Privacy Policy
Last updated: June 2026. Concept preview — this policy is informational and does not constitute legal advice.
Data controller
Directory is operated by MediEdge Marketing. For questions about your data, contact us via the listing request form on our For Providers page or at the email provided in the Contact section below.
What we collect
When you submit a contact, consultation, or listing request, we collect the details you enter: name, email address, phone number, and your message. We do not ask for — and you should never submit — medical history, conditions, symptoms, diagnoses, or health information of any kind through our forms.
How we use your information
Submissions are sent to MediEdge Marketing's in-house contact service to route your request to the relevant provider or our team. We use your information only to respond to your inquiry and facilitate provider connections. We do not sell, rent, or trade your personal information to third parties for marketing purposes.
On-device data (local storage)
Your saved med spas list is stored only in your browser's local storage on your device. This data is never transmitted to our servers. You can clear it at any time by clearing your browser data or using the clear function on the Saved page.
Cookies and tracking
Directory does not use first-party tracking cookies. We do not use analytics trackers, pixel tags, or advertising cookies. The only third-party service that may set cookies is Google reCAPTCHA, which is used solely for spam prevention on forms.
Spam protection (reCAPTCHA)
Our forms use Google reCAPTCHA v3 to prevent automated abuse. By using our forms, your interaction is subject to Google's Privacy Policy and Terms of Service. reCAPTCHA may collect hardware and software information, such as device and application data, and send it to Google for analysis.
Children's privacy
Directory is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information through our forms, please contact us so we can delete it.
California privacy rights (CCPA)
If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, to request deletion of your personal information, and to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us using the information below.
Data retention
We retain form submissions only as long as necessary to fulfill the inquiry and for reasonable record-keeping. Saved lists are stored on your device and under your control.
Security
We use industry-standard measures to protect data in transit (HTTPS/TLS) and at rest. Our contact service runs on in-house infrastructure — we do not use third-party form processors or data brokers.
Changes to this policy
We may update this policy from time to time. Changes will be reflected by the “Last updated” date at the top of this page. Continued use of Directory after changes constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy or your data? Reach us via the listing request form on our For Providers page.