Privacy Policy

This Privacy Policy describes how Nurse Amalia ("Nurse Amalia," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit https://nurseamalia.com, create a member account, book services, purchase a membership, or otherwise interact with us.

We are located in Los Angeles, CA and provide medically guided aesthetic nursing services. This policy applies to visitors and members in the United States, with additional rights for California residents as described below.

We may collect the following categories of personal information:

• Identifiers: name, email address, phone number, account username and password (stored in hashed form).
• Commercial information: membership tier, appointment requests, service interests, and transaction records processed through our payment provider.
• Internet or network activity: IP address, browser type, device information, pages viewed, and referral URLs collected through cookies and similar technologies.
• Health and service information you choose to share in messages, appointment notes, or consultations (treated as sensitive personal information).
• Professional information submitted in careers applications, including résumés and voluntary self-identification responses.
• Inferences: preferences related to services or membership based on your interactions with our site.

We use personal information to:

• Provide, operate, and improve our website, member portal, and services.
• Create and manage member accounts, appointments, and memberships.
• Process payments and subscriptions through Stripe.
• Respond to inquiries and provide customer support.
• Send service-related communications, including renewal and cancellation notices where required by law.
• Maintain security, prevent fraud, and comply with legal obligations.
• Analyze site usage to improve user experience.

We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

We may disclose personal information to service providers that help us operate our business, such as hosting (Vercel), database services (Supabase), payment processing (Stripe), and email delivery providers. These providers may use personal information only to perform services on our behalf.

We may also disclose information when required by law, to protect rights and safety, or in connection with a business transaction such as a merger or acquisition.

Account and inquiry records are kept while your account is active and for up to four (4) years after your last interaction, unless a longer period is required for tax, billing, professional, or legal reasons. Payment records processed by Stripe follow Stripe's retention practices and applicable financial recordkeeping rules. You may request deletion as described below; we may retain information we are legally required to keep.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Information you share about your health, treatment goals, or clinical history may be protected under the California Confidentiality of Medical Information Act (CMIA) when we are providing health care. We use that information to respond to you, assess whether a consultation is appropriate, and deliver care. We do not use health information for advertising.

This website is not a HIPAA Notice of Privacy Practices. If we later bill health plans electronically and become a HIPAA covered entity, we will provide a separate Notice of Privacy Practices before using or disclosing protected health information for treatment, payment, or health care operations.

Do not send emergency symptoms or full medical records through website forms.

When you submit a form, we collect the categories listed above for the purposes listed in this policy: responding to you, operating memberships and appointments, processing applications, securing the site, and meeting legal duties. We do not sell or share personal information for cross-context behavioral advertising. Sensitive information, including health details you volunteer, is used only to provide the service you requested and for legally required recordkeeping.

California's Online Privacy Protection Act requires us to say how we respond to browser Do Not Track signals. Our site currently uses only essential cookies (for example, to keep you signed in). We do not run advertising or analytics cookies, and we do not change our data practices based on a Do Not Track signal because we do not track you across other companies' sites. See our Cookie Policy for details.

Service emails (account, appointment, and membership notices) are transactional. If we later send promotional email, those messages will include a physical mailing address and a way to opt out, as required by the CAN-SPAM Act.

We do not send marketing text messages. If we offer SMS later, we will ask for your prior express written consent and honor opt-out requests, consistent with the Telephone Consumer Protection Act.

Our services are provided in California. If you live in another state and contact us, we still apply the access, correction, and deletion process described below. Several states have consumer privacy laws that apply only after a business meets revenue or volume thresholds. Even when a statute does not legally apply to us yet, you may email a privacy request and we will respond.

We do not sell personal information. We do not process personal information for targeted advertising.

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell or share.
• Access the specific pieces of personal information we hold about you.
• Request deletion of personal information, subject to certain exceptions.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising).
• Limit the use and disclosure of sensitive personal information where applicable.
• Not receive discriminatory treatment for exercising your privacy rights.

To submit a privacy request, contact us at hello@nurseamalia.com with the subject line "California Privacy Request" and describe your request. We will verify your identity before fulfilling requests and respond within the timeframes required by California law.

You may designate an authorized agent to submit a request on your behalf. Authorized agents must provide proof of authorization as required by law.

We do not sell personal information. California residents do not need to submit a "Do Not Sell or Share My Personal Information" request for that purpose, but may contact us with any privacy question.

Our services are intended for adults. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have collected information from a minor, contact us and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when changes were last posted. Continued use of our website after changes become effective constitutes acceptance of the revised policy.

For privacy questions or requests, contact:

• Nurse Amalia
• Los Angeles, CA
• Email: hello@nurseamalia.com
• Phone: we will publish a studio number before opening
• Website: https://nurseamalia.com