Privacy Policy
Last updated: June 10, 2026
Advanced Hair Restoration (“Advanced Hair,” “we,” “us,” or “our”) values your privacy and the trust you place in us.
Patient Privacy Commitment
Advanced Hair Restoration maintains strict confidentiality of all patient medical records and communications. Medical information is shared only at your request or as required by law. Any clinical services provided through affiliated physicians or medical groups are governed by their own Notice of Privacy Practices, in compliance with applicable medical privacy laws and relevant state regulations.
This Privacy Policy explains what personal information we collect, how we use and share it, your rights and choices, and how to contact us. We update this Policy periodically to reflect changes in our practices and applicable laws. When we make material changes, we revise this Policy and, if required, provide additional notice or obtain consent.
1. Scope
This Privacy Policy applies to information collected through our websites, landing pages, online portals, text messaging, and phone consultations (collectively, the “Services”).
If you receive care from one of our affiliated or independent medical practices or pharmacies, their Notice of Privacy Practices governs the handling of any medical or protected health information (PHI). Information you share directly with Advanced Hair for scheduling, consultation requests, marketing, or account purposes is governed by this Privacy Policy.
2. Use by Minors
Our Services are intended for adults 18 years and older (or the age of majority in your state).
We do not knowingly collect personal information from children under 13. If we learn that a child has provided information, we will delete it. Parents or guardians who believe their child has shared data with us may contact privacy@advancedhair.com.
3. Notice at Collection
The table below summarizes the categories of personal information we collect, why we collect it, and how long we retain it.
“Sell” and “Share” are terms defined under certain state privacy laws and may include limited data used for analytics or advertising. You can opt out at any time, see Section 11 – Your Privacy Choices.
We do not sell personal information.
Advanced Hair Restoration does not sell your personal information for monetary consideration, and we do not disclose it to third parties for those third parties’ own independent marketing. When you consent through our cookie banner, we do share certain online identifiers (such as cookies and device identifiers) with advertising platforms to deliver and measure our own advertising, which may be considered a “share” under certain state laws; you can opt out at any time (see Section 11 - Your Privacy Choices). Apart from this, we disclose information only to service providers and partners who help us operate our business, process transactions, deliver Services, or perform analytics on our behalf, and who are contractually restricted from using it for any other purpose.
California Notice at Collection. We collect the categories of personal information listed below for the purposes described in this Policy. We retain personal information as described in Data Retention. We do not sell your personal information; we do share certain online identifiers with advertising platforms for targeted advertising when you consent, and you can opt out. To exercise your privacy choices at any time, see Section 11 - Your Privacy Choices.
| Category of Personal Information (examples) | Source | Purpose of Use | Disclosed To | Sold | Shared for Targeted Ads | Retention |
|---|---|---|---|---|---|---|
| Identifiers (name, email, phone, address, IP, device ID, or similar) | You; devices; partners | Provide Services, respond to inquiries, improve user experience, internal analytics, audience development, and advertising measurement | Service providers; analytics partners; advertising platforms for audience matching and measurement | No | Yes* | Duration of service relationship and legal obligations |
| Commercial data (consultations, purchases, records of interest) | You; transactions | Fulfill requests, process payments, manage appointments, customer support, internal reporting | Payment processors; internal operations | No | No | Financial and recordkeeping requirements |
| Internet / Usage data (pages visited, referral URLs, device type) | Your browser or device | Site performance, analytics, personalization, security, and advertising measurement | Analytics and advertising measurement partners | No | Yes* | Time-limited; de-identified when feasible |
| Demographic and professional data (occupation, age range, general demographics) | You; derived from your interactions | Provide Services, internal analysis, aggregated insights, and audience modeling | Internal analytics; service providers under contract | No | Yes* | Time-limited or de-identified for analysis |
| Payment data (tokenized card details, billing address) | You; payment processor | Complete transactions, prevent fraud | Secure payment processors | No | No | Financial and recordkeeping requirements |
| Sensitive Personal Information (e.g., government ID for verification, precise location if enabled, health-related browsing) | You; device | Identity verification, security, and legal compliance | Verification and security vendors | No | No | Minimum necessary for stated purpose |
*We do not “sell” personal information as defined by California law. We may disclose limited identifiers, demographic, or usage data (including in hashed, de-identified, or aggregated form) to advertising platforms for audience matching, look-alike modeling, or delivery of relevant advertising. This may be considered “sharing” or “targeted advertising” under certain state laws. You can opt out (or use a valid Global Privacy Control (GPC) signal), and we will stop using your information for targeted advertising. See Section 11 – Your Privacy Choices.
We do not sell or use Sensitive Personal Information for targeted advertising. We honor recognized opt-out preference signals such as GPC and other state-required Universal Opt-Out Mechanisms (UOOM).
4. How We Collect Information
Directly from you – when you complete a form, schedule a consultation, call, or text us.
Automatically – through cookies, pixels, and device identifiers.
From service providers—payment, analytics, advertising, and security vendors. When required by law, we request consent before processing certain data types.
5. Communications Policy
We may use your contact information (including email address, phone number, and mailing address) to communicate with you regarding your appointments, services, and other transactional matters, even if you have not opted in to receive marketing communications. These messages are necessary to provide requested services and are not considered promotional in nature.
If you have provided express consent to receive marketing or promotional messages, we may contact you about offers, updates, or new services. You may opt out of marketing communications at any time by following the unsubscribe instructions provided in our messages or by contacting us directly. Opting out of marketing messages does not affect your receipt of important service or transactional communications.
6. How We Use Information
We use personal information to:
Deliver, maintain, and improve our Services;
Schedule and manage consultations and communications;
Detect, prevent, and respond to fraud or security issues;
Personalize experiences and measure engagement;
Send administrative notices, confirmations, and updates;
Conduct analytics, research, and service improvement;
Communicate offers and promotions consistent with your choices; and
Communicate transactional information related to appointments, procedures, or account status.
We may aggregate or de-identify data and use it for lawful business or research purposes. We will not re-identify de-identified data except to test our anonymization process.
7. Cookies and Similar Technologies
We use cookies, web beacons, and mobile IDs for essential functionality, analytics, and advertising measurement. You can manage cookie preferences through your browser settings or review additional opt-out options in Section 11 – Your Privacy Choices.
Strictly Necessary – enable site security and core features.
Analytics – help us understand performance and improve usability.
Advertising – allow us and our partners to deliver relevant ads and measure results.
We honor the Global Privacy Control signal and other recognized UOOMs as required by law.
8. How We Share Information
We share personal information only as needed to operate our business:
Service providers for hosting, IT, customer support, and security;
Payment processors to complete transactions;
Analytics and advertising partners for measurement and optimization;
Affiliates or successors in the event of a merger or corporate transaction;
Legal and safety authorities when required by law or to protect rights and security.
Certain analytics and advertising disclosures may qualify as a “sale” or “sharing” under state law. You can opt out of those activities at any time.
We do not knowingly sell or share the personal information of individuals under 16 years of age.
9. Data Retention
We keep personal information only as long as needed for the purposes described above, including service delivery, security, and legal compliance. Aggregated or de-identified data may be retained indefinitely.
10. Your Privacy Rights and Choices
Depending on where you live, you may have rights to:
Access or receive a copy of your information;
Correct inaccurate data;
Delete data, subject to legal exceptions;
Opt out of “sales,” “sharing,” or targeted advertising;
Limit use or disclosure of Sensitive Personal Information (California);
Receive information in a portable format; and
Appeal if a request is denied.
You can submit requests by emailing privacy@advancedhair.com.
We verify each request as required by law and respond within 45 days (or within 60 days where permitted by law).
We honor Global Privacy Control (GPC) and other Universal Opt-Out Mechanisms (UOOM) recognized by California, Colorado, Texas, and other states.
| State | Access / Port | Correct | Delete | Opt-Out (Sale/Sharing/Ads) | UOOM / GPC Recognition | Appeal |
|---|---|---|---|---|---|---|
| California (CCPA/CPRA) | Yes | Yes | Yes | Yes | GPC Recognized | Yes |
| Colorado (CPA) | Yes | Yes | Yes | Yes | UOOM Required | Yes |
| Texas (TDPSA) | Yes | Yes | Yes | Yes | UOOM Required | Yes |
| Virginia / Connecticut / Utah / Iowa / Delaware / New Jersey / New Hampshire / Nebraska / Montana / Oregon* | Yes | Yes | Yes | Yes | Recognized or Required per state law* | Yes |
11. Your Privacy Choices
Overview
Advanced Hair Restoration gives you control over how your personal information is used and shared. Depending on where you live, you may have rights under privacy laws such as the CCPA/CPRA (California), CPA (Colorado), VCDPA (Virginia), TDPSA (Texas), and similar state laws.
Make a Privacy Request (in writing only).
Submit all requests in writing to privacy@advancedhair.com. Include your full name, contact information, and a clear description of your request so we can verify and process it.
Access / Portability – Request a copy of your personal information.
Correction – Ask us to correct inaccurate or incomplete information.
Deletion – Request deletion of your information, subject to legal exceptions.
Opt-Out of “Sale” or “Sharing” – We do not sell your personal information. We do share certain online identifiers for targeted advertising, and a hashed email with Google for conversion measurement, when you consent. You can opt out by declining on our cookie banner, by sending a Global Privacy Control (GPC) signal, which we honor, or by emailing privacy@advancedhair.com.
Limit Use of Sensitive Personal Information (California only) – Restrict the use of Sensitive Personal Information to essential purposes allowed by law.
Appeal a Decision – If we deny your request in whole or in part, you may appeal within 45 days by replying to our response email.
Opt-Out of Targeted Advertising and Analytics
We may use limited identifiers, demographic, or usage information to work with advertising platforms for audience matching, look-alike modeling, and delivery of relevant ads. These activities may be considered “sharing” or “targeted advertising” under certain state privacy laws. You may opt out at any time by emailing privacy@advancedhair.com or by using a recognized Global Privacy Control (GPC) signal.
Conversion measurement with Google. To measure whether our advertising leads to real consultations, we share a limited set of contact details with Google for conversion-measurement purposes only. Specifically, we provide an irreversibly hashed (SHA-256) version of your email address, phone number, and first and last name, together with your postal/ZIP code and country, and the Google Click Identifier (GCLID) associated with your ad click. Hashing converts your name, email, and phone into a scrambled value that cannot be reversed; your postal code and country are shared in standard form so Google can match the record accurately. Google processes this data on our behalf as our service provider, under Google’s Customer Data terms and Ads Data Processing Terms, and is restricted to using it to measure our conversions - it is not permitted to use it to build advertising audiences, retarget you, or personalize ads. We share the same hashed details with Meta (Facebook/Instagram) to measure our advertising on Meta platforms, subject to the same state exclusions and choices described here. We do not share details of your specific treatment, medical history, diagnosis, photographs, or health conditions with Google or any advertising platform. We do not include residents of Washington, Maryland, Nevada, or Connecticut in this sharing, with one exception: residents of Washington, Nevada, or Connecticut who expressly authorize it through the optional advertising-measurement checkbox when booking. Maryland residents are never included. You can opt out of this sharing at any time by declining on our cookie banner, by sending a Global Privacy Control (GPC) signal, which we honor, or by emailing privacy@advancedhair.com - we will exclude you from future conversion-measurement uploads.
Your options include:
Global Privacy Control (GPC) – We honor browser-based GPC signals.
Cookie Settings – Adjust your browser to block or delete cookies.
Mobile Advertising IDs – Use your device settings (e.g., iOS App Tracking Transparency or Android Opt Out of Ads Personalization).
Industry Tools – Visit aboutads.info/choices (DAA) or networkadvertising.org/choices (NAI).
When you opt out, we stop using or sharing your data for targeted advertising and measurement, though you may still see non-personalized ads.
Text Message (SMS) Opt-Out.
Text STOP to unsubscribe or HELP for help. You may also email privacy@advancedhair.com with the subject line “SMS Opt-Out.”
Message and data rates may apply. Frequency varies. Consent is not a condition of purchase. Carriers are not liable for delayed or undelivered messages.
How We Handle Requests.
We verify your identity (and agent authorization, if applicable) before processing requests.
We respond within 45 days of receipt, with one possible 45-day extension where permitted by law.
If your request is denied, we explain why and how to appeal. Appeals are reviewed by a privacy officer not involved in the initial decision.
We will not discriminate against you for exercising your privacy rights.
Universal Opt-Out Mechanisms (UOOM)
We recognize and respect Universal Opt-Out Mechanisms (UOOMs), including Global Privacy Control (GPC), as required by law in states such as California, Colorado, and Texas.
If your browser sends a valid signal, we treat it as a request to opt out of data “sales” and “targeted advertising” for that browser.
12. Communications and SMS Terms
You may opt out of marketing emails and texts at any time.
Text Messaging: By opting in, you agree to receive recurring messages (e.g., appointment reminders, service updates, promotions).
Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP or following provided instructions.
Consent is not a condition of purchase, and carriers are not liable for delayed or undelivered messages.
13. Payments and Transactions
Payments are processed by secure third-party providers who receive only the information necessary to complete the transaction. Advanced Hair retains limited payment-related records for auditing, fraud prevention, and compliance purposes.
14. Security
We maintain administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, or alteration.
No method of data transmission or storage is completely secure. Please use strong, unique passwords and contact us immediately if you suspect unauthorized use of your account.
If we become aware of a data incident involving your information, we will notify you in accordance with applicable law.
15. U.S. Use Only
Our Services are intended for individuals in the United States.
If you access them from outside the U.S., your information will be processed in the U.S. under U.S. law.
16. California Privacy Rights (CCPA/CPRA)
This section applies only to California residents and supplements this Privacy Policy.
Notice at Collection. We collect the categories of personal information described in this Policy for the business purposes identified herein and retain it as described in Data Retention. We do not sell your personal information. We do share certain online identifiers with advertising platforms for targeted advertising when you consent, and you can opt out (see Opt-Out of Sales/Sharing below). We do not use or disclose Sensitive Personal Information for additional purposes not permitted by law.
Right to Know/Access, Correct, Delete. You may request access to the personal information we hold about you (including categories/specific pieces), request correction of inaccurate information, or request deletion (subject to legal exceptions).
Opt-Out of Sales/Sharing. We do not sell your personal information. We do share certain online identifiers (such as cookies and device identifiers) with advertising platforms for targeted advertising when you consent through our cookie banner. You can opt out of this sharing at any time by declining on our cookie banner, by sending a Global Privacy Control (GPC) signal, which we honor, or by emailing privacy@advancedhair.com.
Limit Use of Sensitive Personal Information. We do not use or disclose Sensitive Personal Information for purposes beyond those allowed by law.
Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.
How to Exercise Your Rights. Submit requests via privacy@advancedhair.com, or by mail to Advanced Hair Restoration, Attn: Privacy, 10655 NE 4th Street, Suite 705, Bellevue, WA 98004. We verify your identity (and agent authorization, if applicable) before fulfilling requests.
Global Privacy Control (GPC). We honor recognized browser-based opt-out signals (e.g., GPC).
California Minors – Online Eraser. If you are under 18 and have posted content on our online services, you may request its removal by emailing privacy@advancedhair.com and identifying the content. Removal may not be complete in all circumstances (e.g., reposts or legal retention).
For methods, timelines, appeals, and agent authorization, see Section 11 – Your Privacy Choices.
17. Colorado Privacy Rights (CPA)
This section applies only to Colorado residents and supplements this Privacy Policy.
Your Rights.
Under the Colorado Privacy Act (CPA), you may:
Confirm whether we process your personal data and access that data;
Correct inaccuracies;
Delete personal data;
Obtain a portable copy of your personal data; and
Opt out of processing for targeted advertising, sale of personal data, or profiling that produces legal or similarly significant effects.
How to Exercise Your Rights.
Submit requests via privacy@advancedhair.com.
We will verify and respond within 45 days (or 60 days with notice if needed).
Universal Opt-Out Mechanism (UOOM).
We recognize browser-based and device-level opt-out signals such as Global Privacy Control (GPC) in accordance with Colorado law.
Appeals.
If your request is denied, you may appeal within 30 days by emailing privacy@advancedhair.com with “Colorado Privacy Appeal” in the subject line.
We will respond within 45 days with our decision.
Non-Discrimination.
We will not discriminate against you for exercising your Colorado privacy rights.
18. Virginia Privacy Rights (VCDPA)
This section applies to Virginia residents and supplements this Privacy Policy.
Your Rights.
Under the Virginia Consumer Data Protection Act (VCDPA), you have the right to:
Confirm whether we process your personal data and access that data;
Correct inaccuracies;
Delete personal data you provided or that we obtained from you;
Obtain a portable copy of your data; and
Opt out of processing for targeted advertising, the sale of personal data, or profiling with legal or similarly significant effects.
How to Exercise Your Rights.
Submit requests through privacy@advancedhair.com.
We verify and respond within 45 days (or 60 days with notice).
Appeals.
If we deny your request, you may appeal within 30 days by replying to our response email or writing “VCDPA Appeal” in the subject line.
We will respond within 60 days with a written explanation.
Non-Discrimination.
We will not deny goods, services, or pricing to you for exercising your Virginia privacy rights.
19. Texas Privacy Rights (TDPSA)
This section applies only to Texas residents and supplements this Privacy Policy.
Your Rights.
Under the Texas Data Privacy and Security Act (TDPSA), you have the right to:
Access / Confirm whether we process your personal data and obtain a copy of that data.
Correct inaccuracies in your personal data.
Delete personal data you have provided or that we obtained from you.
Opt Out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or certain profiling that produces legal or similarly significant effects.
Data Portability – receive your personal data in a portable, readily usable format.
How to Exercise Your Rights.
You may submit a request by emailing privacy@advancedhair.com.
We will verify and respond to your request within 45 days (or 60 days with notice, if additional time is needed).
Appeal Process.
If we deny your request, you may appeal within 30 days by replying to our response email or writing to privacy@advancedhair.com with “TDPSA Appeal” in the subject line.
We will respond to appeals within 60 days and provide written reasons for our decision.
Opt-Out Preference Signals.
We recognize browser-based or device-level Universal Opt-Out Mechanisms (UOOM) such as Global Privacy Control (GPC) as required by the TDPSA.
Non-Discrimination.
We will not discriminate against you for exercising your Texas privacy rights.
20. Washington Privacy Rights (My Health My Data Act)
This section applies to Washington state residents and supplements this Privacy Policy.
What is Consumer Health Data?
Under Washington's My Health My Data Act (RCW Chapter 19.373), "consumer health data" means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. Because Advanced Hair Restoration provides surgical health care services, information you share with us — including your interest in receiving services, consultation requests, and any information about your hair loss or health condition — may constitute Consumer Health Data under MHMDA.
Your Rights
Washington residents have the right to know what Consumer Health Data we collect and with whom it is shared; to access a list of all third parties with whom we have shared their Consumer Health Data; to withdraw consent for collection or sharing at any time; to request deletion of Consumer Health Data, subject to legal exceptions; and to not be subject to geofencing around health care facilities for the purpose of collecting Consumer Health Data without consent.
How We Handle Consumer Health Data
We collect Consumer Health Data only with your consent where required by MHMDA. We do not sell Consumer Health Data for monetary consideration, and we do not provide advertising platforms with your name, phone number, or any details of your treatment or medical condition. When you consent through our cookie banner, we do provide advertising platforms with online identifiers (such as cookies and device identifiers), and a hashed (irreversible) version of your email address to Google for conversion measurement; these disclosures may constitute the sharing of Consumer Health Data under MHMDA. You can withdraw consent and opt out at any time by declining on our cookie banner, by sending a Global Privacy Control (GPC) signal, which we honor, or by emailing privacy@advancedhair.com. Other than these advertising disclosures, we share Consumer Health Data only with service providers operating under contract and subject to appropriate data protection obligations consistent with this Policy.
Cookie Consent and Tracking Technologies
When you visit our website, you can accept or decline non-essential cookies — including analytics and advertising technologies — using our cookie consent banner. We honor the Global Privacy Control (GPC) and other recognized opt-out preference signals. For advertising measurement, we provide advertising platforms with online identifiers such as cookies and device identifiers, and, for Google’s conversion measurement, a hashed (irreversible) version of your email address; we do not include Washington residents’ contact details (name, phone number, postal address) in our offline conversion-measurement uploads to Google at all, and we never provide details of your treatment or other consumer health data to advertising platforms. You can change your cookie choices at any time through your browser settings or by contacting us at privacy@advancedhair.com.
How to Exercise Your Rights
Submit requests to privacy@advancedhair.com with "Washington Health Data Request" in the subject line. We will respond within 45 days (or 60 days with notice if additional time is needed). If your request is denied, you may appeal within 30 days by emailing privacy@advancedhair.com with "MHMDA Appeal" in the subject line.
21. Contact Us
For privacy requests, questions, or appeals:
Advanced Hair Restoration
10655 NE 4th Street, Suite 705
Bellevue, WA 98004
Phone: (888) 261-2656
Email (privacy): privacy@advancedhair.com
Email (general): contact@advancedhair.com