Skip to main content

    Privacy Policy

    Introduction

    This Privacy Policy describes our policies and procedures for the collection, use, and disclosure of your information when you use the Service. It also informs You about Your privacy rights and how the law protects You. We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

    Interpretation and Definitions

    Interpretation

    The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or plural.

    Definitions

    For the purposes of this Privacy Policy:

    • You refers to the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
    • Company (referred to as either "the Company," "We," "Us," or "Our") refers to Plump® Cosmetics & Injectables, located at 104 Reade St, New York, NY 10013.
    • Affiliate means an entity that controls, is controlled by, or is under common control with a party.
    • Account means a unique account created for You to access our Service or parts of our Service.
    • Website refers to Plump® Cosmetics & Injectables, accessible from getplump.com.
    • Service refers to the Website.
    • Country refers to the United States, specifically New York.
    • Service Provider means any natural or legal person who processes the data on behalf of the Company.
    • Third-party Social Media Service refers to any website or social network through which a User can log in or create an account to use the Service.
    • Personal Data is any information that relates to an identified or identifiable individual.
    • Cookies are small files placed on Your computer, mobile device, or any other device by a website.
    • Device means any device that can access the Service.
    • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
    • Data Controller (GDPR) refers to the Company as the legal person which determines the purposes and means of the processing of Personal Data.

    SMS Messaging

    Plump operates two separate, voluntary messaging programs. Providing a mobile phone number alone does not constitute consent to either program, and opting into one program does not opt you into the other. Consent is optional and is not a condition of booking or purchase.

    Automated Appointment & Customer Care Messaging (Twilio & Verified RCS). Sent as the verified RCS brand Plump, with SMS/MMS fallback from +1 (718) 584-0999, only to people who affirmatively check the optional booking consent box. Messages are transactional and customer-care only: verification codes, treatment quotes, appointment options, booking confirmations, reminders, rescheduling, arrival details, and post-care.

    Staff Conversational Messaging (RingCentral). Two-way conversations with Plump staff from +1 (646) 346-8809 about availability, booking support, schedule changes, locations, services, and post-visit questions. This program requires its own separate affirmative consent.

    Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help.

    Mobile numbers, SMS/RCS opt-in data, and consent records are not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Vendors may process them only to provide Plump-authorized messaging.

    Full program terms: SMS Messaging Terms.

    Campaign Attribution

    Where permitted, first-party cookies retain the first and latest tagged visits for up to 90 days, including campaign source, medium, campaign, content, term, ad ID and Google or Meta click references. These values are passed only to Plump’s booking service at book.getplump.com to associate bookings with campaigns; this hand-off does not itself report a conversion to Google or Meta. No customer matching data is added. With no new consent banner, this capture and hand-off are disabled in consent-required or unresolved regions. Global Privacy Control and the opt-out under Privacy choices below stop this hand-off and clear stored attribution; the saved refusal also applies in other open tabs.

    Data Retention and Usage

    We will retain Your phone number and other personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Usage Data is retained for a shorter period unless used for security enhancement or legal obligations.

    Data Security

    We prioritize the security of Your Personal Data. While no method of transmission over the Internet or electronic storage is entirely secure, We implement appropriate measures to protect Your information.

    Disclosure of Data

    We do not share any Personal Data, such as mobile information, with third parties or affiliates for marketing/promotional purposes. We may share Your Personal Data with Service Providers to facilitate our Service or for analytics purposes. We may also disclose Your information in compliance with legal obligations or in the case of a business transfer such as a merger or sale.

    Meta (Facebook) Advertising Measurement

    Meta advertising measurement (dataset 9854473034573309) may run across our public website pages, excluding private plan, admin, and account-style pages. It runs only for visits that our own region service identifies as coming from a region We have approved for it — currently New York, New Jersey, and Florida (United States). It is off for every other visit, and off whenever the region cannot be determined.

    To make that determination, when You visit our website Your browser makes a single request to our own service at region.getplump.com. That request carries no address details, no parameters, no cookies, no referring page, and no identifier We create; the service reads only the approximate country and state that our network provider derives from Your connection, and answers yes or no. The answer is not stored and is re-checked on every visit. If the request fails, times out, or returns anything unexpected, nothing is loaded. Approximate location derived from an internet connection can be imprecise.

    When measurement does run, it records page-view events as You move between pages, a content-view event when You open our Treatment Estimator, and a lead event when You submit the Treatment Estimator and Your plan is revealed. Meta receives Your IP address, browser information, and the address of the page You are on. The lead event includes only the label "Treatment Estimator Lead", Your market (New York/New Jersey or Miami), and neutral channel codes from the advertisement that brought You here (for example utm_source=meta, utm_medium=paid_social, or a numeric campaign ID) — never the treatments You selected or Your prices.

    Nothing is requested from Meta or from our region service if Your browser sends a Global Privacy Control signal or if You have opted out below; an opt-out You previously made remains in effect. Automatic event collection and advanced matching are disabled, so no name, email address, phone number, appointment, treatment selection, or other health-related information is sent to Meta. We do not operate a Meta server-side (Conversions API) integration from this website. This description explains how the feature behaves; it is not a statement that any particular law applies to You or to Us.

    This choice applies to Meta only. It does not govern our other technologies — the OpenAI advertising pixel, Microsoft Clarity session analytics, and our own first-party website analytics operate separately and are described elsewhere in this Policy and in their providers' own policies.

    Meta advertising measurement may run on this website for visits our edge service identifies as coming from an approved region (New York, New Jersey, Florida). You can opt out at any time.

    Opting out is saved in this browser and applies before anything is requested from Meta or from our region service.

    California Consumer Privacy Act (CCPA) Compliance

    Your Rights Under the CCPA

    If you are a California resident, you have specific rights regarding your personal information.

    Right to Know and Access

    You have the right to request that We disclose certain information to you about our collection and use of your personal information over the past 12 months. Once We receive and confirm your verifiable consumer request, We will disclose to you:

    • The categories of personal information We collected about You.
    • The categories of sources for the personal information We collected about You.
    • Our business or commercial purpose for collecting that personal information.
    • The categories of third parties with whom We share that personal information.
    • The specific pieces of personal information We collected about You.