Privacy Policy

Last Updated: April 22, 2026

Cienega Med Spa, Cienega Medical, and Cienega Spa ("Cienega," "we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, communicate with us, or use our services.

By accessing our website or providing your information to us, you consent to the practices described in this policy.

1. Information We Collect

Information You Provide

• Name, email address, phone number, date of birth
• Appointment bookings and preferences
• Health-related information submitted through consultation or intake forms
• Payment information
• Responses to surveys or promotions
• Information from third-party lead generation platforms

Automatically Collected Information

• IP address, browser type, device type, and operating system
• Pages visited, actions taken, and time spent on our site
• Cookies for authentication and site preferences

2. Use of Your Information

We use the information collected for the following purposes:

• To schedule, confirm, and manage appointments
• To personalize and deliver services to you
• To send service-related updates and marketing communications
• To process payments securely
• To analyze website performance and improve user experience
• To comply with HIPAA and other applicable regulations
• To fulfill legal, safety, and regulatory obligations

3. Disclosure of Your Information

We do not sell your personal data. We may disclose your information in the following circumstances:

• To service providers who help us operate our website and services
• To healthcare professionals, if you request or consent to medical treatment
• To law enforcement, courts, or regulators as required by law

All third-party partners are contractually obligated to safeguard your information and only use it for authorized purposes.

4. SMS/Text Messaging

By providing your mobile phone number, you consent to receiving text messages from Cienega Medical, including appointment reminders, booking confirmations, and promotional messages.

• Message frequency: Message frequency varies.
• Message and data rates may apply. Check with your carrier for details.
• Opt out: Reply STOP to any message to unsubscribe from text messages.
• Help: Reply HELP for help, or contact us at info@cienegaspa.com or (323) 655-8220.
• Carriers: Carriers are not liable for delayed or undelivered messages.

Your consent to receive text messages is not a condition of purchasing any services. You may opt out at any time without affecting your care or appointments.

Mobile opt-in, SMS consent, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.

5. Email Communications

By providing your email address, you consent to receiving service-related and promotional emails from Cienega Medical. You may opt out at any time by clicking the unsubscribe link in any email or contacting us at info@cienegaspa.com.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, site preferences, and analytics. Cookies we set include those for login sessions, anonymous usage tracking, and site preferences.

We also maintain server-side activity logs that record page views, bookings, and other interactions along with your IP address, device type, and browser information. Email addresses and phone numbers in these logs are stored in hashed (non-readable) form.

You can disable cookies through your browser settings. This may affect site functionality such as login and booking.

7. HIPAA and Protected Health Information

Any health-related information you share with us, such as during appointment bookings or consultations, is protected under the Health Insurance Portability and Accountability Act (HIPAA). We maintain administrative, physical, and technical safeguards to ensure that your Protected Health Information (PHI) is kept confidential and secure.

8. Data Security

We implement industry-standard security protocols, including SSL encryption, secure servers, and access controls to protect your data. While no method is 100% secure, we take every reasonable measure to safeguard your information.

9. Your Rights (California Residents)

California residents may request to access the personal data we hold, request deletion of their information, or opt out of the sale or sharing of personal information (we do not sell).

To exercise these rights, email us at info@cienegaspa.com with the subject line "Privacy Request."

Our website does not currently respond to "Do Not Track" browser signals.

10. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect information from children under 13.

11. Automated Technology We Use

We use automated verification technology to help keep your account secure and to prevent fraud. When you upload a government-issued photo ID, automated technology compares the document against your account details to confirm it belongs to you. This is used solely for security, fraud prevention, and identity verification. If the automated check cannot confirm a match, a trained member of our team reviews it personally and has full authority to make the final decision. You may request human review of any automated verification outcome using the contact details below.

We also use automated technology to personalize parts of your browsing experience, such as ordering search suggestions and treatment listings based on what visitors engage with and book. This does not make any decision with legal or similarly significant effects about you.

Documents you share for your care, such as lab results, are never interpreted by automated technology. They are delivered to your medical team, and only your provider reviews and discusses them with you.

12. Sensitive Personal Information and Retention

Government identification images are sensitive personal information. When you save an ID to your account, we store the image in an encrypted, access-controlled vault for identity verification and fraud prevention, and retain it while your account remains active. You may ask us to delete your stored ID at any time, and we keep only the verification outcome afterward. Payment cards are stored as secure tokens by our payment processor; full card numbers never touch our systems. We retain other categories of personal information only as long as reasonably necessary for the purposes described in this policy, and we protect all of it with reasonable security measures appropriate to its sensitivity.

California residents may limit the use of sensitive personal information, opt out of automated decisionmaking where required by law, and exercise all rights described in this policy using the contact details below.

13. Changes to This Policy

We may update this policy. Material changes will be posted on this page with an updated effective date.

Contact Us

Cienega Medical
Email: info@cienegaspa.com
Locations: West Hollywood • Santa Monica • Calabasas