Privacy Policy
Advanced Hair Restoration (“Advanced Hair,” “we,” “us,” or “our”) values your privacy and the trust you place in us.
Patient Privacy Commitment
Advanced Hair Restoration maintains strict confidentiality of all patient medical records and communications. Medical information is shared only at your request or as required by law. Any clinical services provided through affiliated physicians or medical groups are governed by their own Notice of Privacy Practices, in compliance with applicable medical privacy laws and relevant state regulations.
This Privacy Policy explains what personal information we collect, how we use and share it, your rights and choices, and how to contact us. We update this Policy periodically to reflect changes in our practices and applicable laws. When we make material changes, we update the “Last updated” date above and, if required, provide additional notice or obtain consent.
1. Scope
This Privacy Policy applies to information collected through our websites, landing pages, online portals, text messaging, and phone consultations (collectively, the “Services”).
If you receive care from one of our affiliated or independent medical practices or pharmacies, their Notice of Privacy Practices governs the handling of any medical or protected health information (PHI). Information you share directly with Advanced Hair for scheduling, consultation requests, marketing, or account purposes is governed by this Privacy Policy.
2. Use by Minors
Our Services are intended for adults 18 years and older (or the age of majority in your state).
We do not knowingly collect personal information from children under 13. If we learn that a child has provided information, we will delete it. Parents or guardians who believe their child has shared data with us may contact privacy@advancedhair.com.
3. Notice at Collection
The table below summarizes the categories of personal information we collect, why we collect it, and how long we retain it.
“Sell” and “Share” are terms defined under certain state privacy laws and may include limited data used for analytics or advertising. You can opt out at any time, see Section 11 – Your Privacy Choices.
We do not sell personal information.
Advanced Hair Restoration does not and will not sell your personal information or share it with third parties for their own marketing purposes. We only disclose information to trusted service providers and partners who help us operate our business, process transactions, deliver Services, or perform analytics on our behalf—and they are contractually restricted from using it for any other purpose.
California Notice at Collection.
We collect the categories of personal information listed below for the purposes described in this Policy. We retain personal information as described in Data Retention. We do not sell or share personal information as defined by California law. To exercise your privacy choices at any time, see Section 11 – Your Privacy Choices
| Category of Personal Information (examples) | Source | Purpose of Use | Disclosed To | Sold | Shared for Targeted Ads | Retention |
|---|---|---|---|---|---|---|
| Identifiers (name, email, phone, address, IP, device ID, or similar) | You; devices; partners | Provide Services, respond to inquiries, improve user experience, internal analytics, audience development, and advertising measurement | Service providers; analytics partners; advertising platforms for audience matching and measurement | No | Yes* | Duration of service relationship and legal obligations |
| Commercial data (consultations, purchases, records of interest) | You; transactions | Fulfill requests, process payments, manage appointments, customer support, internal reporting | Payment processors; internal operations | No | No | Financial and recordkeeping requirements |
| Internet / Usage data (pages visited, referral URLs, device type) | Your browser or device | Site performance, analytics, personalization, security, and advertising measurement | Analytics and advertising measurement partners | No | Yes* | Time-limited; de-identified when feasible |
| Demographic and professional data (occupation, age range, general demographics) | You; derived from your interactions | Provide Services, internal analysis, aggregated insights, and audience modeling | Internal analytics; service providers under contract | No | Yes* | Time-limited or de-identified for analysis |
| Payment data (tokenized card details, billing address) | You; payment processor | Complete transactions, prevent fraud | Secure payment processors | No | No | Financial and recordkeeping requirements |
| Sensitive Personal Information (e.g., government ID for verification, precise location if enabled, health-related browsing) | You; device | Identity verification, security, and legal compliance | Verification and security vendors | No | No | Minimum necessary for stated purpose |
*We do not “sell” personal information as defined by California law. We may disclose limited identifiers, demographic, or usage data (including in hashed, de-identified, or aggregated form) to advertising platforms for audience matching, look-alike modeling, or delivery of relevant advertising. This may be considered “sharing” or “targeted advertising” under certain state laws. You can opt out (or use a valid Global Privacy Control (GPC) signal), and we will stop using your information for targeted advertising. See Section 11 – Your Privacy Choices.
We do not sell or use Sensitive Personal Information for targeted advertising. We honor recognized opt-out preference signals such as GPC and other state-required Universal Opt-Out Mechanisms (UOOM).
4. How We Collect Information
Directly from you – when you complete a form, schedule a consultation, call, or text us.
Automatically – through cookies, pixels, and device identifiers.
From service providers—payment, analytics, advertising, and security vendors. When required by law, we request consent before processing certain data types.
5. Communications Policy
We may use your contact information (including email address, phone number, and mailing address) to communicate with you regarding your appointments, services, and other transactional matters, even if you have not opted in to receive marketing communications. These messages are necessary to provide requested services and are not considered promotional in nature.
If you have provided express consent to receive marketing or promotional messages, we may contact you about offers, updates, or new services. You may opt out of marketing communications at any time by following the unsubscribe instructions provided in our messages or by contacting us directly. Opting out of marketing messages does not affect your receipt of important service or transactional communications.
6. How We Use Information
We use personal information to:
Deliver, maintain, and improve our Services;
Schedule and manage consultations and communications;
Detect, prevent, and respond to fraud or security issues;
Personalize experiences and measure engagement;
Send administrative notices, confirmations, and updates;
Conduct analytics, research, and service improvement;
Communicate offers and promotions consistent with your choices; and
Communicate transactional information related to appointments, procedures, or account status.
We may aggregate or de-identify data and use it for lawful business or research purposes. We will not re-identify de-identified data except to test our anonymization process.
7. Cookies and Similar Technologies
We use cookies, web beacons, and mobile IDs for essential functionality, analytics, and advertising measurement. You can manage cookie preferences through your browser settings or review additional opt-out options in Section 11 – Your Privacy Choices.
Strictly Necessary – enable site security and core features.
Analytics – help us understand performance and improve usability.
Advertising – allow us and our partners to deliver relevant ads and measure results.
We honor the Global Privacy Control signal and other recognized UOOMs as required by law.
8. How We Share Information
We share personal information only as needed to operate our business:
Service providers for hosting, IT, customer support, and security;
Payment processors to complete transactions;
Analytics and advertising partners for measurement and optimization;
Affiliates or successors in the event of a merger or corporate transaction;
Legal and safety authorities when required by law or to protect rights and security.
Certain analytics and advertising disclosures may qualify as a “sale” or “sharing” under state law. You can opt out of those activities at any time.
We do not knowingly sell or share the personal information of individuals under 16 years of age.
9. Data Retention
We keep personal information only as long as needed for the purposes described above, including service delivery, security, and legal compliance. Aggregated or de-identified data may be retained indefinitely.
10. Your Privacy Rights and Choices
Depending on where you live, you may have rights to:
Access or receive a copy of your information;
Correct inaccurate data;
Delete data, subject to legal exceptions;
Opt out of “sales,” “sharing,” or targeted advertising;
Limit use or disclosure of Sensitive Personal Information (California);
Receive information in a portable format; and
Appeal if a request is denied.
You can submit requests by emailing privacy@advancedhair.com.
We verify each request as required by law and respond within 45 days (or within 60 days where permitted by law).
We honor Global Privacy Control (GPC) and other Universal Opt-Out Mechanisms (UOOM) recognized by California, Colorado, Texas, and other states.
| State | Access / Port | Correct | Delete | Opt-Out (Sale/Sharing/Ads) | UOOM / GPC Recognition | Appeal |
|---|---|---|---|---|---|---|
| California (CCPA/CPRA) | Yes | Yes | Yes | Yes | GPC Recognized | Yes |
| Colorado (CPA) | Yes | Yes | Yes | Yes | UOOM Required | Yes |
| Texas (TDPSA) | Yes | Yes | Yes | Yes | UOOM Required | Yes |
| Virginia / Connecticut / Utah / Iowa / Delaware / New Jersey / New Hampshire / Nebraska / Montana / Oregon* | Yes | Yes | Yes | Yes | Recognized or Required per state law* | Yes |
11. Your Privacy Choices
Overview
Advanced Hair Restoration gives you control over how your personal information is used and shared. Depending on where you live, you may have rights under privacy laws such as the CCPA/CPRA (California), CPA (Colorado), VCDPA (Virginia), TDPSA (Texas), and similar state laws.
Make a Privacy Request (in writing only).
Submit all requests in writing to privacy@advancedhair.com. Include your full name, contact information, and a clear description of your request so we can verify and process it.
Access / Portability – Request a copy of your personal information.
Correction – Ask us to correct inaccurate or incomplete information.
Deletion – Request deletion of your information, subject to legal exceptions.
Opt-Out of “Sale” or “Sharing” – We do not sell or share personal information as defined by California law. This option is provided for transparency and future state requirements. We honor Global Privacy Control (GPC) signals.
Limit Use of Sensitive Personal Information (California only) – Restrict the use of Sensitive Personal Information to essential purposes allowed by law.
Appeal a Decision – If we deny your request in whole or in part, you may appeal within 45 days by replying to our response email.
Opt-Out of Targeted Advertising and Analytics
We may use limited identifiers, demographic, or usage information to work with advertising platforms for audience matching, look-alike modeling, and delivery of relevant ads. These activities may be considered “sharing” or “targeted advertising” under certain state privacy laws. You may opt out at any time by emailing privacy@advancedhair.com or by using a recognized Global Privacy Control (GPC) signal.
We may also share limited identifiers (such as email addresses or phone numbers) with advertising platforms in a hashed, de-identified, or aggregated form to perform audience matching or measure campaign performance. You may opt out of these activities at any time.
Your options include:
Global Privacy Control (GPC) – We honor browser-based GPC signals.
Cookie Settings – Adjust your browser to block or delete cookies.
Mobile Advertising IDs – Use your device settings (e.g., iOS App Tracking Transparency or Android Opt Out of Ads Personalization).
Industry Tools – Visit aboutads.info/choices (DAA) or networkadvertising.org/choices (NAI).
When you opt out, we stop using or sharing your data for targeted advertising and measurement, though you may still see non-personalized ads.
Text Message (SMS) Opt-Out.
Text STOP to unsubscribe or HELP for help. You may also email contact@advancedhair.com with the subject line “SMS Opt-Out.”
Message and data rates may apply. Frequency varies. Consent is not a condition of purchase. Carriers are not liable for delayed or undelivered messages.
How We Handle Requests.
We verify your identity (and agent authorization, if applicable) before processing requests.
We respond within 45 days of receipt, with one possible 45-day extension where permitted by law.
If your request is denied, we explain why and how to appeal. Appeals are reviewed by a privacy officer not involved in the initial decision.
We will not discriminate against you for exercising your privacy rights.
Universal Opt-Out Mechanisms (UOOM)
We recognize and respect Universal Opt-Out Mechanisms (UOOMs), including Global Privacy Control (GPC), as required by law in states such as California, Colorado, and Texas.
If your browser sends a valid signal, we treat it as a request to opt out of data “sales” and “targeted advertising” for that browser.
12. Communications and SMS Terms
ou may opt out of marketing emails and texts at any time.
Text Messaging: By opting in, you agree to receive recurring messages (e.g., appointment reminders, service updates, promotions).
Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP or following provided instructions.
Consent is not a condition of purchase, and carriers are not liable for delayed or undelivered messages.
13. Payments and Transactions
Payments are processed by secure third-party providers who receive only the information necessary to complete the transaction. Advanced Hair retains limited payment-related records for auditing, fraud prevention, and compliance purposes.
14. Security
We maintain administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, or alteration.
No method of data transmission or storage is completely secure. Please use strong, unique passwords and contact us immediately if you suspect unauthorized use of your account.
If we become aware of a data incident involving your information, we will notify you in accordance with applicable law.
15. U.S. Use Only
Our Services are intended for individuals in the United States.
If you access them from outside the U.S., your information will be processed in the U.S. under U.S. law.
16. California Privacy Rights (CCPA/CPRA)
This section applies only to California residents and supplements this Privacy Policy.
Notice at Collection. We collect the categories of personal information described in this Policy for the business purposes identified herein and retain it as described in “Data Retention.” We do not sell or share personal information as those terms are defined by California law. We also do not use or disclose Sensitive Personal Information for additional purposes not permitted by law.
Right to Know/Access, Correct, Delete. You may request access to the personal information we hold about you (including categories/specific pieces), request correction of inaccurate information, or request deletion (subject to legal exceptions).
Opt-Out of Sales/Sharing. We do not sell or share personal information. If this changes, we will post an update and provide a “Do Not Sell or Share My Personal Information” mechanism and honor Global Privacy Control (GPC) signals.
Limit Use of Sensitive Personal Information. We do not use or disclose Sensitive Personal Information for purposes beyond those allowed by law.
Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.
How to Exercise Your Rights. Submit requests via privacy@advancedhair.com, or by mail to Advanced Hair Restoration, Attn: Privacy, 10655 NE 4th Street, Suite 705, Bellevue, WA 98004. We verify your identity (and agent authorization, if applicable) before fulfilling requests.
Global Privacy Control (GPC). We honor recognized browser-based opt-out signals (e.g., GPC).
California Minors – Online Eraser. If you are under 18 and have posted content on our online services, you may request its removal by emailing privacy@advancedhair.com and identifying the content. Removal may not be complete in all circumstances (e.g., reposts or legal retention).
For methods, timelines, appeals, and agent authorization, see Section 11 – Your Privacy Choices.
17. Colorado Privacy Rights (CPA)
This section applies only to Colorado residents and supplements this Privacy Policy.
Your Rights.
Under the Colorado Privacy Act (CPA), you may:
Confirm whether we process your personal data and access that data;
Correct inaccuracies;
Delete personal data;
Obtain a portable copy of your personal data; and
Opt out of processing for targeted advertising, sale of personal data, or profiling that produces legal or similarly significant effects.
How to Exercise Your Rights.
Submit requests via privacy@advancedhair.com.
We will verify and respond within 45 days (or 60 days with notice if needed).
Universal Opt-Out Mechanism (UOOM).
We recognize browser-based and device-level opt-out signals such as Global Privacy Control (GPC) in accordance with Colorado law.
Appeals.
If your request is denied, you may appeal within 30 days by emailing privacy@advancedhair.com with “Colorado Privacy Appeal” in the subject line.
We will respond within 45 days with our decision.
Non-Discrimination.
We will not discriminate against you for exercising your Colorado privacy rights.
18. Virginia Privacy Rights (VCDPA)
This section applies to Virginia residents and supplements this Privacy Policy.
Your Rights.
Under the Virginia Consumer Data Protection Act (VCDPA), you have the right to:
Confirm whether we process your personal data and access that data;
Correct inaccuracies;
Delete personal data you provided or that we obtained from you;
Obtain a portable copy of your data; and
Opt out of processing for targeted advertising, the sale of personal data, or profiling with legal or similarly significant effects.
How to Exercise Your Rights.
Submit requests through privacy@advancedhair.com.
We verify and respond within 45 days (or 60 days with notice).
Appeals.
If we deny your request, you may appeal within 30 days by replying to our response email or writing “VCDPA Appeal” in the subject line.
We will respond within 60 days with a written explanation.
Non-Discrimination.
We will not deny goods, services, or pricing to you for exercising your Virginia privacy rights.
19. Texas Privacy Rights (TDPSA)
This section applies only to Texas residents and supplements this Privacy Policy.
Your Rights.
Under the Texas Data Privacy and Security Act (TDPSA), you have the right to:
Access / Confirm whether we process your personal data and obtain a copy of that data.
Correct inaccuracies in your personal data.
Delete personal data you have provided or that we obtained from you.
Opt Out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or certain profiling that produces legal or similarly significant effects.
Data Portability – receive your personal data in a portable, readily usable format.
How to Exercise Your Rights.
You may submit a request by emailing privacy@advancedhair.com.
We will verify and respond to your request within 45 days (or 60 days with notice, if additional time is needed).
Appeal Process.
If we deny your request, you may appeal within 30 days by replying to our response email or writing to privacy@advancedhair.com with “TDPSA Appeal” in the subject line.
We will respond to appeals within 60 days and provide written reasons for our decision.
Opt-Out Preference Signals.
We recognize browser-based or device-level Universal Opt-Out Mechanisms (UOOM) such as Global Privacy Control (GPC) as required by the TDPSA.
Non-Discrimination.
We will not discriminate against you for exercising your Texas privacy rights.
20. Contact Us
For privacy requests, questions, or appeals:
Advanced Hair Restoration
10655 NE 4th Street, Suite 705
Bellevue, WA 98004
Phone: (888) 261-2656
Email (privacy): privacy@advancedhair.com
Email (general): contact@advancedhair.com