PRIVACY POLICY
Plump Medical Spa Inc.
Effective Date: January 1, 2026
Last Updated: January 1, 2026
1. Introduction
Plump Medical Spa Inc. ("Clinic," "we," "us," or "our"), located at 4667 MacArthur Blvd, Suite 310, Newport Beach, CA 92660, is committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, store, share, and protect information about you in connection with your use of our services, website at plumpmedicalspa.com, and any interactions with our practice.
By using our website, booking an appointment, or receiving services at Plump Medical Spa, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
We collect several categories of information in connection with your care and your use of our services:
Personal Identification Information
Full name, date of birth, and contact information including phone number, email address, and mailing address
Emergency contact information
Insurance information where applicable
Medical and Health Information
Medical history, current health conditions, allergies, and medications
Aesthetic treatment history and prior cosmetic procedure information
Clinical notes, treatment records, and photographs taken for medical documentation purposes
Prescription and medication records
Lab results where applicable to your treatment program
Financial Information
Payment method information processed securely through our payment processors
Transaction history for services rendered
Financing arrangements through third-party providers such as Cherry Financing and CareCredit
Digital and Technical Information
IP address, browser type, and device information when you visit our website
Pages viewed, time spent on the site, and referring URLs
Cookies and similar tracking technologies as described in Section 8 below
Appointment booking data collected through our scheduling platform
Audio and AI-Assisted Documentation
During consultations and treatment visits, our practice uses an AI-assisted clinical note-taking system that may include audio recording of your appointment. This technology is used exclusively for the purpose of generating accurate clinical documentation and maintaining your medical record. Full details of this practice are described in Section 5 below.
3. How We Use Your Information
We use the information we collect for the following purposes:
To provide, coordinate, and manage your medical and aesthetic care
To create and maintain accurate medical records
To communicate with you regarding appointments, treatment plans, follow-up care, and results
To process payments and manage your financial account with the Clinic
To send appointment confirmations, reminders, and post-treatment care instructions
To comply with applicable federal and California state law, including medical record retention requirements
To respond to your inquiries and provide customer service
To improve our services, website, and patient experience
To send you information about services, promotions, or updates where you have given consent to receive such communications
We do not use your personal health information for marketing purposes without your separate explicit consent.
4. HIPAA and California Medical Privacy
Plump Medical Spa Inc. handles your protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable California medical privacy laws including the Confidentiality of Medical Information Act (CMIA).
Your PHI may be used or disclosed without your additional authorization for the following purposes:
Treatment — to provide, coordinate, and manage your healthcare and related services
Payment — to obtain payment for services rendered
Healthcare operations — for quality assurance, compliance, training, and business operations necessary to run our practice
For all other uses and disclosures of your PHI, we will obtain your written authorization before proceeding. You have the right to revoke any such authorization at any time in writing, except where we have already taken action in reliance on the authorization.
A full Notice of Privacy Practices (NPP) is available upon request at our front desk or by contacting us at info@plumpmedicalspa.com.
5. Audio Recording and AI-Assisted Documentation
What we do:
Plump Medical Spa uses an AI-assisted clinical documentation system that may record audio during consultations and treatment visits. This system is used by Dr. Mortazavi to capture clinical notes accurately and efficiently, allowing him to focus on patient care rather than manual note-taking during your appointment.
Why we do it:
The recordings are used solely for the purpose of generating accurate clinical documentation, creating and maintaining your medical record, and ensuring the quality and completeness of your care.
California two-party consent compliance:
California Penal Code Section 632 requires that all parties to a confidential communication consent to its recording. Consistent with this requirement, Plump Medical Spa discloses this recording practice in our patient intake consent forms, our appointment confirmation communications, and in this Privacy Policy. By scheduling and attending an appointment at our practice, you are providing your consent to this recording practice as described.
How recordings are handled:
Audio recordings and any transcriptions or clinical notes generated from them are treated as part of your confidential medical record
Recordings are processed through a secure AI-assisted transcription platform subject to appropriate data security and confidentiality obligations
Recordings are not used for marketing, advertising, training of publicly available AI models, or any purpose other than clinical documentation
Recordings are not shared with third parties except as necessary for the operation of the documentation platform, and only with providers bound by appropriate confidentiality agreements
Recordings are retained in accordance with California medical record retention requirements, which generally require retention of adult patient records for a minimum of seven years from the date of service
Your rights:
If you have questions or concerns about audio recording during your visit, you may raise them with our staff before your appointment begins at (949) 568-7544 or info@plumpmedicalspa.com.
6. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
With your consent:
We share information when you have given us explicit written authorization to do so, such as when you consent to referral communications or marketing use of your images.
With service providers:
We share information with third-party vendors and service providers who assist in our operations, including our electronic health record system, appointment scheduling platform, payment processors, AI-assisted documentation platform, and email communication providers. These providers are contractually obligated to protect your information and are prohibited from using it for any purpose other than providing services to us.
For treatment coordination:
We may share relevant medical information with other healthcare providers involved in your care when medically necessary and with your knowledge.
As required by law:
We may disclose your information when required to do so by law, court order, subpoena, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
In the event of a business transfer:
If Plump Medical Spa Inc. is acquired, merged, or substantially all of its assets are transferred, patient information including personal and health information may be transferred as part of that transaction. We will notify you of any such change through our website or direct communication.
7. California Privacy Rights — CCPA and CPRA
As a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
Right to Know:
You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it was collected, and the categories of third parties with whom it has been shared.
Right to Delete:
You have the right to request deletion of personal information we have collected about you, subject to certain exceptions including our obligation to retain medical records under California law.
Right to Correct:
You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing:
We do not sell or share your personal information for cross-context behavioral advertising. If this practice changes, we will update this policy and provide opt-out mechanisms as required by law.
Right to Limit Use of Sensitive Personal Information:
You have the right to limit our use of sensitive personal information, including health and medical data, to purposes necessary to provide the services you have requested. We use sensitive personal information only for the purposes described in this Privacy Policy.
Right to Non-Discrimination:
We will not discriminate against you for exercising any of your California privacy rights. You will receive the same quality of care and service regardless of whether you exercise your rights under the CCPA or CPRA.
How to exercise your rights:
To submit a privacy rights request, contact us at:
Phone: (949) 568-7544
Email: info@plumpmedicalspa.com
Address: 4667 MacArthur Blvd, Suite 310, Newport Beach, CA 92660
We will respond to verified requests within 45 days as required by California law. We may need to verify your identity before processing a request.
Please note that certain information, including protected health information governed by HIPAA and CMIA, may be subject to different or additional rights and procedures. Contact us for information specific to your medical records.
8. Cookies and Website Tracking
Our website at plumpmedicalspa.com uses cookies and similar tracking technologies to improve your browsing experience and understand how visitors use our site.
Types of cookies we use:
Essential cookies — necessary for the website to function and cannot be disabled
Analytics cookies — used to understand how visitors interact with our website, including pages visited and time spent on the site, through tools such as Google Analytics
Functional cookies — used to remember your preferences and enhance your experience
Your choices:
Most web browsers allow you to control cookies through browser settings. You may also opt out of Google Analytics tracking at google.com/settings/ads. Please note that disabling certain cookies may affect the functionality of our website.
We do not use cookies to collect personally identifiable health information or to serve targeted advertising based on your health-related activity on our site.
9. Data Security
We implement reasonable and appropriate physical, technical, and administrative safeguards to protect your personal and health information against unauthorized access, disclosure, alteration, or destruction. These measures include:
Secure encrypted storage of electronic health records
Access controls limiting information access to authorized personnel only
Secure payment processing through PCI-compliant processors
Confidentiality obligations for all staff and service providers with access to patient information
No method of data transmission or storage is completely secure. While we work diligently to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable California and federal law.
10. Data Retention
We retain your personal and health information for as long as necessary to provide your care and comply with applicable legal obligations. Under California law, adult patient medical records must be retained for a minimum of seven years from the date of service. Financial records are retained as required by applicable tax and accounting law. We securely dispose of information that is no longer required to be retained.
11. Children's Privacy
Our website and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at info@plumpmedicalspa.com and we will take steps to delete that information.
Patients between the ages of 13 and 17 are treated as minors under our practice policies. Parental or legal guardian consent is required for all services provided to minors and parental access to minor patient records is governed by applicable California law.
12. Third-Party Links and Platforms
Our website may contain links to third-party websites, booking platforms, social media pages, and other external content. This Privacy Policy does not apply to third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party platforms.
13. Marketing Communications
If you have provided your email address or phone number, we may contact you with appointment reminders, post-treatment care information, and information about our services. You may opt out of non-essential marketing communications at any time by:
Clicking the unsubscribe link in any marketing email
Contacting us at info@plumpmedicalspa.com
Calling us at (949) 568-7544
Opting out of marketing communications will not affect transactional communications related to your appointments or care.
14. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this page and notify you through our website or by direct communication where appropriate. Your continued use of our services following any update constitutes acceptance of the revised policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Plump Medical Spa Inc.
4667 MacArthur Blvd, Suite 310
Newport Beach, CA 92660
Phone: (949) 568-7544
Email: info@plumpmedicalspa.com
Website: plumpmedicalspa.com
Hours: Tuesday through Saturday, 10:00 AM to 6:00 PM