Privacy Policy

We collect information you choose to provide when you book an appointment, purchase products or gift cards, submit intake forms, contact us, or use the client portal. This may include your name, contact details, appointment preferences, skin concerns, intake responses, treatment history, messages, payment-related transaction details, and other information needed to provide skincare services.

We may also collect basic technical information from your browser or device, such as pages visited, approximate location derived from network data, referring links, and similar analytics or security information.

If a PureDerm administrator connects a Google Business Profile account, PureDerm requests the Google Business Profile permission needed to see, edit, create, and delete business listings. We use this access only to provide business-facing features inside PureDerm, such as syncing listing details, service or booking links, posts, media, reviews, review replies, and performance insights.

PureDerm stores Google account and location identifiers, listing metadata, sync status, review and performance data, and an encrypted refresh token when offline access is approved. We do not sell Google user data, use it for advertising, or transfer it except as needed to provide and secure PureDerm's user-facing Google Business Profile features, comply with law, or protect against abuse.

PureDerm's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use information to schedule and manage appointments, process payments, prepare and document treatments, personalize client care, send service-related messages, operate the client portal, maintain business records, respond to inquiries, improve the site, prevent abuse, and comply with legal or professional obligations.

We do not sell personal information. We do not use Google Business Profile data for advertising, retargeting, lending, or credit decisions.

We use trusted service providers to host the site and application, store application data, process payments, send messages, analyze site performance, and connect to Google APIs. These providers may process information only as needed to provide their services to PureDerm.

Payment details are handled by payment processors. PureDerm does not store full card numbers on its own servers.

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. Google refresh tokens used for Google Business Profile features are encrypted at rest.

We keep information for as long as needed to provide services, maintain records, resolve disputes, comply with legal obligations, and support legitimate business operations. When information is no longer needed, we delete, de-identify, or archive it according to our operational and legal requirements.

You may contact PureDerm to request access, correction, or deletion of information associated with you, subject to legal and operational limits. You may also unsubscribe from non-essential communications when an unsubscribe option is provided.

Google users can revoke app access from their Google Account permissions page. If Google Business Profile access is revoked, PureDerm will no longer be able to sync or manage that profile through Google APIs.

PureDerm's site and services are not directed to children under 13. We do not knowingly collect personal information from children under 13 through the website.

We may update this Privacy Policy as our services, legal requirements, or data practices change. The updated date at the top of this page shows when it was last revised.