Privacy Policy

Effective Date: June 2026

Who This Policy Applies To

This Privacy Policy applies to all individuals who interact with Jillian Blair Skin, including clients who book or receive services in person, visitors to our website at jillianblairskin.com, individuals who purchase products online, subscribers to our email communications, and anyone who contacts us through digital or social channels.

If you are located in the United Kingdom, additional protections apply. Please see Section 12 of this Policy.

What Information We Collect

Information You Provide Directly

Contact and identity information: name, email address, phone number, mailing address
Health and skin history: skin conditions, known allergies, medications, pregnancy or nursing status, prior treatments, and any other health information disclosed on intake forms
Payment information: processed through third-party payment processors including Square
Appointment and booking data: service selections, booking history, scheduling preferences
Communications: messages sent to us via email, text, social media, or web forms
Photography and visual documentation: before-and-after images taken with your consent for treatment tracking or marketing purposes

Information Collected Automatically

When you visit our website, we or our third-party partners may automatically collect:

Browser type, device type, and operating system
IP address and approximate location
Pages visited, time spent on pages, and referring URLs
Cookies and similar tracking technologies

Information From Third-Party Platforms

Our website and business operations use the following third-party platforms, each of which may collect and process your data under their own terms:

Wix: website hosting and e-commerce platform
Vagaro: appointment booking and client management
Square: payment processing
Email and marketing platforms (including but not limited to those used for newsletters, promotional communications, and automated reminders)

We encourage you to review the privacy policies of each platform. JBS is not responsible for the data practices of third-party services.

Sensitive Personal Data

Health and skin history information disclosed during intake, consultation, or treatment is considered sensitive personal data. We collect this information solely to provide you with safe and appropriate skincare services. We do not sell, license, or share this information with third parties for commercial purposes.

By completing an intake form or disclosing health information to us, you consent to our collection and use of that information for the purposes described in this Policy.

How We Use Your Information

We use the information we collect for the following purposes:

To schedule, confirm, and deliver appointments and services
To assess contraindications and customize treatments safely
To process payments and manage your account
To communicate with you about appointments, products, and services
To send marketing and promotional communications, where you have consented
To document treatment progress and adapt your protocol over time
To comply with applicable laws, regulations, and professional standards
To protect the safety of clients, staff, and the business
To analyze website usage and improve our digital presence
To operate and improve our booking, payment, and communication systems

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience, analyze traffic, and support marketing activities. These may include:

Essential cookies: required for the website to function correctly
Analytics cookies: used to understand how visitors use the site (for example, Google Analytics)
Marketing and advertising cookies: used to track engagement and serve relevant content (for example, Meta Pixel or equivalent)

By using our website, you consent to the use of cookies in accordance with this Policy. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

Where required by applicable law, we will seek your consent before placing non-essential cookies.

How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

Service providers: third-party platforms we use to operate the business (Vagaro, Wix, Square, and email or marketing tools), each acting as a data processor on our behalf
Legal obligations: when required by law, regulation, court order, or to respond to a lawful government request
Safety: when necessary to protect the health or safety of a client, employee, or the public
Business transfers: in the event of a merger, acquisition, or sale of the business, your information may be transferred as part of that transaction

We do not share your health or skin history with any third party for commercial purposes.

Data Retention

We retain your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. The following general timelines apply:

Client records and treatment documentation: retained for a minimum of seven years following the last appointment, consistent with NJ professional and legal standards
Payment records: retained as required by applicable tax and financial regulations
Marketing communications: until you withdraw consent or unsubscribe
Website analytics data: subject to the retention policies of the applicable third-party platform

When information is no longer required, we will delete or anonymize it in a manner consistent with our security practices.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include access controls on our client management system, secure payment processing through our third-party processors, and confidentiality obligations for all staff.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we take data protection seriously and will notify you if a breach affects your information as required by applicable law.

Your Rights Under the New Jersey Data Privacy Act

If you are a New Jersey resident, the New Jersey Data Privacy Act (NJDPA), effective January 2025, grants you the following rights with respect to your personal data:

Right to know: you may request confirmation of whether we process your personal data and access to that data
Right to correct: you may request correction of inaccurate personal data
Right to delete: you may request deletion of personal data we hold about you, subject to legal exceptions
Right to data portability: you may request a copy of your personal data in a portable format
Right to opt out of targeted advertising: where we use your data for targeted advertising, you may opt out
Right not to be discriminated against: we will not discriminate against you for exercising any of these rights

How to Submit a Request

To exercise any of the rights above, please contact us by mail:

Jillian Blair and Co., LLC

196 Paterson Ave., Second Floor Suite B

East Rutherford, NJ 07073

We will respond to verified requests within 45 days, with the option to extend by an additional 45 days if necessary. We may need to verify your identity before processing a request. We will not charge a fee for responding to requests unless they are manifestly unfounded or excessive.

Sensitive Data and Consent Withdrawal

Where processing of your health information is based on your consent, you may withdraw that consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and it may affect our ability to provide services to you safely.

Marketing Communications

We may send you marketing emails, SMS messages, or other promotional communications about services, products, and offers. You consent to receiving marketing communications when you provide your contact information and do not opt out at the point of collection.

You may unsubscribe from email marketing at any time by clicking the unsubscribe link in any email or by contacting us directly. You may opt out of SMS communications by replying STOP to any message.

Opting out of marketing communications does not affect transactional communications related to your appointments or account.

Children's Privacy

Our website and online services are not directed to individuals under the age of 18. We do not knowingly collect personal information directly from minors through our website. Information collected in connection with services provided to a minor is collected from and through the parent or legal guardian who has provided consent, and is handled in accordance with our minor services policies.

United Kingdom Users

Jillian Blair Skin operates a location in London. If you are located in the United Kingdom, the following applies in addition to the rest of this Policy.

Your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The legal bases for our processing of your personal data include:

Performance of a contract: processing necessary to provide the services you have booked
Legitimate interests: processing necessary for our business operations, including record-keeping, safety, and fraud prevention, where those interests are not overridden by your rights
Consent: processing of health information disclosed during intake, and processing for marketing communications
Legal obligation: processing required to comply with UK law

As a UK-based client, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been processed unlawfully.

Changes to This Policy

We may update this Privacy Policy at any time. When we do, we will revise the Effective Date at the top of the document and post the updated version on our website. Your continued use of our website or services after changes are posted constitutes your acceptance of the updated Policy.

For material changes affecting how we process sensitive or health-related data, we will make reasonable efforts to notify you directly.

If you have questions, concerns, or requests relating to this Privacy Policy or how we handle your information, please contact us at:

Jillian Blair and Co., LLC

196 Paterson Ave., Second Floor, Suite B

East Rutherford, NJ 07073

hello@jillianblairskin.com