Privacy Policy

Effective Date: June 23, 2026

Illumatox Aesthetic Studio, also referred to as Illumatox Aesthetics Studio & Medical Spa (“Illumatox,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, submit a form, book or request an appointment, purchase products or services, join a membership, communicate with us, or otherwise interact with our business.

By using our website or providing information to us, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We may collect information that you provide directly to us, information collected automatically when you use our website, and information received from service providers that help us operate our business.

Personal Information

Depending on how you interact with us, we may collect:

Your name.

Telephone number.

Email address.

Mailing address or billing address.

Date of birth or age confirmation.

Appointment preferences and scheduling information.

Information submitted through contact forms, consultation requests, appointment requests, intake forms, consent forms, or other website forms.

Details about requested services, treatment goals, skincare concerns, product interests, or aesthetic preferences.

Medical history, medications, allergies, contraindications, pregnancy or nursing status, treatment history, skin type, or other information needed to evaluate treatment eligibility.

Photographs, before-and-after images, skin analysis images, treatment notes, or other records related to services you request or receive.

Membership information, gift card information, package information, payment-plan information, and transaction history.

Payment and billing information.

Reviews, testimonials, feedback, photographs, videos, social media content, or other content you choose to provide.

Records of your communication preferences and consent to receive phone, email, or text-message communications.

Customer-support records and communications with our team.

Payment-card details may be processed directly by third-party payment processors. Illumatox may not receive or store complete payment-card information when a third-party payment processor handles the transaction.

Health and Treatment-Related Information

Because Illumatox provides aesthetic, skincare, wellness, and medical-spa services, some information we collect may relate to your health, treatment eligibility, treatment history, skin condition, medications, allergies, or procedure-related care.

We use this information to evaluate requested services, support client safety, provide consultations and treatments, maintain records, and comply with applicable legal and professional requirements.

Information Collected Automatically

When you visit our website, we or our service providers may automatically collect information such as:

Internet Protocol address.

Browser type.

Device type.

Operating system.

Referring website.

Pages viewed.

Links selected.

Date and time of visits.

Approximate location derived from an Internet Protocol address.

Website interaction and performance data.

Cookie identifiers and similar technical information.

Advertising, analytics, and conversion-tracking data where permitted.

2. How We Collect Information

We may collect information when you:

Visit or interact with our website.

Complete a contact, consultation, appointment, or service-request form.

Book, reschedule, or cancel an appointment.

Call, email, text, or otherwise communicate with us.

Request or receive injectables, skincare, laser, body contouring, facial, hair, lash, or other aesthetic services.

Complete intake forms, consent forms, medical history forms, aftercare forms, or treatment documentation.

Purchase products, gift cards, memberships, packages, or services.

Apply for or use a payment plan through a third-party provider.

Make a payment.

Participate in a promotion, event, membership, or special offer.

Submit a review, testimonial, survey, photograph, video, or social media content.

Communicate with our providers, employees, contractors, or customer-support personnel.

We may also receive limited information from service providers, booking platforms, payment processors, advertising platforms, referral partners, product manufacturers, payment-plan providers, review platforms, and other parties involved in fulfilling a request you initiated.

3. How We Use Information

We may use collected information to:

Respond to inquiries and consultation requests.

Schedule, confirm, reschedule, or manage appointments.

Evaluate treatment eligibility.

Provide consultations, treatments, products, memberships, packages, and customer support.

Create and maintain client records.

Prepare treatment plans and product recommendations.

Provide pre-treatment and post-treatment instructions.

Communicate about appointments, services, products, payments, memberships, promotions, or customer support.

Process transactions and maintain financial records.

Coordinate payment-plan requests with third-party providers.

Administer gift cards, memberships, rewards, discounts, promotions, packages, and special offers.

Send appointment reminders, follow-ups, aftercare messages, maintenance reminders, and service-related communications.

Improve our website, services, advertising, and customer experience.

Measure website traffic, form submissions, advertising performance, and marketing effectiveness.

Detect fraud, misuse, security threats, or unlawful activity.

Enforce our Terms and Conditions, consent forms, payment terms, membership terms, and other agreements.

Comply with legal, licensing, tax, accounting, insurance, healthcare, and regulatory requirements.

Protect our clients, employees, providers, property, rights, systems, and business operations.

4. Telephone and Text-Message Communications

When you provide your telephone number and expressly consent to communications, Illumatox may contact you about your inquiry, appointment, consultation, service, product purchase, payment, membership, or customer relationship.

Text messages may include:

Appointment confirmations and reminders.

Consultation follow-ups.

Provider or appointment updates.

Pre-treatment and post-treatment instructions.

Product or service updates.

Customer-support messages.

Payment, billing, or membership notices.

Gift card, promotion, or event information.

Information about services you requested.

Promotional messages when you have provided the legally required consent.

Consent to receive marketing text messages is not a condition of purchasing goods or services.

Message frequency may vary according to your interactions with us. Message and data rates may apply.

To stop receiving text messages, reply STOP. You may receive a final message confirming your opt-out.

For assistance, reply HELP or call (920) 585-8115.

After opting out of promotional messages, you may still receive nonmarketing communications relating to an active appointment, transaction, treatment, payment, membership, safety issue, or service request where permitted by law.

Wireless carriers are not responsible for delayed or undelivered messages.

5. Protection of Mobile Opt-In Information

Illumatox does not sell, rent, or share telephone numbers, SMS opt-in information, or text-message consent records with third parties or affiliates for their own marketing or promotional purposes.

We may provide limited information to service providers that help us deliver requested communications, such as customer relationship management systems, scheduling platforms, telephone providers, and text-messaging platforms.

Those providers may use the information only as necessary to provide services on our behalf or as otherwise required by law.

Text-message opt-in data and consent records are excluded from sharing for third-party marketing purposes.

6. Email Communications

We may use your email address to:

Respond to an inquiry.

Confirm or manage an appointment.

Send intake forms, consent forms, aftercare instructions, estimates, receipts, invoices, or service documents.

Provide treatment, product, membership, or customer-support information.

Send appointment reminders and follow-up communications.

Send promotional communications where permitted by law.

Marketing emails will include an unsubscribe method where required.

Unsubscribing from marketing emails does not prevent us from sending transactional, appointment-related, treatment-related, payment-related, membership-related, or service-related communications.

7. How We Disclose Information

We may disclose personal information in the circumstances described below.

Service Providers

We may provide information to companies that perform services on our behalf, including:

Website hosting providers.

Website form and landing-page providers.

Booking and scheduling platforms.

Customer relationship management systems.

Telephone, email, and text-messaging providers.

Payment processors.

Accounting, billing, and invoicing providers.

Analytics providers.

Advertising and marketing technology providers.

Cloud-storage and information-technology providers.

Product manufacturers or suppliers.

Payment-plan or financing providers.

Gift card, membership, or rewards platforms.

Review platforms.

Professional advisers.

Insurance providers.

Contractors or providers assisting with authorized services.

These providers may access information only as reasonably necessary to perform services for us, process a request, support our business operations, or comply with legal obligations.

At Your Direction

We may disclose information when you request or authorize us to do so, such as when you apply for a payment plan, purchase a product, request coordination with another provider, ask us to share information with a caregiver or representative, or authorize publication of a review, testimonial, photograph, or video.

Legal, Medical, and Safety Reasons

We may disclose information when we reasonably believe disclosure is necessary to:

Comply with applicable law or legal process.

Respond to a lawful government request, subpoena, court order, licensing inquiry, or regulatory request.

Protect the safety of clients, employees, providers, or the public.

Address a medical, safety, or urgent concern.

Detect or prevent fraud, unlawful conduct, or security threats.

Enforce our agreements, consent forms, policies, or terms.

Establish, exercise, or defend legal claims.

Protect our rights, property, systems, or business operations.

Business Transactions

Information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, change in ownership, bankruptcy, or similar business transaction.

8. Sale or Sharing of Personal Information

Illumatox does not sell or rent personal information in exchange for money.

Certain website analytics, advertising, retargeting, or conversion-tracking technologies may be considered “sharing,” “targeted advertising,” or a “sale” under some state privacy laws, even when no money is exchanged.

You may control certain cookies through your browser settings or any privacy controls made available on the website.

SMS opt-in information and consent records are not sold or shared for third-party marketing purposes.

9. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, scripts, local storage, and similar technologies to:

Operate the website.

Remember preferences.

Support website forms and booking features.

Understand how visitors use the website.

Diagnose technical problems.

Improve performance and usability.

Measure advertising and marketing results.

Prevent fraud or misuse.

Deliver or measure relevant advertising where permitted.

Cookies may be temporary session cookies or persistent cookies that remain on your device for a defined period.

You can manage or block cookies using your browser settings. Blocking cookies may prevent some website features from operating correctly.

Your browser or device may also provide controls for advertising identifiers, location information, or tracking technologies.

10. Website Analytics and Advertising

We may use analytics and advertising services to understand website traffic, visitor behavior, form submissions, booking activity, and advertising performance.

Analytics and advertising providers may collect device information, Internet Protocol addresses, cookie identifiers, viewed pages, interactions, referral information, and conversion information.

These third parties may process information according to their own privacy policies. Illumatox does not control how an independent third party uses information collected directly through its technology.

11. Payment, Membership, Gift Card, and Payment-Plan Providers

Payments, memberships, gift cards, rewards, and payment-plan applications may be handled by third-party providers.

When you submit information directly to a payment processor, payment-plan provider, membership platform, gift card provider, or similar third-party service, that provider’s privacy policy and terms govern its collection and use of your information.

Illumatox is not responsible for the independent privacy practices, approval decisions, security systems, payment processing systems, or terms of third-party providers.

12. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

Safeguards may include:

Access controls.

Password-protected systems.

Restricted access based on business need.

Secure or encrypted transmission where appropriate.

Software updates and system monitoring.

Vendor-management practices.

Employee privacy and security procedures.

Secure disposal or deletion practices where appropriate.

No website, database, transmission method, or electronic storage system is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

13. Data Retention

We retain personal information for as long as reasonably necessary to:

Respond to inquiries.

Provide consultations, treatments, products, memberships, and services.

Maintain client and treatment records.

Process payments and maintain financial records.

Administer memberships, gift cards, packages, and promotions.

Maintain consent and opt-out records.

Resolve disputes.

Detect fraud or security issues.

Comply with tax, accounting, licensing, insurance, healthcare, legal, and regulatory obligations.

Enforce agreements.

Retention periods vary according to the type of information, the purpose for which it was collected, and applicable legal requirements.

We may retain aggregated or de-identified information that does not reasonably identify an individual.

14. Your Privacy Choices

Depending on your location and applicable law, you may have the right to:

Request access to personal information we maintain about you.

Request correction of inaccurate personal information.

Request deletion of certain personal information.

Request information about how personal information is used or disclosed.

Withdraw consent where processing is based on consent.

Opt out of marketing emails.

Opt out of text messages by replying STOP.

Limit certain cookie or advertising technologies through browser or website controls.

Privacy rights may be subject to exceptions. For example, we may retain information needed to complete a transaction, provide requested services, maintain treatment records, maintain payment records, comply with law, resolve disputes, prevent fraud, maintain opt-out records, or enforce an agreement.

To submit a privacy request, call (920) 585-8115 or email [email protected].

We may need to verify your identity before completing a request. We will use information provided during verification only to process and document the request.

You may also submit a request through an authorized agent where applicable law permits. We may require evidence that the agent is authorized to act on your behalf.

15. Wisconsin Privacy Notice

Illumatox is located in Wisconsin and provides services from its Wisconsin location. Wisconsin residents and other clients may have privacy rights under applicable federal, state, and local laws.

Where applicable law gives you specific rights regarding personal information, Illumatox will respond to verified requests as required by law.

16. Health Privacy Notice

Some information collected by Illumatox may relate to your health, treatment eligibility, treatment history, skincare, aesthetic procedures, or wellness services.

Illumatox uses reasonable safeguards to protect treatment-related information. However, not all medical-spa businesses or services are necessarily subject to the federal Health Insurance Portability and Accountability Act, commonly known as HIPAA. Whether HIPAA applies depends on the nature of the provider, the transaction, and applicable law.

Illumatox will handle treatment-related information according to applicable privacy laws, professional obligations, consent forms, and business policies.

17. Do Not Track Signals

Some browsers offer a “Do Not Track” setting. Because there is no universally accepted standard for responding to these signals, our website may not respond to every Do Not Track signal.

You can control cookies and similar technologies through your browser settings and any privacy controls made available on the website.

18. Children’s Privacy

Our website and services are intended for adults seeking aesthetic, skincare, wellness, or medical-spa services. The website is not directed to children under 13.

We do not knowingly collect personal information directly from children under 13.

A parent or guardian who believes a child has provided personal information may contact us at (920) 585-8115 or [email protected] to request deletion.

Some services may not be available to minors. Services involving minors, if offered, may require parent or legal guardian consent and provider approval.

19. Third-Party Links

Our website may link to external websites or services, including:

Booking platforms.

Payment processors.

Payment-plan providers.

Product manufacturers or retailers.

Gift card providers.

Membership platforms.

Review platforms.

Mapping services.

Social-media platforms.

Advertising platforms.

Other service providers.

We do not control and are not responsible for the privacy, security, accuracy, or content practices of third-party websites.

You should review the privacy policy of each third-party service before providing information.

20. Reviews, Testimonials, Photos, and Public Content

Information you include in a public review, testimonial, social-media post, photograph, video, or other public submission may be visible to other people.

Do not include sensitive personal, medical, payment, account, or security information in publicly available content.

When you authorize us to publish a review, testimonial, photograph, video, before-and-after image, or other content, its use may also be governed by the consent or release associated with that submission.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, legal obligations, or information practices.

The current version will be posted on this website with its effective date.

Changes become effective when posted unless a different date is stated or applicable law requires otherwise.

22. Contact Us

Questions, concerns, or privacy requests may be directed to:

Illumatox Aesthetic Studio
704 Main St.
Neenah, WI 54956
Phone: (920) 585-8115
Email: [email protected]

23. Consent

By using our website, submitting a form, booking an appointment, requesting a consultation, purchasing a product or service, joining a membership, opting into communications, or otherwise providing information to us, you acknowledge this Privacy Policy.

Where applicable law requires consent for a specific use of information or communication method, we will request that consent separately.