Last updated: June 2026
This Privacy Policy and Notice of Privacy Practices (this “Policy”) explains how Moon Valley Med Spa LLC (“Moon Valley Med Spa,” “we,” “us,” or “our”) collects, uses, protects, and shares your information — including your health information and our text-message communications. It applies to our website, online booking, retail purchases, and the care we provide at our Phoenix, Arizona location. We are required by law to safeguard the privacy of your protected health information, to give you notice of our legal duties and privacy practices, and to follow the practices described here.
Your health information
As a provider of medical and aesthetic services, we create and keep records of the care we provide. Information you share with us in consultations, intake forms, and consent forms — and the records of your treatments — is “protected health information” and is handled in accordance with applicable law, including HIPAA where it applies.
Your rights regarding your health information
You may, subject to certain limits:
- Access and copy the health information we maintain about you.
- Request a correction to information you believe is incomplete or inaccurate.
- Request an accounting of certain disclosures we have made of your information.
- Request restrictions on how we use or share your information.
- Request confidential communications — for example, that we contact you only at a particular phone number or address.
- Receive a paper copy of this notice on request.
- File a complaint if you believe your privacy rights have been violated, without fear of retaliation (see “Contact us” below).
How we use and share your health information
Without separate written authorization, we may use and disclose your health information to:
- Provide treatment — coordinate and deliver your care among our providers and staff.
- Obtain payment — process payments and handle billing for services and products.
- Run our practice — for everyday operations such as scheduling, quality improvement, training, and security.
- Remind and follow up with you — send appointment reminders, confirmations, and care-related messages.
- Comply with law — when required or permitted, such as for public-health activities, health oversight, law-enforcement requests, legal proceedings, or to prevent a serious threat to health or safety.
Other uses and disclosures — including using your information for outside marketing or any sale of your health information — are made only with your written authorization, which you may revoke at any time (except where we have already acted in reliance on it).
Our responsibilities
We are required to maintain the privacy of your health information, to provide this notice of our duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you if a breach affects the privacy or security of your unsecured health information.
Information we collect
- Contact details you provide — name, mobile phone number, and email address.
- Appointment information — services booked, provider, date/time, and any notes you add.
- Health and intake information you share in intake and consent forms.
- Purchase and payment information handled by our payment processors (we do not store full card numbers).
- Limited technical and usage data needed to operate and secure our website.
How we use your information
- To book, confirm, reschedule, and manage your appointments and purchases.
- To send appointment reminders, confirmations, and account notifications by the method(s) you choose — text, email, or phone call.
- To send one-time sign-in codes by text or email so you can sign in on our website (no password required).
- To provide care, respond to your requests, and operate our business.
- To meet legal, regulatory, and security obligations.
Text messaging (SMS)
When you provide your mobile number — for example, when booking, creating an account, or signing in — you agree to receive transactional text messages from Moon Valley Med Spa, such as appointment reminders, confirmations, and one-time sign-in codes. Message frequency varies with your activity, and message and data rates may apply based on your mobile plan.
You can opt out of text messages at any time by replying STOP, and you can reply HELP or contact us for assistance. Opting out will not affect the care you receive, though some reminders and sign-in features rely on text messaging.
We do not sell your personal information, and we do not share mobile phone numbers or text-messaging opt-in or consent data with third parties or affiliates for their own marketing or promotional purposes. Phone numbers are used only to provide the services described in this Policy and are shared only with the messaging providers that deliver our texts on our behalf.
Email and phone communications
We also send appointment reminders, confirmations, sign-in codes, and account messages by email, and — if you choose it — by phone call. You select your preferred contact method(s) when you book or create an account, and you can change or withdraw them at any time in your account. You can manage your email preferences, or opt out of non-essential emails, in your account. We use email and phone numbers only to provide the services described in this Policy.
Cookies and analytics
Our website uses essential cookies and limited analytics to operate the site, remember your preferences, and understand how the site is used. You can manage cookies through your browser settings; disabling some cookies may affect how the site works.
How we share information
We share information only as needed to run our business and provide care — for example, with service providers such as our payment processors (Square and Stripe), our text-message provider (Amazon Web Services), and our email and calendar provider (Google), as well as the vendors that host our systems. These providers may use your information only to perform services for us and are bound by confidentiality obligations (and, where applicable, business-associate agreements). We may also disclose information when required by law, or in connection with a merger, acquisition, or transfer of our business, in which case we will continue to protect your information under this Policy. We do not sell your personal information.
Data security
We use administrative, technical, and physical safeguards designed to protect your information from loss, misuse, and unauthorized access — including encryption of sensitive data, restricted internal access, and audit logging of access to records. No method of transmission or storage is completely secure, but we work to protect your information and limit who can access it.
How long we keep your information
We retain your information for as long as needed to provide our services and to meet our legal, regulatory, and recordkeeping obligations — including the periods we are required to retain medical records under applicable law. When information is no longer required, we dispose of it securely.
Your choices
- Choose and update your preferred contact methods — text, email, or phone call — in your account.
- Reply STOP to opt out of text messages, or HELP for help.
- Manage your email preferences in your account.
- Contact us to access, update, or request deletion of your information, subject to records we are required to keep.
Children’s privacy
Our services are intended for adults. We do not knowingly collect personal information from children under 13. Patients under 18 should use our services only with the involvement of a parent or guardian.
Other websites
Our website may link to sites we do not operate. We are not responsible for the privacy practices of those sites, and we encourage you to review their policies.
Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes may be communicated through our website.
Contact us
To exercise your rights, ask a question, or file a privacy complaint, contact us:
Moon Valley Med Spa LLC
15414 N 7th St, Suite 3
Phoenix, AZ 85022
Phone: (602) 391-8889
Email: info@moonvalleymedspa.com
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.
