Privacy Policy

Introduction

This Privacy Policy describes how Aestrable (“Aestrable,” “we,” “us,” or “our”) collects, uses, and shares information in connection with our website and platform services provided to partner clinics and their authorized users. Aestrable provides operational software and related infrastructure for high-volume aesthetic clinics. We are not a consumer-facing public self-serve signup platform; access is provided through direct partnership arrangements with clinics.

Information we process

Depending on how you interact with Aestrable, we may process categories of information that commonly include:

• Contact and account identifiers, such as names, email addresses, and phone numbers provided by partner clinics or their clients in connection with clinic operations.
• Operational and technical data, such as usage logs, device/browser information, diagnostic data, and security signals needed to operate and protect the services.
• Communications metadata and content processed through the platform where clinics choose to use Aestrable messaging or telephony features, consistent with clinic configuration and applicable agreements.

Partner clinics remain responsible for determining what information they collect from their patients or clients and how that information is used in the clinic relationship.

How we use phone numbers and SMS

Where a partner clinic elects to use Aestrable to send SMS or similar text notifications, phone numbers may be used for purposes that include, as applicable:

• appointment reminders;
• customer care messages;
• account activity notices; and
• secure clinic communications as configured by the clinic and permitted by applicable law and carrier requirements.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out of further SMS messages where supported for that program, and reply HELP for help or contact the clinic directly for assistance with clinic services.

We do not share mobile opt-in data with third parties for marketing purposes.

HIPAA-conscious infrastructure

Aestrable designs certain workflows with healthcare privacy considerations in mind and supports partner clinics with infrastructure oriented toward responsible handling of sensitive information. Aestrable does not provide legal advice, and describing features as “HIPAA-conscious” is not a guarantee of compliance for any specific clinic use case. Regulatory obligations depend on how a clinic uses the platform, the types of information involved, and the clinic’s own policies and agreements (including Business Associate Agreements where applicable).

How we share information

We may share information with service providers that assist us in operating the platform (for example, hosting, security, and communications delivery), subject to contractual protections. We may also disclose information if required by law, to protect rights and safety, or as otherwise described in our agreements with partner clinics.

Retention

We retain information for as long as reasonably necessary to provide the services, comply with legal obligations, resolve disputes, and enforce agreements. Retention details may also be addressed in clinic-specific agreements.

Security

We implement administrative, technical, and organizational measures designed to safeguard information. No method of transmission or storage is completely secure; we encourage clinics to implement strong access controls and operational practices.

Your choices and requests

If you are a client of a partner clinic and have questions about how your information is used, please contact the clinic directly. If you have questions about Aestrable’s practices unrelated to a specific clinic relationship, contact us using the information below.

Changes

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

Contact

Questions about this Privacy Policy may be directed to info@aestrable.com.