Who we are

Our website address is: https://myquintessa.com.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

You may supply us with information about you by filling in forms on our website. This includes information you provide when you submit a contact, schedule a consultation, request more information, etc. The information you give us may include your name, address, e-mail address, email preferences, phone number, service/product interest and health-related questions.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Google Analytics
We use Google Analytics service to measure traffic and user behavior on our website. Our Google Analytics code is configured to anonymize user IP addresses. So your personal IP address is not collected by Google.

If you’d like to opt out of tracking by Google Analytics, visit the Google Analytics opt-out page.

Hotjar
We may be using a service called Hotjar to analyze the performance and conversion on this site.

You can learn more about Hotjar and the data it stores in their privacy policy.

You can learn more about the cookies Hotjar stores from their cookie information or opt out of the Hotjar cookies on this page.

MailChimp
We may be using a service called MailChimp to send you marketing communications by email, text and telephone. You can learn more about MailChimp and the data it stores in their privacy policy.

Zenoti DBA “Soham, Inc.” (Soham)
Soham collects and retains certain personal information. Soham receives and stores any information you enter on the Site or give to Soham in any other way. You can choose not to provide certain information, but then you might not be able to take advantage of many of Soham’s services and products. Soham uses the information that you provide for such purposes as responding to your requests, customizing future services and products for you, improving Soham’s services and products, and communicating with you.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Your contact information

Quintessa Aesthetic Centers 10604 N. Port Washington Rd Mequon, WI 53092, USA, info@myquintessa.com.

Additional information

How we protect your data

We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online via encryption and offline via staff training.

Wherever we collect sensitive information (such as personal health information or credit card data), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the Web page.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.

If you feel that we are not abiding by this privacy policy, you should contact us immediately.

What data breach procedures we have in place

A data breach generally refers to the unauthorized access and retrieval of information that may include corporate and personal data. Managing data breaches is important to protect the personal data of our clients when a data breach occurs. In the event of a data breach, we will initiate the following procedures: Identification and classification; Containment and recovery; Risk assessment; Reporting of breach; Evaluation of the response & recovery to prevent future breaches.

What third parties we receive data from

We may collect or obtain your Personal Information from third parties who provide it to us. This may include referral sources; social network sites or services (e.g., Facebook, Instagram, Pinterest, Twitter, LinkedIn, etc.). If you use a third-party connection or log-in (e.g., Facebook Connect, Twitter, or Google+) to access our services, access our content or forward our content to another person, platform or service, we may also receive your username or email address for those third-party services or other information available about you or collected from you on those services.

What automated decision making and/or profiling we do with user data

If we are processing your personal information based on your consent, or in order to enter into or carry out an agreed upon contract with you, and the processing is being done by automated means, you may ask us to provide it to you or another service provider in a machine-readable format. 

Industry regulatory disclosure requirements

We will not keep your personal information longer than necessary. The retention period is determined by operational and legal considerations. For example, we are required to hold some types of information to fulfill legal obligations (e.g. health/safety regulations and tax/accounting purposes). We review our retention periods on a regular basis.

Your Rights Under the General Data Protection Regulation (GDPR)

Under the GDPR, you have certain rights over your personal information: right of access; right to have your inaccurate personal information corrected; right to restrict use; right of erasure; right for your personal information to be portable; and, right to object. 

If you want to access your information, please send a description of the information you want to see and proof of your identity by post to the address provided above. If you want to exercise any of the above rights, please contact us by using the email listed on this website. We may be required to ask for further information and/or evidence of identity. We will endeavor to respond fully to all requests within one month of receipt of your request, however if we are unable to do so we will contact you with reasons for the delay.

Please note that exceptions apply to a number of these rights, and not all rights will be applicable in all circumstances. For more details we recommend you consult the guidance published by the UK’s Information Commissioner’s Office, https://ico.org.uk/