Privacy Policy

This notice explains what Skin Talk PLLC, doing business as Skin Talk, collects through this website, why, and who else handles it. It is written to describe what the site actually does rather than everything a clinic might conceivably do.

The short version: the website collects almost nothing. Two forms take a name, email and phone number and send them to us as email. Nothing from either form is stored in a database. Analytics only run if you accept cookies, and they are switched off until you do. Your medical records are a separate matter, covered by a separate notice.

1. What this notice covers, and what it does not

In short: this covers the website. Your medical record is covered by a separate notice.

This notice applies to skintalkstudio.com and to people who visit it, whether or not they are patients.

It does not cover the health information Skin Talk holds about you as a patient. Treatment records, clinical photographs, consultation notes and anything else created in the course of your care are protected health information under HIPAA, and are governed by the clinic's Notice of Privacy Practices, which is a separate document. Ask at the front desk or email hello@skintalkstudio.comfor a copy.

The distinction matters in practice: the forms on this website are deliberately built so that no health information passes through them. There is no symptom field and no medical history field, and the notes box on the contact form asks for scheduling details only. Please do not send us medical details through this website. If you need to discuss a health concern, call the clinic on281-241-7076 or raise it at your appointment.

2. Information you give us

In short: a name, an email address, a phone number, and optionally a short scheduling note. That is the entire list.

There are two forms on this website.

The contact form, on the About page, asks for your name, email address and phone number, and has an optional notes field for scheduling information. When you submit it, those details are sent to the clinic as an email. They are not written to a database, a spreadsheet or any other store. The email arrives in the clinic's inbox and is handled like any other message from a prospective client.

The newsletter form, on the home page, asks for an email address only.

Both forms are protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Turnstile is described in section 5.

If you email, call or write to us outside these forms, we hold whatever you chose to send, for as long as we need it to answer you.

3. Information collected automatically

In short: standard server logs always; analytics only if you accept cookies.

This website is hosted on Cloudflare. Like any web host, Cloudflare records technical information needed to serve pages and to defend the site against attack, including IP addresses, request times, and browser and device details. This happens for every visitor and is not something a cookie choice controls, because it is how the site is delivered rather than something added on top.

Beyond that, this website uses Google Analytics 4, loaded through Google Tag Manager, to understand which pages people find useful. Analytics do not run until you accept cookies. The site sets Google Consent Mode v2 to deny analytics storage, advertising storage, advertising user data and advertising personalisation before any Google tag loads, and only lifts that denial if you choose Accept on the cookie banner.

4. Cookies and your choice

In short: decline and nothing analytic is set. The banner never blocks the page.

When you first arrive you will see a small banner at the bottom of the screen offering Accept and Decline. It does not cover the page, does not trap your keyboard, and the site works identically whichever you pick. Nothing is hidden behind accepting.

Your choice is remembered in your browser's local storage under the keyst-consent. That value stays on your device; it is not sent to us and does not identify you. Clearing your browser data resets it, and the banner will ask again.

You can change your mind at any time using the cookie preferences link in the footer.

If you accept, Google Analytics and Google Tag Manager set their own cookies, which are described in Google's own documentation. If you decline, they do not.

5. Who else handles your information

In short: a short list of named services, each doing one job. We do not sell personal information.

Skin Talk does not sell your personal information and does not share it with data brokers. The services below process information on the clinic's behalf so the website can work:

• Cloudflare hosts this website and runs the code behind the two forms. Cloudflare also provides Turnstile, the anti-spam check on both forms.
• Resend delivers the email that each form submission becomes. Your name, email address, phone number and any note pass through Resend on the way to the clinic's inbox.
• Google provides Analytics and Tag Manager, and receives usage data only if you accept cookies.
• Google Maps supplies the map on the About page. Loading that page contacts Google.

We may also disclose information where the law requires it, or where it is necessary to protect the clinic's rights or someone's safety.

6. When you leave this website

In short: booking and shop checkout happen on other companies' platforms, under their privacy notices.

Two things people commonly do here are not handled by this website at all:

• Booking an appointment. The booking window is Boulevard (joinblvd.com). Anything you type into it, including appointment details and payment information, goes to Boulevard, under Boulevard's privacy notice, not this one.
• Buying a product. The shop's checkout runs on Shopify. When you continue to payment, the address bar changes and you are on Shopify's platform, under Shopify's privacy notice. Skin Talk never sees your card number.

7. How long we keep it

In short: form submissions live as email, not as records in a system.

Because neither form writes to a database, there is no website data store to delete from. What persists is the email each submission generates, which stays in the clinic's mailbox until it is no longer needed and is then deleted. If your enquiry becomes an appointment, the information you gave moves into the clinic's practice-management system and is covered by the Notice of Privacy Practices rather than this notice.

Analytics data is retained by Google under the retention period set for the property.

8. How it is protected

The site is served only over HTTPS. Form submissions are encrypted in transit, checked by Turnstile, and handled by code that keeps no copy. Access to the clinic's email and practice systems is limited to staff who need it.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. This is a reason to keep medical details off the website forms, as section 1 asks.

9. Your choices and rights

In short: email us and we will act on reasonable requests.

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. You can withdraw your cookie consent at any time from the footer link, and you can unsubscribe from the newsletter using the link in any newsletter email.

Depending on where you live, state law may give you additional rights. Requests of any kind go to hello@skintalkstudio.com and we will respond within the time the applicable law allows.

Requests about your medical record follow a different route, set out in the Notice of Privacy Practices.

10. Children

This website is not directed at children under 13 and we do not knowingly collect their information through it. If you believe a child has submitted information here, email us and we will remove it.

11. Changes to this notice

When this notice changes, the date at the top changes with it. Material changes will be posted here.

12. How to reach us

Email hello@skintalkstudio.com, call281-241-7076, or write to:

Skin Talk PLLC
2310 Harlem Rd Ste 208
Richmond, TX 77406
United States