Privacy Policy

Information we collect

When you book through our Cal.com scheduler, we collect your name, email address and the answers you submit, including your med spa name, revenue range, decision-maker status, open injector days and ad budget. We also receive information you voluntarily provide in emails or other communications.

We collect device and usage information as described below. Scheduling and advertising services may use cookies, pixels and similar technologies to collect browser and device details, pages viewed, interactions and referral information. Please do not submit patient records, sensitive medical information or other people's personal information through this website or scheduler.

How we use information

• To schedule and prepare for calls and send calendar invitations and related messages.
• To respond to inquiries and follow up about our services.
• To measure and improve our website and advertising.
• To maintain security, prevent misuse and meet legal obligations.

We do not sell personal information. Where advertising activity constitutes “sharing” for cross-context behavioral advertising or targeted advertising under applicable law, you may opt out as described below.

Service providers and third parties

We use Cal.com for scheduling, Google Calendar for calendar invitations, and Google Workspace for email and related business communications. These services receive the information needed to provide their functions and may process technical information under their own privacy policies.

Our website host, Lovable, processes website traffic and technical information to deliver, secure and operate the site. Meta Platforms may receive advertising measurement and device or usage information through the Meta Pixel when it is enabled. We may also disclose information when required by law, to protect legal rights or in connection with a business transfer, subject to applicable law.

Third parties may process information in the United States or other countries. Their handling of information is subject to their own policies and applicable legal requirements.

Website analytics

On our published website, Lovable's visitor analytics records pages visited, where visitors came from, country, browser, operating system, device type, time on page, page loading speed, errors, and clicks on buttons and links. In the EU/EEA, UK, Switzerland, Canada and unknown regions, clicks are recorded only after you accept analytics. Elsewhere, clicks are recorded unless you reject analytics. Clicks are never recorded when your browser sends Global Privacy Control, even if you accept. Page visits, time on page, page speed and errors are recorded for every visitor, without cookies and without identifying anyone.

This analytics service uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. Detailed data is kept for 90 days and daily summaries for one year. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

Meta Pixel, cookies and advertising choices

This site uses the Meta Pixel to measure ad performance, including page views and completed call bookings for the Empty Chair Audit, improve advertising, optimize ad delivery and support remarketing. Meta may use cookies, web beacons and similar technologies to collect information from this site and elsewhere on the internet to provide measurement services and target ads. That information may include your device and browser details, pages visited and interactions, and may be associated with your Meta account. We send a booking event identifier to help prevent duplicate reporting, but do not send your scheduler answers or email as event fields or enable automatic customer matching.

You can manage advertising preferences at Meta's Ad Preferences, and explore opt-out choices at the Digital Advertising Alliance and Your Online Choices. These choices may be browser- or device-specific and do not prevent all advertising.

Visitors in consent regions—the EU/EEA, UK, Switzerland and Canada—and visitors whose region cannot be determined see a consent banner with Accept all, Reject all and Cookie settings. Analytics and advertising have separate choices. The Meta Pixel loads in these regions only after you accept advertising; rejecting or ignoring the banner keeps it off. Elsewhere it can load without a banner unless you refuse or your browser sends Global Privacy Control. Global Privacy Control always blocks Meta. Anyone, in any region, can use Cookie settings in the footer to review, change or withdraw their choices at any time and save their preferences. Withdrawal stops new advertising events and applies across open tabs. Blocked events are not replayed after later acceptance.

Your choice is stored in your browser for up to 12 months (a refusal is retained for about six months). We also store booking identifiers locally to prevent duplicate events; clearing browser storage removes that protection. You can block or delete cookies using your browser settings, although scheduling features may not function as expected. Cookie-free visitor analytics described above is separate from advertising cookies.

Data retention and security

We retain booking and correspondence information only as long as reasonably necessary to arrange and follow up on calls, maintain business records, comply with legal obligations and resolve disputes. Retention depends on the purpose and any applicable legal requirements. We delete or de-identify information when it is no longer needed, subject to lawful exceptions and routine backup cycles. Service providers may have their own retention periods.

We use reasonable administrative, technical and organizational safeguards to protect personal information. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

Your rights and choices

You may request access to, correction of or deletion of your personal information by emailing hello@gettwelveweeks.com. You may opt out of marketing emails using an unsubscribe link, where provided, or by contacting us. We may still send necessary scheduling or service messages.

Depending on your residence and whether a law applies to our business, California's CCPA/CPRA and other US state privacy laws may give you rights to know and access the categories and specific pieces of personal information collected, receive a portable copy, correct inaccurate information, delete information, and opt out of sale, sharing, targeted advertising or certain profiling. California residents may also have a right to limit certain uses of sensitive personal information where applicable. We do not use booking information for profiling that produces legal or similarly significant effects.

We will not discriminate against you for exercising applicable rights. We may need to verify your identity and, where permitted, an authorized agent's authority before responding. Rights are subject to legal exceptions. If your request is denied, you may appeal by emailing us with “Privacy appeal” in the subject line; we will respond as required by applicable law.

Children

This website and our services are not directed to children under 18. We do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can review and delete it as appropriate.

Changes and contact

We may update this policy as our practices or legal requirements change. We will post the revised policy with a new last-updated date and provide additional notice where required.

For privacy questions or requests, contact Twelve Weeks at hello@gettwelveweeks.com. Our location is New York, New York.