Privacy Policy

Last Updated: October 14, 2026

Cienega Med Spa, Cienega Medical, and Cienega Spa ("Cienega," "we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, communicate with us, or use our services.

By accessing our website or providing your information to us, you consent to the practices described in this policy.

We are based in California. We also provide care, including telehealth consultations and prescriptions, to patients in other U.S. states where our providers are licensed, and we may offer care outside the United States where legally authorized. If you contact us from outside the United States, your information is transferred to the United States, where we are based.

1. Information We Collect

Information You Provide

  • Name, email address, phone number, date of birth
  • Appointment bookings and preferences
  • Health-related information submitted through consultation or intake forms
  • Payment information
  • Responses to surveys or promotions
  • Information from third-party lead generation platforms

Automatically Collected Information

  • IP address, browser type, device type, and operating system
  • Pages visited, actions taken, and time spent on our site
  • Cookies for authentication and site preferences

2. Use of Your Information

We use the information collected for the following purposes:

  • To schedule, confirm, and manage appointments
  • To personalize and deliver services to you
  • To send service-related updates and marketing communications
  • To process payments securely
  • To analyze website performance and improve user experience
  • To comply with HIPAA and other applicable regulations
  • To fulfill legal, safety, and regulatory obligations

3. Disclosure of Your Information

We do not sell your personal data. We may disclose your information in the following circumstances:

  • To service providers who help us operate our website and services
  • To healthcare professionals, if you request or consent to medical treatment
  • To law enforcement, courts, or regulators as required by law

All third-party partners are contractually obligated to safeguard your information and only use it for authorized purposes.

4. SMS/Text Messaging

By providing your mobile phone number, you consent to receiving text messages from Cienega Medical, including appointment reminders, booking confirmations, and promotional messages.

  • Message frequency: Message frequency varies.
  • Message and data rates may apply. Check with your carrier for details.
  • Opt out: Reply STOP to any message to unsubscribe from text messages.
  • Help: Reply HELP for help, or contact us at info@cienegaspa.com or (323) 655-8220.
  • Carriers: Carriers are not liable for delayed or undelivered messages.

Your consent to receive text messages is not a condition of purchasing any services. You may opt out at any time without affecting your care or appointments.

Mobile opt-in, SMS consent, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.

5. Email Communications

By providing your email address, you consent to receiving service-related and promotional emails from Cienega Medical. You may opt out at any time by clicking the unsubscribe link in any email or contacting us at info@cienegaspa.com.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, site preferences, and analytics. Cookies we set include those for login sessions, anonymous usage tracking, and site preferences.

We also maintain server-side activity logs that record page views, bookings, and other interactions along with your IP address, device type, and browser information. Email addresses and phone numbers in these logs are stored in hashed (non-readable) form.

You can disable cookies through your browser settings. This may affect site functionality such as login and booking.

7. HIPAA and Protected Health Information

Any health-related information you share with us, such as during appointment bookings or consultations, is protected under the Health Insurance Portability and Accountability Act (HIPAA). We maintain administrative, physical, and technical safeguards to ensure that your Protected Health Information (PHI) is kept confidential and secure.

8. Data Security

We implement industry-standard security protocols, including SSL encryption, secure servers, and access controls to protect your data. While no method is 100% secure, we take every reasonable measure to safeguard your information.

9. Your Privacy Rights

Wherever you live, you may ask us to access the personal information we hold about you, correct it, or delete it (subject to applicable legal exceptions, including medical record retention requirements), and to opt out of the sale of personal information or its use or sharing for targeted advertising (we do not sell personal information). You can stop marketing emails and texts at any time. For protected health information, see Section 7 above.

Additional rights may apply depending on where you live, the information involved, and applicable law, for example under the California Consumer Privacy Act (CCPA), other U.S. state privacy and consumer health data laws, or the laws of your country if you are outside the United States. We will honor the rights that apply to you, and we will not unlawfully discriminate against you for exercising your privacy rights.

To exercise these rights, email us at info@cienegaspa.com with the subject line "Privacy Request." We may verify your identity for access, correction, or deletion requests.

Our website does not currently respond to "Do Not Track" browser signals.

10. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect information from children under 13.

11. Automated Technology We Use

We use automated verification technology to help keep your account secure and to prevent fraud. When you upload a government-issued photo ID, automated technology compares the document against your account details to confirm it belongs to you. This is used solely for security, fraud prevention, and identity verification. If the automated check cannot confirm a match, a trained member of our team reviews it personally and has full authority to make the final decision. You may request human review of any automated verification outcome using the contact details below.

We also use automated technology to personalize parts of your browsing experience, such as ordering search suggestions and treatment listings based on what visitors engage with and book. This does not make any decision with legal or similarly significant effects about you.

Documents you share for your care, such as lab results, are never interpreted by automated technology. They are delivered to your medical team, and only your provider reviews and discusses them with you.

12. Sensitive Personal Information and Retention

Government identification images are sensitive personal information. When you save an ID to your account, we store the image in an encrypted, access-controlled vault for identity verification and fraud prevention, and retain it while your account remains active. You may ask us to delete your stored ID at any time, and we keep only the verification outcome afterward. Payment cards are stored as secure tokens by our payment processor; full card numbers never touch our systems. We retain other categories of personal information only as long as reasonably necessary for the purposes described in this policy, and we protect all of it with reasonable security measures appropriate to its sensitivity.

Where applicable law requires, you may limit certain uses and disclosures of sensitive personal information or opt out of certain automated decisions. You can exercise all rights described in this policy using the contact details below.

13. Our Staff App (Cienega Switchboard)

Cienega Switchboard is an app used only by Cienega staff to run our clinics. It is not offered to patients. It collects the following information:

  • Staff account details: name, email address, phone number and user ID.
  • The client records staff work on, including health information, photos, messages, call audio, addresses and payment records.
  • Device ID, location, and signals from nearby devices, used to tell which clinic and room a device is in.
  • Usage, crash and performance data, used to keep the app working.

This information is linked to the staff member's account and used only to run our clinics and care for our patients. It is never used for tracking or third-party advertising, and it is never sold. Client health information in the app is protected as described in Section 7. Questions about the app: email info@cienegaspa.com or call (323) 655-8220.

14. Changes to This Policy

We may update this policy. Material changes will be posted on this page with an updated effective date.

Contact Us

Cienega Medical
Phone: (323) 655-8220
Email: info@cienegaspa.com
Locations: Calabasas • Santa Monica • West Hollywood