Privacy Policy

Effective Date: 11.5.2025


At Esmé, we value your privacy and are committed to protecting your personal and health information. This policy explains how we collect, use, and safeguard your information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable privacy laws.


1. Information We Collect

We may collect the following types of information:

  1. Personal identifiers: name, date of birth, address, phone number, email.
  2. Health information: details you share during consultations, appointments, or through intake forms.
  3. Payment information: billing details used to process payments for services.
  4. Website data: limited, non-identifiable information such as IP address or browser type for site performance.


2. How We Use Your Information

Your information may be used to:

  1. Provide medical spa treatments and manage your care.
  2. Communicate with you about appointments, services, or results.
  3. Process payments and insurance claims (if applicable).
  4. Comply with legal, regulatory, and professional obligations.

We will not sell, rent, or share your identifiable health information with third parties for marketing purposes without your explicit authorization.


3. SMS/MMS Communications

By providing your mobile number, you may receive text (SMS/MMS) messages related to your care, appointments, or account.

  1. Message frequency varies based on your interactions.
  2. Standard message and data rates may apply.
  3. You can opt out of text messages at any time by replying STOP or contacting our office.
  4. Text communications are for informational purposes only and may not always be fully secure under HIPAA. Please avoid including sensitive health details in text replies.
  5. We take reasonable precautions to safeguard text-based communication, but full confidentiality cannot be guaranteed over wireless networks.


3. How We Protect Your Information

We use physical, technical, and administrative safeguards to secure your data, including:

  1. Encrypted electronic records and secure servers.
  2. Access limited to authorized staff only.
  3. Staff training on HIPAA and privacy practices.

Despite these safeguards, electronic communications may carry inherent risks. Please avoid sending sensitive medical information through unsecured email or social media.


4. Your Rights

You have the right to:

  1. Access and obtain a copy of your health records.
  2. Request corrections to inaccurate information.
  3. Request restrictions on how your information is used or shared.
  4. File a complaint if you believe your privacy rights have been violated.

Requests can be submitted in writing via contact information below.


5. Changes to This Policy

We may update this Privacy Policy as needed. The revised version will be posted here with an updated effective date.


6. Contact Us

If you have questions or concerns about this Privacy Policy or your rights, please contact:


Kayla Cowan

Esmé | Esthetics + Medical Rejuvenation

9000 Church Street E

Building B, Suite 200

Brentwood, TN 37027