless we specifically direct you to do so. When available, please use the secure patient portal or other secure method provided by our practice.
Information Collected Automatically
When you use our website, certain information may be collected automatically through cookies, tags, pixels, analytics technologies, server logs, and similar technologies. This information may include:
- Internet Protocol (“IP”) address.
- Browser and device type.
- Operating system.
- Approximate geographic location derived from an IP address.
- Pages viewed and links clicked.
- Referring and exit pages.
- Date and time of website visits.
- Time spent on pages.
- Website navigation and interaction information.
- Device or advertising identifiers, where permitted.
- Cookie identifiers and similar technical information.
We use this information to operate and secure our website, understand how visitors use it, improve performance and usability, measure the effectiveness of our communications, and, where permitted, support advertising or marketing activities.
Cookies, Analytics, and Similar Technologies
Our website may use cookies, analytics tools, tag-management systems, and similar technologies to provide website functionality, remember preferences, measure traffic and performance, prevent fraud or misuse, and understand how visitors interact with the site.
We may work with service providers that provide website hosting, analytics, scheduling, communications, advertising, security, or similar services. These providers may collect information through technologies placed on or connected with our website.
Where required by applicable law, visitors may be provided with controls to manage non-essential cookies or other tracking technologies.
Do Not Track and Global Privacy Control
Some web browsers offer a “Do Not Track” or similar setting. Because there is not a single universally accepted standard governing traditional Do Not Track signals, our website may not respond to all such signals.
California law separately recognizes certain qualifying browser-based opt-out preference signals, including the Global Privacy Control (“GPC”), for businesses subject to the applicable requirements of the California Consumer Privacy Act. Where legally required, we will treat a qualifying GPC signal as a request to opt out of the sale or sharing of personal information associated with that browser or device.
Visitors may also use available cookie-preference controls on our website to manage certain technologies.
Service Providers and Technology Partners
We use trusted service providers to help operate our practice, website, communications, scheduling, events, marketing, and other business functions. Depending on how you interact with us, these providers may process limited personal information on our behalf.
These services may include:
- Boulevard, which we use for patient scheduling, practice management, communications, and related services;
- Weave, which we use for telephone and text-message communications, including website-based text inquiries;
- Mailchimp, which we use to manage newsletter subscriptions and certain email marketing communications;
- Partiful and similar event-management platforms, which we may use for invitations, RSVPs, and event-related communications;
- website hosting, security, analytics, and performance providers, including Google services where applicable;
- payment processors and financial service providers;
- professional advisers and technology vendors supporting the operation and security of our practice.
- These providers may receive information only as reasonably necessary to perform services for us or as otherwise described in this Privacy Policy.
When you interact directly with a third-party platform—for example, by submitting an RSVP through an event platform or using a third-party scheduling service—that provider may also collect information under its own privacy policy.
We do not authorize our service providers to use protected health information or other medical information for their own advertising or marketing purposes.
How We Use Personal Information
We may use personal information to:
- Respond to questions, inquiries, and consultation requests.
- Schedule, confirm, manage, or follow up regarding appointments.
- Provide products, services, treatment-related communications, and customer support.
- Maintain our relationship with patients and clients.
- Operate, maintain, secure, troubleshoot, and improve our website and technology.
- Process transactions and maintain appropriate business and financial records.
- Send administrative, transactional, appointment, or service-related communications.
- Send newsletters, educational information, event announcements, promotions, or other marketing communications when permitted by law.
- Understand interest in our services and evaluate the effectiveness of our website and communications.
- Prevent fraud, abuse, security incidents, or other unlawful activity.
- Comply with professional, healthcare, tax, accounting, regulatory, legal, and record-retention obligations.
- Establish, exercise, or defend legal rights.
- Carry out other purposes disclosed to you when information is collected or with your consent.
We do not use protected health information for purposes prohibited by HIPAA, CMIA, or other applicable healthcare privacy laws.
How We Disclose Information
We may disclose personal information when reasonably necessary for the purposes described in this Privacy Policy, including to:
Service providers and contractors. We may use companies that help us operate our business and website, such as website hosts, information-technology providers, scheduling platforms, communications platforms, analytics providers, payment processors, security vendors, consultants, and similar service providers.
Healthcare and professional service providers. Information may be disclosed to healthcare professionals, affiliated medical entities, laboratories, pharmacies, consultants, or other parties when appropriate for treatment, healthcare operations, or other legally permitted purposes. Medical information is handled subject to applicable healthcare privacy laws.
Legal and regulatory authorities. We may disclose information when required or permitted by law, regulation, court order, subpoena, professional obligation, or governmental request, or when reasonably necessary to protect our patients, staff, practice, property, or legal rights.
Business transactions. Information may be transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable healthcare and privacy laws.
At your direction or with your consent. We may disclose information when you request, direct, authorize, or consent to the disclosure.
Sale or Sharing of Personal Information
Entre Nous does not sell personal information for monetary consideration.
Certain disclosures of identifiers or internet activity through advertising, analytics, or similar technologies may be considered “sharing” for cross-context behavioral advertising under California privacy law, depending upon how the applicable technology is configured and the law applicable to Entre Nous.
Where California law gives a consumer the right to opt out of such sale or sharing, Entre Nous will provide the required mechanism and honor qualifying opt-out preference signals such as GPC.
We do not sell protected health information or medical information.
We do not use or disclose protected health information for third-party behavioral advertising in a manner prohibited by HIPAA, CMIA, or other applicable healthcare privacy law.
Email Communications
If you subscribe to our newsletter or other marketing emails, we may use your email address to send information about Entre Nous, treatments, services, events, educational information, or other communications.
You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the message. Unsubscribing from marketing communications will not necessarily stop transactional, appointment-related, safety-related, or other non-marketing communications.
Text Messages and SMS Communications
If you provide your mobile telephone number and consent to receive text messages from Entre Nous Aesthetics, we may send you appointment communications, administrative messages, educational information, event information, promotions, or other messages consistent with the consent you provided.
Message frequency may vary. Message and data rates may apply.
Consent to receive marketing text messages is not a condition of purchasing goods or services from Entre Nous Aesthetics.
You may opt out of marketing text messages at any time by replying STOP to a message. You may reply HELP for assistance or contact us using the information below. We will honor valid opt-out requests as required by applicable law.
Mobile telephone numbers, SMS opt-in information, and text-message consent information will not be sold or shared with third parties or affiliates for their own marketing or promotional purposes. We may provide such information to vendors acting on our behalf when necessary to deliver and support our messaging program.
Wireless carriers are not responsible for delayed or undelivered messages.
Protected Health Information and Medical Information
Entre Nous Aesthetics is a medical practice. Some information we collect in connection with providing healthcare may constitute “protected health information” under HIPAA or “medical information” under California law.
Our use and disclosure of such information is governed by applicable healthcare privacy laws and our Notice of Privacy Practices.
This website Privacy Policy is intended to supplement, not replace, our Notice of Privacy Practices. If there is a conflict concerning information protected by HIPAA or CMIA, the requirements applicable to that medical information and our Notice of Privacy Practices will control.
If you wish to exercise rights concerning your medical record, request restrictions on medical-information disclosures, obtain an accounting of certain disclosures, or exercise other patient privacy rights, please refer to our Notice of Privacy Practices or contact our office.
California Privacy Rights
California residents may have privacy rights under several California laws.
California Consumer Privacy Act and California Privacy Rights Act
If and to the extent that the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), applies to Entre Nous or to particular personal information we maintain, California residents may have the right to:
- Know the categories and specific pieces of personal information we have collected about them.
- Know the categories of sources from which personal information was collected.
- Know the purposes for which personal information is collected, used, sold, or shared.
- Know the categories of third parties to whom personal information has been disclosed, sold, or shared.
- Request deletion of certain personal information, subject to legal exceptions.
- Request correction of inaccurate personal information.
- Opt out of the sale or sharing of personal information, where applicable.
- Limit certain uses or disclosures of sensitive personal information, where applicable.
- Exercise applicable privacy rights without unlawful discrimination or retaliation.
These rights are subject to statutory exceptions and verification requirements.
Certain information maintained by healthcare providers, including information protected by HIPAA or CMIA and certain patient information handled in the same manner, is excluded or exempted from portions of the CCPA. Requests involving medical records or protected health information may therefore be handled under HIPAA, CMIA, or other applicable healthcare laws rather than the CCPA.
Exercising California Privacy Rights
To submit an applicable California privacy request, please contact us at:
Email: info@enaesthetics.com
Telephone: (650) 363-0300
Mail: Entre Nous Aesthetics, 1047 El Camino Real, Ste. 100 Menlo Park, CA 94025
Please include sufficient information for us to understand your request. We may need to verify your identity before fulfilling certain requests and will use information collected for verification only as permitted by law.
Where permitted by law, an authorized agent may submit a request on your behalf. We may require proof that the agent is authorized to act for you and may separately verify your identity.
If a request concerns your medical records or other protected medical information, we may direct you to the process described in our Notice of Privacy Practices.
Categories of Personal Information
Depending upon how you interact with us, the personal information collected during the preceding 12 months may include categories such as:
- Identifiers, including name, email address, telephone number, IP address, mailing address, and similar identifiers.
- Customer and commercial information, including inquiries, appointment information, products or services considered or purchased, and transaction history.
- Internet or electronic network activity, including browsing information, pages visited, interactions with our website, cookies, device information, and referring URLs.
- Geolocation information, generally consisting of approximate location based on an IP address or device information.
- Audio, electronic, visual, or similar information, which may include telephone communications, photographs, or other information you elect to submit where applicable.
- Sensitive personal information, potentially including health-related information or treatment interests that you voluntarily provide, subject to applicable medical-privacy protections.
- Inferences, such as information reflecting interests or preferences derived from interactions with our website or services.
We collect these categories primarily from you, automatically through your browser or device, and from service providers assisting us in operating our website and business.
We retain personal information for only as long as reasonably necessary for the purposes for which it was collected and to meet legal, regulatory, professional, contractual, security, tax, accounting, medical-record, dispute-resolution, or other legitimate requirements.
Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
No website, electronic transmission, or storage system can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to safeguard information, we cannot guarantee absolute security.
If we become aware of a security incident involving personal information, we will take appropriate action and provide notifications when required by applicable law.
Data Retention
We retain information for periods appropriate to the type of information and the purpose for which it was collected.
Retention periods may be affected by medical-record requirements, professional licensing obligations, treatment needs, tax and accounting requirements, legal obligations, contractual requirements, fraud prevention, security requirements, and the need to establish or defend legal claims.
When information is no longer reasonably necessary, we may delete, deidentify, or securely dispose of it in accordance with applicable law and our retention practices.
Third-Party Websites and Services
Our website may contain links to or integrations with websites and services operated by third parties, including scheduling systems, patient portals, social-media platforms, payment providers, and other services.
A third party’s privacy practices are governed by its own privacy policy and terms. Entre Nous is not responsible for the privacy practices of third-party websites or services that we do not control.
Social Media
If you interact with Entre Nous through Instagram, Facebook, or another social-media platform, information you provide may also be collected and processed by that platform according to its own privacy practices.
Please avoid sending confidential medical information through public comments or unsecured social-media messaging.
Children’s Privacy
Our website is intended for a general adult audience and is not directed to children under 13.
We do not knowingly collect personal information online directly from children under 13 without appropriate parental or legal authorization. If we learn that information has been collected in violation of applicable children’s privacy law, we will take appropriate steps to delete or otherwise address that information.
Healthcare provided to a minor, when applicable, is governed separately by applicable medical-consent and privacy laws.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, technology, privacy practices, or legal requirements.
When we make changes, we will revise the “Last Updated” date at the top of this page. If required by law, we will provide additional notice regarding material changes.
We encourage visitors to review this Privacy Policy periodically.
Contact Us
If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact:
Entre Nous Aesthetics
1047 El Camino Real
Menlo Park, CA 94025
Telephone: (650) 363-0300
Email: info@enaesthetics.com
For questions or requests concerning protected health information or your medical records, please also consult our Notice of Privacy Practices.