Effective Date: June 27, 2025

Maloney Plastic Surgery and Skin Care (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use and share it, how we protect it, and your rights. It applies to information collected through our website (www.maloneyplasticsurgery.com). We take your privacy seriously and comply with applicable privacy laws.

1. Information We Collect

We may collect the following types of personal information:

• Personal and Contact Information: Your name, address, email, phone number, and other identifying information when you complete forms or communicate with us.
• Health and Medical Information: Any health-related information you provide through consultation requests, forms, or during services.
• Payment Information: When you pay for services, we may collect billing-related information, although we do not store full credit card numbers.
• Website Usage Data: We collect information such as IP address, browser type, pages visited, and time spent using cookies and analytics tools.
• Third-Party and Social Media Information: Information you provide through social media platforms or interactions with third-party services connected to our site.

2. Cookies and Tracking Technologies

We use cookies, tracking pixels, and similar technologies to improve website functionality and user experience. These include:

• Functional Cookies: To remember user preferences and form inputs.
• Analytics Tools: Google Analytics helps us understand website usage patterns.
• Marketing Tools: Facebook Pixel and similar tools help deliver relevant ads to users who have visited our site.

You can usually manage cookies in your browser settings. Blocking some cookies may affect site functionality. We provide appropriate opt-out mechanisms as required by applicable law.

3. How We Use Your Information

We use your personal information to:

• Provide medical consultations and services (in person and via telehealth)
• Communicate with you about appointments, services, and procedures
• Manage your patient account and process payments
• Improve website experience and internal operations
• Market relevant services and promotions (only with your consent or as permitted)
• Comply with legal obligations and respond to lawful requests

We do not use your health or sensitive personal information for purposes beyond those stated without your explicit consent.

4. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Vendors who support our operations (e.g., hosting, analytics, payment processing)
• Legal Authorities: When required to comply with law or enforce legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you authorize us to share your data with others

All third parties are bound by confidentiality and data protection obligations.

5. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy, including for medical records, accounting, legal compliance, and service continuity. We securely delete or anonymize data once it is no longer needed.

6. Data Security

We take reasonable technical and organizational measures to protect your data against loss, misuse, and unauthorized access. These measures include secure servers, access controls, data encryption, and employee confidentiality obligations.

Despite our efforts, no system can guarantee 100% security. If you suspect your information has been compromised, please contact us immediately.

7. Your Privacy Rights

California Residents (CCPA/CPRA)

You have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt-out of data “sales” or “sharing” (we do not currently sell data)
• Correct inaccurate personal information
• Limit use of sensitive personal data
• Be free from discrimination for exercising privacy rights

To make a request, see Section 10 below.

EU/UK Residents (GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Receive your data in portable format
• Withdraw consent at any time
• Lodge a complaint with a data protection authority

We process your data on lawful bases including consent, contract, and legitimate interest. You may contact us to exercise your rights.

8. Children’s Privacy

We do not knowingly collect personal information from children under 13. If we learn that a child has provided us with personal data, we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top reflects the most recent changes. We encourage you to review this policy periodically. Major updates will be communicated via our website or email.

10. Contact Us

To ask questions, exercise your rights, or submit a privacy-related request, please contact:

Maloney Plastic Surgery

Attn:  Practice Manager

3170 North Swan Rd, Ste 150

Tucson, Arizona 85712

Email: info@maloneyplasticsurgery.com