Skip to content
  • Home
  • About
    • FAQs
    • Our Story
    • Gallery
      • Before and After
    • Reviews
  • Services
    • Injectable
      • Neurotoxin
      • Biostimulators
      • HA Fillers
    • Laser Treatments
      • Clearlift
      • Alma Opus Plasma
      • IPL Dye-VL
      • Laser Hair Removal
      • Tattoo Removal
      • Merz Ultherapy Prime
    • Aesthetics
      • Alma IQ
      • Chemical Peels
      • Brazilian Butt
      • Face and Body Rejuvenation
      • NeoCutis Skin
      • ZO Peels
    • Wellness
      • Upneeq for Eyes
  • Patient Resources
    • Payment Options
      • Cherry Financing
      • Pay Later With PatientFi
      • Care Credit
    • Beauty Bank Program
    • Gift Cards
    • Videos
    • Blog
  • Contact
  • Home
  • About
    • FAQs
    • Our Story
    • Gallery
      • Before and After
    • Reviews
  • Services
    • Injectable
      • Neurotoxin
      • Biostimulators
      • HA Fillers
    • Laser Treatments
      • Clearlift
      • Alma Opus Plasma
      • IPL Dye-VL
      • Laser Hair Removal
      • Tattoo Removal
      • Merz Ultherapy Prime
    • Aesthetics
      • Alma IQ
      • Chemical Peels
      • Brazilian Butt
      • Face and Body Rejuvenation
      • NeoCutis Skin
      • ZO Peels
    • Wellness
      • Upneeq for Eyes
  • Patient Resources
    • Payment Options
      • Cherry Financing
      • Pay Later With PatientFi
      • Care Credit
    • Beauty Bank Program
    • Gift Cards
    • Videos
    • Blog
  • Contact
Get an Appointment

(833) 538 7869

Legal

Privacy Policy

Last updated: June 4, 2025

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Lost Key Med Spa. For the purpose of the GDPR, the Company is the Data Controller.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Account means a unique account created for You to access our Service or parts of our Service.
  • Website refers to Lost Key Med Spa, accessible from https://www.lostkeymedspa.com
  • Service refers to the Website.
  • Country refers to: UT, United States
  • Service Provider means any natural or legal person who processes the data on behalf of the Company to facilitate the Service, provide the Service on behalf of the Company, perform services related to the Service, or assist the Company in analyzing how the Service is used.
  • Third-party Social Media Service refers to any website or social network website through which a User can log in or create an account to use the Service.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Cookies are small files placed on Your device by a website, containing details of Your browsing history among its many uses.
  • Device means any device that can access the Service, such as a computer, cellphone, or digital tablet.
  • Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself.
  • Data Controller, for GDPR purposes, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
  • Business, for CCPA purposes, refers to the Company as the legal entity that collects Consumers' personal information and does business in the State of California.
  • Consumer, for CCPA purposes, means a natural person who is a California resident.
  • Sale, for CCPA purposes, means selling, renting, disclosing, or otherwise communicating a Consumer's Personal information to another business or third party for monetary or other valuable consideration.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data. While using Our Service, We may ask You to provide Us with certain personally identifiable information, including but not limited to: email address; first and last name; address, state, province, ZIP/postal code, city; internet connection, the equipment You use to access our Website, and Usage Data.

Usage Data. Usage Data is collected automatically when using the Service, and may include Your device's IP address, browser type and version, the pages of our Service that You visit, the time and date of Your visit, time spent on those pages, unique device identifiers, and other diagnostic data.

Tracking Technologies and Cookies. We use Cookies and similar tracking technologies to track activity on Our Service and store certain information, using beacons, tags, and scripts. Cookies can be "Persistent" or "Session" — persistent Cookies remain on your device when you go offline, while Session Cookies are deleted when you close your browser. We use both for the purposes below:

  • Necessary / Essential Cookies (Session, administered by Us) — essential to provide the services You've asked for and prevent fraudulent use of user accounts.
  • Cookies Policy / Notice Acceptance Cookies (Persistent, administered by Us) — identify if users have accepted the use of cookies on the Website.
  • Functionality Cookies (Persistent, administered by Us) — remember choices You make, such as login details or language preference, for a more personal experience.
  • Tracking and Performance Cookies (Persistent, administered by third parties) — track traffic and usage of the Website, which may directly or indirectly identify You as an individual visitor.

Use of Your Personal Data

The Company may use Personal Data to: provide and maintain our Service; manage Your Account; perform a contract for products, items, or services You've purchased; contact You by email, phone, SMS, or push notification regarding updates or related communications; provide You with news, special offers, and information about similar goods and services unless You've opted out; manage Your requests; notify You about changes to our Website or offerings; or for any other purpose with your consent.

We may share your personal information with Service Providers (to monitor/analyze use of the Service, for payment processing, to contact You); in connection with Business transfers (mergers, sale of assets, financing, or acquisition); with Affiliates who honor this Privacy Policy; with Business partners to offer certain products, services, or promotions; and with other users when You share information or interact in public areas.

We may also disclose your personal information to comply with a court order, law, or legal process (including government or regulatory requests); to enforce our Terms of Use and other agreements, including for billing and collection; or if We believe disclosure is necessary to protect the rights, property, or safety of Us, our customers, or others.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce our legal agreements and policies. Usage Data is generally retained for a shorter period, except when needed to strengthen security, improve functionality, or as legally required.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and any other places where parties involved in the processing are located, meaning it may be transferred to and maintained on computers outside Your jurisdiction. Your consent to this Privacy Policy, followed by submission of such information, represents Your agreement to that transfer. The Company will take all steps reasonably necessary to ensure Your data is treated securely and in accordance with this Privacy Policy.

Disclosure of Your Personal Data

Business Transactions. If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred; We will provide notice before this happens.

Law Enforcement. Under certain circumstances, the Company may be required to disclose Your Personal Data if required by law or in response to valid requests by public authorities.

Other Legal Requirements. The Company may disclose Your Personal Data in the good-faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate wrongdoing in connection with the Service, protect the personal safety of Users or the public, or protect against legal liability.

Security of Your Personal Data

The security of Your Personal Data is important to Us, but no method of transmission over the Internet or electronic storage is 100% secure. Where We have given (or You have chosen) a password for access to certain parts of our Website, You are responsible for keeping this password confidential. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Detailed Information on the Processing of Your Personal Data

Service Providers have access to Your Personal Data only to perform their tasks on Our behalf and are obligated not to disclose or use it for any other purpose.

Analytics. We may use Google Analytics to track and report website traffic. You can opt out via the Google Analytics opt-out browser add-on. For more information, visit the Google Privacy & Terms page.

Email Marketing. We may use Your Personal Data to contact You with newsletters, marketing, or promotional materials. You may opt out by following the unsubscribe link in any email We send, or by contacting Us.

Payments. We do not store or collect Your payment card details — that information is provided directly to our third-party payment processors, who adhere to PCI-DSS standards for secure handling of payment information.

GDPR Privacy

We may process Personal Data based on: Your consent; performance of a contract; compliance with a legal obligation; protection of vital interests; a task carried out in the public interest; or Our legitimate interests.

Your Rights Under the GDPR. If You are within the EU, You have the right to: request access to Your Personal Data; request correction of inaccurate or incomplete Personal Data; object to processing (including for direct marketing); request erasure of Your Personal Data; request the transfer of Your Personal Data; and withdraw Your consent at any time. You may exercise these rights by contacting Us, and You have the right to complain to a Data Protection Authority in the EEA.

Facebook Fan Page

The Company is the Data Controller of Your Personal Data collected while using the Service. As operator of the Facebook Fan Page, the Company and Facebook are Joint Controllers under terms based on the Facebook Terms of Service. We use Facebook Insights to obtain anonymized statistical data about Our users; Facebook places a Cookie on Your device for this purpose, active for up to two years. For more information, see the Facebook Privacy Policy.

Your State Privacy Rights

Depending on where You live, You may have the right to access, delete, update, or correct Your Personal Data; transfer it to a third party; restrict how We process it; withdraw consent; object to processing; and lodge a complaint with your local data protection authority.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their residents with rights to confirm whether We process their personal information; access and delete certain personal information; correct inaccuracies; data portability; opt out of processing for targeted advertising, sales, or significant automated decisions; and limit or require consent for processing sensitive personal data. The exact scope varies by state — to exercise any of these rights, please contact us via our contact page.

CCPA Privacy

If You are a California resident, You have the right to notice of what Personal Data is collected and why; the right to access/request disclosure information; the right to say no to the sale of Personal Data ("Right to Opt-Out"); the right to know the categories, sources, and purposes of Personal Data collected; the right to delete Personal Data collected in the past 12 months; the right to correct inaccurate information; the right to limit use/disclosure of sensitive personal information; and the right not to be discriminated against for exercising any of these rights.

To exercise Your CCPA rights, You can email or call us, or visit our "Do Not Sell My Personal Information" section. We will confirm receipt of your request within ten business days and aim to substantively respond within 45 days (extendable by another 45 days with written notice). We do not charge a fee to process verifiable requests unless excessive, repetitive, or unfounded.

Do Not Sell My Personal Information

We do not sell personal information. However, Service Providers we partner with (such as advertising partners) may use technology on the Service that "sells" personal information as defined by CCPA. If you wish to opt out of interest-based advertising and these potential sales, note that any opt-out is specific to the browser You use:

  • Desktop browser: use an "Ad Block" browser extension.
  • Mobile devices: use "Opt out of Interest-Based Ads" / "Opt out of Ads Personalization" (Android) or "Limit Ad Tracking" (iOS). You can also disable location collection in your device settings.

"Do Not Track" Policy (CalOPPA)

Our Service does not respond to Do Not Track signals. Some third-party websites do keep track of Your browsing activities; You can set browser preferences to inform sites that You do not want to be tracked.

Children's Privacy

Our Service does not address anyone under the age of 13, and We do not knowingly collect personally identifiable information from anyone under 13. If You are a parent or guardian aware that Your child has provided Us with Personal Data, please contact Us so We can remove it. If We need consent as a legal basis for processing and Your country requires parental consent, We may require it before collecting and using that information.

Links to Other Websites

Our Service may contain links to other websites not operated by Us. We strongly advise You to review the Privacy Policy of every site You visit; We have no control over and assume no responsibility for third-party content, privacy policies, or practices.

SMS Messaging

Purpose of SMS Notifications

Our SMS notifications are designed to remind you of scheduled appointments or meetings with Lost Key Med Spa personnel, and to inform you of upcoming services, payment reminders, and other essential notifications.

Opt-In and Consent

By providing your phone number and opting into our SMS notifications, you confirm you are the owner or authorized user of that number, and consent to receive recurring automated text messages (SMS, MMS) regarding your scheduled consultations, account updates, offers, and other notifications. Consent is not required to make a purchase. Message frequency varies, generally 1–5 messages per week.

Opt-Out Instructions

Reply "STOP," "END," "CANCEL," "UNSUBSCRIBE," or "QUIT" to any SMS message from us to opt out at any time. You'll receive a final confirmation message, and no further messages will be sent unless you re-enroll.

Help and Support

Reply "HELP" to any message, or contact us via our Contact Us page.

Message and Data Rates

Standard message and data rates may apply. Please consult your mobile carrier for details on your text plan or data rates.

Privacy and Data Security

Your data is used solely for managing your consultations, processing payments, and communication regarding your services. We do not sell, rent, or share your personal information with third parties for marketing purposes; We may share it only as required by law, for billing/payment processing, or to fulfill contractual obligations.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements, after which it is securely deleted or anonymized.

Compliance with Regulations

We comply with the Telephone Consumer Protection Act (TCPA) and CTIA guidelines, and provide clear instructions for opting in or out of SMS notifications.

Indemnification

You agree to indemnify, defend, and hold us harmless from any privacy, tort, or other claims (including under the TCPA or state equivalents) arising from your voluntary provision of a phone number not owned by you and/or failure to notify us of a number change.

Participation Requirements

To participate in SMS notifications, you must be 18 or older, own a wireless device capable of two-way messaging, and be subscribed to a wireless service with text messaging capability (not all carriers are supported).

Dispute Resolution and Arbitration Related to SMS

By using our SMS service, you agree to resolve disputes individually, not as part of a class or representative action, and waive your right to a jury trial in favor of final and binding arbitration. If you do not agree, please do not participate in the service.

Miscellaneous

You warrant you have the necessary rights and authority to agree to these terms, and that participation does not violate any other contract or obligation. If any provision is found unenforceable, the remaining provisions stay in force. We reserve the right to modify these terms at any time; continued participation constitutes acceptance of the updated terms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You by posting the new Privacy Policy on this page, and where appropriate, via email or a prominent notice, updating the "Last updated" date above. You are advised to review this Privacy Policy periodically.

Health Information: Please do not submit sensitive medical or health information through website contact forms unless expressly instructed to do so. This Privacy Policy applies to information collected through this website and related digital services. Protected Health Information (PHI) is governed separately by our HIPAA Notice of Privacy Practices.

Contact Us

If you have any questions about this Privacy Policy, you can contact us by visiting our Contact Us page.

Online booking

Treat Yourself Today, Book Your Spa Experience With Us

Book Your Visit

Ready to Love the Skin You're In?

Schedule your personalized consultation today and discover treatments designed specifically for your goals.
Customer Support

(833) 538-7869

Email Support

info@lostkeymedspa.com

Built for the future, we engineer strength, reliability, and innovation into every project we touch.
Quick Links
  • Home
  • Our Story
  • FAQs
  • Reviews
  • Contact us
Support
  • Blogs
  • Privacy Policy
  • Terms and Conditions
Facebook-f Instagram Google
  • Thank You
Signup our newsletter to get update information, news, insight or promotions.
Copyright © 2026 All rights reserved. Designed By SpredX