Privacy Policy
Your privacy is our highest priority. This policy explains how we collect, use, and protect your personal information through our website and contact forms.
Effective Date: August 26, 2025
Last Updated: August 26, 2025
About This Notice
This Privacy Policy describes how St. Petersburg Skin & Laser collects, uses, and protects personal information submitted through our website and contact forms. For information about how we handle medical information collected during appointments, see our HIPAA Notice of Privacy Practices section below.
Practice Information
St. Petersburg Skin & Laser
100 40th Ave N
St. Petersburg, FL 33703
(727) 474-9399
Monday – Friday, 8:00 AM – 5:00 PM
Privacy & Legal Compliance
We are committed to protecting your personal information and maintaining your privacy. This website privacy policy covers information collected through our website only. Medical information collected during appointments is covered by our HIPAA Notice of Privacy Practices detailed below.
Secure Protection
Your website data is protected with industry-standard security measures
Limited Access
Only authorized staff have access to contact form submissions
Legal Compliance
Compliance with privacy laws including GDPR and CCPA
Applicable Laws & Regulations
- • General Data Protection Regulation (GDPR) for international visitors
- • California Consumer Privacy Act (CCPA) for California residents
- • Florida Personal Information Protection Act
- • CAN-SPAM Act for email communications
- • Americans with Disabilities Act (ADA) for website accessibility
Note: Medical information collected during appointments is covered by our HIPAA Notice of Privacy Practices below.
Information We Collect Through Our Website
Important Notice
This website does not collect any Protected Health Information (PHI) or medical data. All medical information is collected and managed during in-person appointments under HIPAA-compliant procedures detailed in our HIPAA Notice below.
Contact Form Information
When you submit our contact forms, we collect:
- • Name: First and last name
- • Email Address: For appointment scheduling and communication
- • Phone Number: For appointment confirmation and consultation scheduling
- • Treatment Interest: General area of interest (not medical details)
- • Message: General inquiries or appointment requests
- • Consultation Preference: Phone call or email preference
Website Analytics Information
We automatically collect anonymized technical information:
- • Website Usage: Pages visited, time spent on site (anonymized)
- • Technical Data: Browser type, device type, screen resolution
- • IP Address: For security purposes and geographic analytics
- • Referral Source: How you found our website
- • Cookie Data: Website preferences and functionality
What We DON'T Collect
- • Medical history or health conditions
- • Insurance information
- • Social security numbers
- • Payment information (through this website)
- • Medical photographs or records
- • Prescription or medication information
How We Use Your Website Information
Appointment Scheduling & Communication
We use your contact form information to:
- • Schedule initial consultations and appointments
- • Send appointment confirmations and reminders
- • Answer questions about our services
- • Provide general information about treatments
- • Follow up on consultation requests
Website Improvement
We use anonymized website analytics to:
- • Improve website functionality and user experience
- • Understand which content is most helpful to visitors
- • Optimize website performance and loading speeds
- • Identify and fix technical issues
- • Plan new website features and content
Practice Operations
We may use aggregated, non-identifying data for:
- • Understanding patient interest in different treatments
- • Planning practice capacity and scheduling
- • Improving our educational content
- • Business planning and service development
Optional Marketing Communications
Only with your explicit consent, we may use your contact information to:
- • Send educational newsletters about skin health
- • Notify you about new treatment options
- • Share special consultation offers
- • Provide seasonal skincare tips
Note: You can unsubscribe from marketing communications at any time. We will never share your contact information with third parties for marketing purposes.
When We Share Your Information
We have strict policies about sharing your personal information collected through our website:
Limited Internal Use
- • Authorized office staff for appointment scheduling
- • Our doctors for consultation preparation
- • Administrative staff for practice operations
- • IT support for website maintenance (anonymized data only)
Required by Law Only
- • Valid court orders or subpoenas
- • Law enforcement with proper legal authority
- • Legal compliance investigations
- • Protection of rights and safety when required
Our Commitment to Your Privacy
We will NEVER sell, rent, or trade your personal information to third parties. We do not share your contact information with marketers, advertisers, or other businesses. Your information stays with our practice.
Third-Party Services
We use secure third-party services that may process your information (detailed in the Website Privacy & Cookies section below):
- • Email services for appointment confirmations (encrypted)
- • Analytics for website improvement (anonymized data only)
- • Secure hosting and security services
All third-party services maintain strict privacy and security standards.
Your Website Privacy Rights
You have the following rights regarding your personal information collected through our website contact forms:
Right to Access Website Data
You have the right to request a copy of the personal information we have collected about you through our website contact forms.
Right to Correction
You may request corrections to your contact information if you believe it contains errors or is outdated.
Right to Deletion
You may request that we delete your contact information from our website database, subject to legal and business requirements.
Right to Opt-Out
You may opt out of marketing communications at any time by contacting us or using unsubscribe links in emails.
Right to Portability
You may request that we provide your contact information in a portable format for transfer to another provider.
Right to Notification
You have the right to be notified if there is a data breach that affects your personal information.
California & EU Residents
If you are a California resident (CCPA) or EU resident (GDPR), you have additional privacy rights. Contact us for more information about exercising these rights.
Note About Medical Information
The rights above apply only to website contact information. For rights regarding medical information collected during appointments, see the HIPAA Notice of Privacy Practices section below.
HIPAA Notice of Privacy Practices (Summary)
In addition to the website privacy practices described above, St. Petersburg Skin & Laser maintains separate HIPAA-compliant policies for all Protected Health Information (PHI) collected during medical care.
Use and Disclosure of PHI
We may use and share your Protected Health Information for:
Permitted Uses
- • Treatment: Providing, coordinating, or managing your healthcare
- • Payment: Billing and collection activities, insurance claims
- • Healthcare Operations: Quality assessment, staff training, business management
- • Legal Requirements: When required by federal, state, or local law
Authorization Required
- • Marketing communications
- • Sale of Protected Health Information
- • Psychotherapy notes (if applicable)
- • Any other uses not specified above
Important: Any other uses or disclosures of your PHI will require your written authorization. You may revoke this authorization at any time by contacting our Privacy Officer.
Your Rights Regarding PHI
Under HIPAA, you have the following rights regarding your Protected Health Information:
Right to Access
You have the right to inspect and obtain a copy of your medical record and other health information we maintain about you.
Right to Amend
You may request corrections to your health information if you believe it contains errors or is incomplete.
Right to Request Restrictions
You may request restrictions on certain uses and disclosures of your health information for treatment, payment, or healthcare operations.
Right to Confidential Communications
You may request that we communicate with you about your health information in a certain way or at a certain location.
Right to an Accounting
You may request an accounting of disclosures of your health information that we have made for purposes other than treatment, payment, healthcare operations, or other permitted uses.
Right to a Paper Copy
You have the right to receive a paper copy of our complete HIPAA Notice of Privacy Practices, even if you agreed to receive it electronically.
Privacy Official Contact
Our designated Privacy Officer is responsible for ensuring compliance with HIPAA privacy requirements and handling all PHI-related inquiries:
Nicole Gagliardo – Privacy Officer
St. Petersburg Skin & Laser
100 40th Ave N
St. Petersburg, FL 33703
Phone: (727) 474-9399
Email: nicole@stpeteskinandlaser.com
You may contact our Privacy Officer for questions about this notice, requests regarding your PHI, to file a complaint, or to obtain a complete copy of our HIPAA Notice of Privacy Practices.
Complete HIPAA Notice
This is a summary of our HIPAA privacy practices. Our complete HIPAA Notice of Privacy Practices contains additional details about your rights and our privacy practices. You may request a complete copy during your visit or by contacting our Privacy Officer.
Data Security & Protection
We implement comprehensive security measures to protect your personal information collected through our website:
Physical Safeguards
- • Secure office facility with controlled access
- • Locked storage for any printed contact information
- • Restricted access to computers with contact data
- • Secure disposal of printed materials
Technical Safeguards
- • Encrypted contact form submissions
- • Secure network connections and firewalls
- • Regular security updates and patches
- • Secure database storage with access controls
Administrative Safeguards
- • Staff training on privacy procedures
- • Regular security risk assessments
- • Data breach response procedures
- • Third-party vendor privacy agreements
Website Security
- • SSL encryption for data transmission
- • Secure hosting infrastructure
- • Regular security monitoring
- • Protected contact form submissions
Website Privacy & Cookies
Cookies We Use
Our website uses the following types of cookies:
- • Essential Cookies: Required for website functionality and security
- • Analytics Cookies: Help us understand how visitors use our website (anonymized data)
- • Preference Cookies: Remember your settings and preferences
Third-Party Services
We may use the following third-party services on our website:
- • Google Analytics (anonymized data collection)
- • Secure payment processors for consultation fees
- • Appointment scheduling systems
- • Email communication platforms
Cookie Control
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality.
Information Retention & Disposal
We retain your website information for the following periods:
Contact Information
- • Active contact forms: Until appointment scheduled or 2 years
- • Email communications: 3 years for business records
- • Marketing opt-ins: Until unsubscribed
- • Consultation requests: 1 year after initial contact
Website Analytics
- • Google Analytics: 26 months (anonymized)
- • Website logs: 12 months
- • Security logs: 2 years
- • Performance data: 1 year
Secure Disposal
When information is no longer needed, we securely delete it from our systems. Electronic data is permanently removed using secure deletion methods, and any printed materials are shredded.
Early Deletion Requests
You may request early deletion of your contact information at any time, subject to legal and business requirements (such as completed transactions or scheduled appointments).
Contact Us & File Complaints
Contact Information
If you have questions about this privacy policy or wish to exercise your rights, please contact us:
Filing Complaints
You may file a complaint if you believe your privacy rights have been violated:
With Our Practice:
Contact us using the information above. All complaints must be in writing.
With Federal Authorities:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
No Retaliation: We will not retaliate against you for filing a complaint about our privacy practices.
Changes to This Policy
We reserve the right to change this privacy policy at any time. Changes will be effective immediately upon posting the revised policy on our website and in our office. The revised policy will apply to all protected health information we maintain, including information created or received before the changes.
You may request a copy of our current privacy policy at any time by contacting our office or visiting our website at stpeteskinandlaser.com.
Current Version: This privacy policy is effective as of August 26, 2025. Previous versions are available upon request.
Acknowledgment of Receipt
By using our website and submitting contact forms, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and protect your personal information.
Have questions about our privacy practices?
Contact Us