Introduction

This Privacy Policy describes our policies and procedures for the collection, use, and disclosure of your information when you use the Service. It also informs You about Your privacy rights and how the law protects You. We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

• You refers to the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
• Company (referred to as either "the Company," "We," "Us," or "Our") refers to Plump® Cosmetics & Injectables, located at 104 Reade St, New York, NY 10013.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party.
• Account means a unique account created for You to access our Service or parts of our Service.
• Website refers to Plump® Cosmetics & Injectables, accessible from getplump.com.
• Service refers to the Website.
• Country refers to the United States, specifically New York.
• Service Provider means any natural or legal person who processes the data on behalf of the Company.
• Third-party Social Media Service refers to any website or social network through which a User can log in or create an account to use the Service.
• Personal Data is any information that relates to an identified or identifiable individual.
• Cookies are small files placed on Your computer, mobile device, or any other device by a website.
• Device means any device that can access the Service.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
• Data Controller (GDPR) refers to the Company as the legal person which determines the purposes and means of the processing of Personal Data.

SMS Messaging

Plump sends appointment confirmations, reminders, rescheduling updates, post-care communications, and responses to appointment-support requests only to individuals who affirmatively consent to receive these messages. Providing a mobile phone number alone does not constitute consent. SMS consent is optional and is not a condition of purchasing services or completing a booking.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help.

Mobile information and SMS consent records will not be sold or shared with third parties or affiliates for marketing or promotional purposes. Service providers may process this information only as necessary to provide Plump’s messaging services.

Data Retention and Usage

We will retain Your phone number and other personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Usage Data is retained for a shorter period unless used for security enhancement or legal obligations.

Data Security

We prioritize the security of Your Personal Data. While no method of transmission over the Internet or electronic storage is entirely secure, We implement appropriate measures to protect Your information.

Disclosure of Data

We do not share any Personal Data, such as mobile information, with third parties or affiliates for marketing/promotional purposes. We may share Your Personal Data with Service Providers to facilitate our Service or for analytics purposes. We may also disclose Your information in compliance with legal obligations or in the case of a business transfer such as a merger or sale.

Meta (Facebook) Advertising Measurement

Meta advertising measurement (dataset 9854473034573309) may run across our public website pages, excluding private plan, admin, and account-style pages. It runs only for visits that our own region service identifies as coming from a region We have approved for it — currently New York, New Jersey, and Florida (United States). It is off for every other visit, and off whenever the region cannot be determined.

To make that determination, when You visit our website Your browser makes a single request to our own service at region.getplump.com. That request carries no address details, no parameters, no cookies, no referring page, and no identifier We create; the service reads only the approximate country and state that our network provider derives from Your connection, and answers yes or no. The answer is not stored and is re-checked on every visit. If the request fails, times out, or returns anything unexpected, nothing is loaded. Approximate location derived from an internet connection can be imprecise.

When measurement does run, it records page-view events as You move between pages, a content-view event when You open our Treatment Estimator, and a lead event when You submit the Treatment Estimator and Your plan is revealed. Meta receives Your IP address, browser information, and the address of the page You are on. The lead event includes only the label "Treatment Estimator Lead", Your market (New York/New Jersey or Miami), and neutral channel codes from the advertisement that brought You here (for example utm_source=meta, utm_medium=paid_social, or a numeric campaign ID) — never the treatments You selected or Your prices.

Nothing is requested from Meta or from our region service if Your browser sends a Global Privacy Control signal or if You have opted out below; an opt-out You previously made remains in effect. Automatic event collection and advanced matching are disabled, so no name, email address, phone number, appointment, treatment selection, or other health-related information is sent to Meta. We do not operate a Meta server-side (Conversions API) integration from this website. This description explains how the feature behaves; it is not a statement that any particular law applies to You or to Us.

This choice applies to Meta only. It does not govern our other technologies — the OpenAI advertising pixel, Microsoft Clarity session analytics, and our own first-party website analytics operate separately and are described elsewhere in this Policy and in their providers' own policies.

California Consumer Privacy Act (CCPA) Compliance

Your Rights Under the CCPA

If you are a California resident, you have specific rights regarding your personal information.

Right to Know and Access

You have the right to request that We disclose certain information to you about our collection and use of your personal information over the past 12 months. Once We receive and confirm your verifiable consumer request, We will disclose to you:

• The categories of personal information We collected about You.
• The categories of sources for the personal information We collected about You.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom We share that personal information.
• The specific pieces of personal information We collected about You.