Privacy Policy

Advanced Dermatology and Aesthetic Medicine, LLC

Last modified: July 15, 2026

Introduction

Advanced Dermatology and Aesthetic Medicine, LLC (“Advanced Dermatology,” the “Company,” “we,” “us,” or “our”) is committed to protecting your privacy and providing a secure and reliable online experience.

This Privacy Policy applies to information we collect through our public-facing medical practice website, our WordPress website pages, our Shopify-powered online store, and any other online services, pages, features, forms, or communications that link to this Privacy Policy (collectively, the “Services”).

Our Services include both medical practice information and an e-commerce shopping experience. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or use the Services, purchase products, contact us, interact with our forms, or otherwise communicate with us online.

By using the Services, you acknowledge that you have read and understand this Privacy Policy.

Important Notice About Medical Information and HIPAA

Advanced Dermatology and Aesthetic Medicine, LLC is a medical practice. Certain health information that we collect, receive, create, maintain, or transmit in connection with patient care may be protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”).

This Privacy Policy applies to our public websites, online store, general website forms, analytics, and e-commerce activities. It does not replace our HIPAA Notice of Privacy Practices, which describes how we may use and disclose PHI and explains patient rights under HIPAA. To the extent there is a conflict between this Privacy Policy and our HIPAA Notice of Privacy Practices regarding PHI, the HIPAA Notice of Privacy Practices controls.

Please do not submit sensitive medical information, detailed health history, photographs of medical conditions, or urgent medical concerns through general website forms, email, or other unsecured channels. For medical questions, appointment-related clinical communications, patient records, billing, or secure payments, please use the designated patient portal, contact our office directly, or use another secure method we provide.

If you are experiencing a medical emergency, call 911 or seek emergency medical care immediately.

Scope of This Privacy Policy

This Privacy Policy applies to information we collect:

• Through our WordPress medical practice website;
• Through our Shopify-powered e-commerce storefront;
• Through contact forms or other forms on our websites;
• When you purchase products through our online store;
• When you communicate with us by email, web form, or other electronic means;
• Through cookies, analytics, and similar technologies used on the Services; and
• When you interact with our online advertising, analytics, or third-party integrations that link to or are associated with this Privacy Policy.

This Privacy Policy does not apply to:

• Information collected offline in the course of patient care, except as otherwise described in this Privacy Policy;
• Protected health information governed by our HIPAA Notice of Privacy Practices;
• Third-party websites, platforms, or services that we do not control, including Zocdoc, Shopify, payment processors, shipping providers, or patient portal providers, except to the extent those providers process information on our behalf; or
• Information collected by third parties through their own websites, applications, services, or privacy practices.

Children and Minors

Our public websites and online store are intended for adults, including parents and legal guardians who may use the Services on behalf of a minor.

Advanced Dermatology provides medical care to minors, including pediatric dermatology services, with appropriate parent or guardian consent and involvement. However, the online store and general website forms are not intended for unsupervised use by children. We do not knowingly collect personal information from children in a manner prohibited by applicable law.

If you are a parent or guardian and believe a child has provided personal information through our Services without appropriate authorization, please contact us using the contact information below.

Information We Collect

We may collect several categories of information depending on how you interact with the Services.

Information You Provide Directly

We may collect information you provide to us, such as:

• Name;
• Email address;
• Phone number;
• Billing address;
• Shipping address;
• Order information;
• Account information, if you create an account through the online store;
• Information submitted through contact forms;
• Information included in emails or other communications with us;
• Customer service inquiries;
• Product preferences or purchase history; and
• Any other information you voluntarily provide.

Please do not include sensitive medical information in general website forms or unsecured email communications.

E-Commerce and Shopify Information

When you use our Shopify-powered online store, we or Shopify may collect information related to your shopping activity, including:

• Products you view;
• Products you add to your cart;
• Products you purchase, return, exchange, or cancel;
• Order history;
• Shipping and delivery information;
• Payment-related information;
• Customer account information;
• Discount or promotion usage;
• Device and browsing information associated with the online store; and
• Other information necessary to process and fulfill online purchases.

Payment information for online store purchases is processed by Shopify, Shopify’s payment processor, or other payment service providers. We do not intentionally store full payment card numbers on our public website servers.

Appointment Scheduling Through Zocdoc

We use Zocdoc as a third-party online scheduling service. If you choose to schedule an appointment through Zocdoc, you may be directed to Zocdoc’s website or platform. Information you provide to Zocdoc may include appointment-related information, contact details, insurance information, demographic information, reason for visit, and other information needed to facilitate scheduling.

Zocdoc may process information under its own privacy policy and terms. In some circumstances, Zocdoc may also process information on behalf of a healthcare provider. We may receive appointment-related information from Zocdoc as needed to schedule, confirm, manage, or provide care.

Please review Zocdoc’s privacy practices before submitting information through Zocdoc.

Patient Portal and Online Payments

Our Services may link to a patient portal, including MyPatientVisit or another portal made available for patients. The patient portal may allow patients to view information, communicate securely, complete patient-related tasks, or make payments.

Information submitted through the patient portal is handled by the portal provider, our electronic health record system, payment processors, and/or other healthcare technology vendors, as applicable. Patient portal information may include PHI and may be governed by HIPAA, our HIPAA Notice of Privacy Practices, and the terms and privacy practices of the portal provider.

Please use the patient portal or another secure method we provide for patient-specific communications, medical records, billing, and payments related to medical care.

Information Collected Automatically

When you visit or interact with the Services, we and our service providers may automatically collect information about your device, browser, and usage activity, including:

• IP address;
• Browser type;
• Operating system;
• Device type;
• Pages viewed;
• Links clicked;
• Referring URLs;
• Date and time of access;
• Approximate location based on IP address;
• Shopping activity on the Shopify storefront;
• Cookies or similar identifiers; and
• General usage and performance information.

We use this information to operate the Services, improve website performance, understand visitor behavior, secure the Services, troubleshoot issues, support e-commerce functionality, and measure the effectiveness of our content and marketing.

Cookies and Similar Technologies

We may use cookies, pixels, tags, scripts, web beacons, local storage, and similar technologies to support website functionality, security, analytics, e-commerce, advertising measurement, and user experience.

Cookies may help us:

• Remember preferences;
• Keep items in your cart;
• Process online store activity;
• Understand how visitors use our websites;
• Measure website and store performance;
• Improve content and navigation;
• Detect fraud or abuse;
• Support security; and
• Measure advertising or referral effectiveness.

You can control cookies through your browser settings. If you disable cookies, some features of the Services, including Shopify storefront features, cart functionality, checkout, or account features, may not function properly.

Google Tag Manager and Google Analytics 4

We use Google Tag Manager to manage tags and analytics tools on our Services.

We use Google Analytics 4 to help us understand how visitors use our websites, measure traffic and usage patterns, analyze website performance, and improve the Services. Google Analytics may collect information such as pages visited, device and browser information, approximate location, referral source, and interactions with the Services.

We do not intentionally use Google Analytics to collect sensitive medical information or information entered into the patient portal. We also do not intentionally place analytics tools inside third-party patient portal areas that we do not control.

Google processes information in accordance with its own privacy policies and settings.

Shopify Tracking and E-Commerce Analytics

Our Shopify storefront may use Shopify cookies, analytics, and tracking technologies to support store functionality, checkout, fraud prevention, analytics, order processing, and shopping experience improvements.

Shopify and related service providers may process information about your interactions with our online store, including product views, cart activity, purchases, device information, and other e-commerce usage information.

Shopify tracking applies to the e-commerce portion of our Services and is used to support and improve the online shopping experience.

How We Use Information

We may use personal information for the following purposes:

• To operate, maintain, and improve the Services;
• To provide information, products, or services you request;
• To respond to inquiries or communications;
• To process online store purchases;
• To process payments and refunds;
• To arrange shipping, delivery, fulfillment, returns, and exchanges;
• To manage online store accounts;
• To provide customer support;
• To facilitate appointment scheduling through Zocdoc;
• To direct patients to the patient portal;
• To support patient-related administrative workflows, where applicable;
• To maintain website, store, and account security;
• To detect, prevent, and respond to fraud, abuse, or technical issues;
• To analyze website and store usage;
• To improve website content, design, performance, and user experience;
• To measure marketing, advertising, and referral effectiveness;
• To comply with legal, regulatory, and contractual obligations;
• To enforce our terms, policies, or rights; and
• For any other purpose disclosed at the time of collection or with your consent.

Uses and disclosures of PHI for treatment, payment, and healthcare operations are described in our HIPAA Notice of Privacy Practices.

Marketing and Communications

We may send transactional or service-related communications by email, text message (SMS), or phone, such as order confirmations, shipping updates, account notices, appointment-related communications, appointment reminders, payment-related messages, or responses to inquiries.

With your consent or as otherwise permitted by applicable law, we may also send promotional communications by email and text message (SMS), such as practice news, product updates, offers, and other marketing messages. You can opt out of promotional emails at any time by using the unsubscribe link included in each marketing email, and you can opt out of marketing text messages by replying STOP to any marketing text (message and data rates may apply). We will honor opt-out requests as required by applicable law.

Even if you opt out of promotional communications, we may still send non-promotional communications related to your account, orders, appointments, payments, patient care, legal notices, or other transactional matters.

How We Disclose Information

We may disclose personal information to third parties as needed for the purposes described in this Privacy Policy, including:

• Shopify and Shopify-related service providers;
• Payment processors;
• Shipping, fulfillment, and delivery providers;
• Zocdoc, for appointment scheduling;
• Patient portal and electronic health record providers;
• Technology, hosting, security, and IT service providers;
• Analytics providers, including Google Analytics;
• Website maintenance and development providers;
• Customer support providers;
• Professional advisors, such as attorneys, accountants, and compliance consultants;
• Government authorities, regulators, courts, or law enforcement when required or permitted by law;
• Parties involved in a business transaction, such as a merger, sale, restructuring, financing, acquisition, or transfer of assets; and
• Other parties when you direct us, authorize us, or consent to the disclosure.

We may also disclose aggregated or de-identified information that does not reasonably identify you.

We do not sell PHI. We do not knowingly sell or share personal information of minors for targeted advertising in a manner prohibited by applicable law.

Third-Party Websites and Services

The Services may include links to third-party websites, platforms, or services, including Zocdoc, Shopify, the patient portal, payment processors, social media platforms, shipping providers, or other third-party services.

We are not responsible for the privacy practices, security, content, or policies of third-party websites or services that we do not control. When you leave our Services or provide information to a third party, that third party’s privacy policy and terms may apply.

We encourage you to review the privacy policies of third-party services before submitting information to them.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

However, no method of transmission over the Internet and no method of electronic storage is completely secure. We cannot guarantee absolute security. Any transmission of information through the Services is at your own risk.

Please do not send sensitive medical information, payment information, account credentials, or other confidential information through unsecured email or general website forms.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, maintain records, complete transactions, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and maintain business records.

Retention periods may vary depending on the type of information, the reason it was collected, applicable legal requirements, and whether the information relates to e-commerce, patient administration, billing, legal compliance, or other business purposes.

PHI and medical records may be retained in accordance with HIPAA, state medical record retention requirements, and our internal records policies.

Your Choices

You may have choices regarding your information, including:

• Cookie controls through your browser settings;
• Privacy controls offered by Google or other third-party services;
• Unsubscribe links in promotional emails, and reply-STOP opt-out for marketing text messages;
• Patient portal settings, where available;
• Contacting us to request access, correction, deletion, or other rights available under applicable law.

Depending on your location, you may have rights to request access to personal information, deletion, correction, portability, restriction, or opt out of certain types of processing, including sale, sharing, or targeted advertising as defined by applicable law.

To exercise any of these rights, including a request to opt out of the sale or sharing of personal information or of targeted advertising, email us at info@advanceddermchi.com. Privacy and data requests relating to this website are handled by our team at that address; there is no separate online form.

These rights are not absolute and may be subject to exceptions. We may need to verify your identity before processing a request.

For rights related to PHI, please refer to our HIPAA Notice of Privacy Practices.

Global Privacy Control and Do Not Track

Some browsers or browser extensions may allow you to send privacy preference signals, such as Global Privacy Control. Where required by applicable law and technically feasible, we will treat such signals as opt-out requests for the browser or device sending the signal.

Some browsers transmit “Do Not Track” signals. Because there is not yet a uniform industry standard for responding to Do Not Track signals, we do not currently respond to them in a uniform manner.

International Processing

Our service providers, including Shopify and other technology vendors, may process or store information in the United States or other jurisdictions. By using the Services, you understand that information may be processed in locations where privacy laws may differ from those in your jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations.

When we update this Privacy Policy, we will revise the “Last modified” date above. Your continued use of the Services after the updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.

Contact Information

If you have questions about this Privacy Policy, our privacy practices, or your privacy rights, please contact us at:

Advanced Dermatology and Aesthetic Medicine, LLC
850 S Wabash Ave, Suite 200
Chicago, IL 60605
United States

Email: info@advanceddermchi.com