What the booking form collects
When you request an appointment the application stores your name, email address, telephone number, the clinician and time you chose, the reason for the visit you selected, anything you typed into the notes field, whether you ticked the marketing box, and the IP address the request came from. The IP address is stored only to rate-limit the form against automated abuse.
Why we hold it
To take and keep the appointment, to send you the confirmation and reminder emails, and — where you ticked the box — to send occasional treatment reminders and practice news. Nothing else. We do not sell, rent or share personal information with anybody, and this website contains no advertising trackers, no analytics scripts and no third-party pixels of any kind.
Health information
The notes field on the booking form is free text and some people use it to describe symptoms, medication or a history. Treat it as what it is: a message to a practice, transmitted over an encrypted connection and stored in the practice's booking database. On this demonstration site, please do not put real health information into it.
Clinical photographs
In a real practice of this kind, photographs taken to assess a course of treatment form part of the client's record. Ours would be taken in standardised light, kept in the record, shown to the client at review appointments, never published or used in advertising, and deleted on request along with the rest of the record. There are no client photographs anywhere on this website and there never will be — /results-and-expectations.html explains why.
Emails we send
Booking confirmation
Sent immediately after you book, containing the appointment details and two links: one to confirm and one to cancel. Both links are signed, so they cannot be guessed or altered to reach somebody else's appointment.
Reminder
Sent the evening before your appointment, unless you booked on the same day — in which case you have already had the confirmation email and a reminder would be pointless.
Confirmation and cancellation receipts
Sent when you use one of those links, so there is a record in your own inbox of what you did and when.
Treatment reminders and practice news
Only if you ticked the box. A few times a year at most, and every message carries a one-click unsubscribe link that works immediately and needs no login.
How long it is kept
Appointment records are kept while they are clinically relevant. Marketing consent is kept until you withdraw it, and withdrawing it takes one click from any message we send. You can ask for your record to be deleted entirely at any time by writing to the address below, and it will be, other than anything a practice is legally required to retain.
Cookies
This website sets no cookies for visitors. The booking pages use no cookies at all. A session cookie is
set only inside the staff area at /admin.php, which clients never see, and it exists purely to
keep a signed-in member of staff signed in.
Security
The site is served over HTTPS. Staff passwords are stored as salted hashes and never in plain text. Confirm, cancel and unsubscribe links are signed with a keyed hash so that changing a value in the URL invalidates it rather than reaching somebody else's record. Repeated failed sign-in attempts lock a staff account temporarily, and the booking form is rate-limited per IP address.
Your choices
- Unsubscribe from marketing with one click, from any message, with no login.
- Ask what we hold about you, and get a copy.
- Ask for it to be corrected if it is wrong.
- Ask for it to be deleted, including any photographs.
- Decline clinical photography altogether, which is entirely your decision.
- Book by telephone instead and give us nothing online at all.
Contact
Woodside Med SPA, LLC, 37-32 61st Street, Woodside, NY 11377. Email sales@bestdealwebdesign.com, telephone 000-000-0000 — both placeholders on this demonstration site.
Aesthetic treatment is elective medicine, and this page is not medical advice for you. Aesthetic treatment is elective, it is medicine wherever it breaks the skin, and nothing on this website is medical advice for you in particular. We do not diagnose disease. Every treatment here begins with a consultation and a medical history, because your health, your medication, your skin type and what you have had done before all change what is safe and what is sensible. Some people are told no. Being told no is a normal outcome of a consultation here rather than a failure of one, and it costs exactly the same as being told yes.