Privacy Policy

byAVEED Aesthetics & Skin (“byAVEED,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. byAVEED PLLC operates the website byaveed.com and the patient portal at app.byaveed.com. We are a licensed aesthetic medical practice located at 3202 132nd St SE, Suite B Studio 33, Mill Creek, WA 98012.

Information We Collect

Information you provide directly: name, date of birth, contact details (phone, email, address), medical history, allergies, medications, treatment-relevant photos (only where you consent), payment card details (processed securely by Square — we never see full card numbers), and any messages you send us through forms, email, or SMS.

Information collected automatically: basic website analytics such as pages visited and time on page (via Cloudflare and Google Analytics), device and browser information, and booking-flow interactions. This data is used for site improvement and ad attribution and is not linked to your medical records.

How We Use Your Information

We use your information to:

• Schedule and provide aesthetic medical consultations and treatments
• Manage your appointments (confirmations, reminders, rescheduling, cancellations, aftercare)
• Process payment for services
• Send transactional communications by email and SMS related to your appointments
• Maintain accurate medical and business records
• Comply with legal, regulatory, and tax obligations
• Measure and improve our website and services

We do not sell your personal information. We do not share your SMS opt-in or phone number with third parties or affiliates for marketing purposes.

HIPAA & Protected Health Information

byAVEED is a HIPAA-covered entity. Your Protected Health Information (PHI) is handled in accordance with HIPAA and Washington medical privacy laws. For a full description of how we use and disclose PHI and your rights as a patient, please see our HIPAA Notice of Privacy Practices.

SMS Communications

When you book an appointment and consent to SMS messaging on our booking form, you agree to receive transactional text messages from byAVEED related to your appointments. These messages are delivered via Twilio.

• Message types: appointment confirmations, reminders, booking management links, payment links, appointment updates, and post-visit aftercare instructions
• Frequency: limited to transactional communications tied to your scheduled appointment(s)
• Costs: message and data rates may apply per your mobile carrier plan
• Opt out: reply STOP to any message at any time
• Help: reply HELP, email aveed@byaveed.com, or call (206) 457-3024

SMS consent is collected through the booking form, stored alongside the timestamp and consent language shown to you, and is never shared with third parties or affiliates. We do not use SMS for marketing or promotional content.

Third-Party Service Providers

We use vetted service providers to operate byAVEED, each receiving only the information necessary to perform their function:

• Square — payment processing
• Twilio — SMS delivery
• Resend — transactional email delivery
• Microsoft Azure — secure data hosting (US region)
• Cloudflare — website performance and analytics
• Google — analytics and advertising attribution

Each provider is contractually required to handle data in accordance with applicable privacy and security laws, including HIPAA where relevant.

Cookies & Analytics

We use cookies and similar technologies for essential site functionality, analytics, and to measure ad performance. You can control cookies through your browser settings. Disabling cookies may affect parts of the site, including the booking flow.

Your Rights

Depending on your state of residence, you may have rights to:

• Access the personal information we hold about you
• Request corrections to inaccurate information
• Request deletion of personal information (subject to medical and legal retention requirements)
• Opt out of certain processing
• Withdraw SMS or email consent at any time

Washington residents: you have additional rights under the Washington My Health My Data Act and other state privacy laws. To exercise any of these rights, email aveed@byaveed.com. We will respond within 30 days.

Data Retention

We retain your information for as long as needed to provide care, follow up, and comply with medical-record retention requirements (typically a minimum of 10 years from your last visit in Washington), as well as applicable tax, accounting, and legal obligations.

Children’s Privacy

byAVEED’s services are intended for individuals 18 and older. We do not knowingly collect personal information from minors without parent or guardian consent.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website. The “Effective” date at the top reflects the most recent revision.

Contact

For privacy questions, requests, or concerns:
byAVEED Aesthetics & Skin
Email: aveed@byaveed.com
Phone: (206) 457-3024
Mail: 3202 132nd St SE, Suite B Studio 33, Mill Creek, WA 98012