Effective Date: August 2, 2026

Last Updated: August 2, 2026

1. Introduction

Face First, LLC (“Face First,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, book an appointment, communicate with us, or otherwise interact with our practice.

By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our website or services.

Note on health information: This Privacy Policy governs our website and general business operations. It does not replace our HIPAA Notice of Privacy Practices, which separately describes how we use and disclose your Protected Health Information (PHI) as a health care provider under HIPAA. If there is a conflict between this Privacy Policy and our HIPAA Notice of Privacy Practices regarding PHI, the HIPAA Notice of Privacy Practices controls. You will receive a copy of our HIPAA Notice of Privacy Practices at or before your first in-person visit.

2. Information We Collect

2.1 Information you provide directly

• Contact information: name, mailing address, phone number, email address.
• Booking and appointment details: requested services, preferred appointment times, provider preferences.
• Health and medical information: if you complete an intake form, health history questionnaire, or consultation request online or in person, we may collect relevant medical history, current medications, allergies, prior procedures, and other information necessary to provide safe care. This information may constitute PHI and is handled in accordance with HIPAA and our HIPAA Notice of Privacy Practices.
• Payment information: billing name and address, and payment or deposit details processed through our third-party payment processor (we do not store full card numbers on our own systems).
• Communications: messages you send us by phone, text, email, contact form, or social media.
• Marketing opt-ins: your email address and/or phone number if you sign up for our newsletter, promotions, or appointment reminders by text (SMS) or email.

2.2 Information collected automatically

When you visit our website, we and our service providers may automatically collect:

• Device and usage data (IP address, browser type, operating system, pages viewed, referring/exit pages, date and time of visit).
• Cookies and similar tracking technologies (see Section 5).
• Analytics and advertising identifiers through tools such as Google Analytics and the Meta (Facebook/Instagram) Pixel.

2.3 Information from third parties

We may receive information from our online booking platform, payment processor, or marketing/CRM tools we use to operate our business.

3. How We Use Your Information

We use the information we collect to:

• Schedule, confirm, and manage appointments;
• Provide consultations and aesthetic medicine and skincare services;
• Process payments and deposits;
• Communicate with you about appointments, services, and account matters;
• Send marketing communications (email and/or SMS) if you have opted in, including promotions and appointment reminders;
• Improve our website, services, and patient experience;
• Analyze website traffic and advertising performance;
• Comply with legal, regulatory, and professional obligations applicable to a Rhode Island health care practice;
• Protect the safety, security, and rights of our patients, staff, and business.

We do not use health information collected for treatment purposes for marketing without your authorization, consistent with HIPAA requirements described in our HIPAA Notice of Privacy Practices.

4. How We Share Your Information

We do not sell your personal information. We may share information with:

• Service providers who help us operate our business, such as our online booking platform, payment processor, website host, email/SMS marketing platform, and IT support — under confidentiality and data protection obligations.
• Business associates, as defined under HIPAA, who assist with functions involving PHI on our behalf, subject to a Business Associate Agreement.
• Professional advisors, such as our attorneys, accountants, or consultants, as needed.
• Regulators and legal authorities, when required by law, subpoena, court order, or to protect the rights, property, or safety of Face First, our patients, or others.
• A successor entity, if Face First is involved in a merger, acquisition, or sale of business assets.

5. Cookies and Tracking Technologies

Our website uses cookies, pixels, and similar technologies, including Google Analytics and the Meta Pixel, to:

• Understand how visitors use our website;
• Measure the performance of our advertising campaigns on platforms such as Instagram and Facebook;
• Remember preferences and improve site functionality.

You can control cookies through your browser settings, and you may opt out of interest-based advertising through tools such as the Digital Advertising Alliance opt-out page or your device/browser privacy settings. Disabling cookies may affect certain website features, such as online booking.

6. Online Payments and Deposits

When you make a payment or deposit through our website, your payment details are processed by a third-party payment processor. We do not store your full payment card information on our own servers. Please refer to our payment processor’s privacy policy for details on how they handle your payment data.

7. Email and SMS Marketing

If you opt in to receive marketing emails or text messages (such as promotions or appointment reminders), we will use your contact information for that purpose. You may opt out at any time by:

• Clicking “unsubscribe” in any marketing email;
• Replying “STOP” to any marketing text message;
• Contacting us directly using the information in Section 12.

Message and data rates may apply to SMS communications. Opting out of marketing communications does not affect appointment-related communications necessary to provide your care.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of the information we collect, consistent with our obligations as a HIPAA-covered health care provider. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal and health information for as long as necessary to provide services, comply with legal and regulatory obligations (including Rhode Island medical record retention requirements), resolve disputes, and enforce our agreements. Medical records are retained in accordance with applicable state and federal record retention requirements.

10. Your Rights and Choices

Depending on the type of information and applicable law, you may have the right to:

• Request access to, or a copy of, information we hold about you;
• Request correction of inaccurate information;
• Request deletion of certain information, subject to our legal and record-keeping obligations;
• Opt out of marketing communications;
• Request restrictions on certain uses of your PHI (as described in our HIPAA Notice of Privacy Practices).

To exercise any of these rights, contact us using the information in Section 12. We may need to verify your identity before responding to your request.

11. Children’s Privacy

Our website and services are intended for adults. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a minor without appropriate consent, we will take steps to delete it.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Face First, LLC

501 Great Rd, STE 105, North Smithfield, RI 02896

Website: www.facefirst-ri.com

Phone: 401-556-0605

Email: info@facefirst-ri.com

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The “Last Updated” date at the top of this page indicates when this Privacy Policy was last revised. Material changes will be posted on our website.