Effective date: July 29, 2026
This Consumer Health Data Privacy Policy supplements the general Privacy Policy of Boujie and Bare Esthetics. It explains how Boujie and Bare Esthetics (“Boujie and Bare,” “we,” “us,” or “our”) collects, uses, processes, protects, and shares consumer health data covered by Nevada law, whether collected through our online intake form or a paper intake form completed with a team member.
Consumer health data we collect
Depending on the service requested, we collect information that is reasonably necessary for client safety, service eligibility, treatment documentation, and follow-up, including:
- Identity, contact, age, date-of-birth, emergency-contact, and account information.
- Appointments, requested services, service history, treatment goals, and communications.
- Allergies, sensitivities, prior reactions, skin condition, symptoms, relevant medications and topical products, pregnancy or breastfeeding status, healing concerns, and information about recent procedures.
- Intake answers, consent selections, electronic signatures, timestamps, and form versions.
- Provider observations, contraindication decisions, treatment notes, products or devices used, aftercare provided, and progress information.
- Photographs or video only according to the client’s separate photo release selection.
- Client portal account, security, access, and audit information used to protect records and investigate misuse.
We do not intentionally collect genetic data, insurance information, Social Security numbers, or unrelated medical records through the esthetic intake process.
Sources of consumer health data
We collect data directly from the client; from an authorized parent, guardian, or representative when permitted; from booking, account, form, and communication activity; from the provider’s observations during a requested service; and from records the client chooses to provide.
How and why we use the data
We use consumer health data only as reasonably necessary to:
- Schedule, evaluate, prepare for, provide, modify, postpone, or decline a requested esthetic service.
- Identify allergies, contraindications, sensitivities, and other safety concerns.
- Maintain accurate intake, consent, treatment, progress, and aftercare records.
- Communicate service-related preparation, confirmation, aftercare, follow-up, and privacy information.
- Maintain a secure client portal so clients can view their own appointments, packages, and consent history.
- Create printable records, maintain secure archives, respond to client requests, prevent fraud, protect accounts, and comply with applicable law.
Consent and data minimization
We collect consumer health data with the client’s affirmative, voluntary consent, given by a clear and specific action separate from any general terms of use, or to the extent reasonably necessary to provide a service the client requested. We collect only information relevant to the selected service. Photo release permission and marketing-communication permission are each their own separate, optional consent, distinct from treatment consent — none of them are a condition of receiving services.
A client may withdraw consent or ask us to cease collection or sharing at any time using the request process below. Withdrawal may affect our ability to safely provide a requested service going forward and does not undo processing completed before withdrawal.
Consumer health data we may share
We do not sell consumer health data. We may share limited consumer health data only as necessary to provide a requested service, operate and secure our records and client portal, comply with law, or as separately authorized by the client. Categories of recipients may include:
- The technology service providers who host our encrypted database, file storage, client portal, and booking system, acting only on our instructions.
- Scheduling, email, communication, payment, and e-commerce processors, when necessary to provide the requested service.
- Authorized contractors or licensed professionals involved in a requested service, where applicable and disclosed.
- Professional advisers, insurers, regulators, courts, or law-enforcement authorities when reasonably necessary or legally required.
We require any processor handling consumer health data on our behalf to use it only for the purposes we authorize and to maintain reasonable safeguards. We will seek separate, specific consent before sharing consumer health data for any purpose not necessary to provide the requested service, unless another law authorizes or requires the sharing.
Cross-site collection
Boujie and Bare does not authorize third parties to collect consumer health data over time and across unrelated websites or online services for targeted advertising. Ordinary website analytics may process general device or browsing information as described in our general Privacy Policy, but we do not use intake answers, treatment records, or intimate-service information for cross-site advertising.
Security
We use administrative, technical, and physical safeguards reasonable for the sensitivity of the information, including encryption of health data at rest and in transit, restricted and role-based staff access, multi-factor authentication for administrative access, and activity logging. Access is limited to people and service providers who reasonably need the information to provide a requested service or operate our systems. As our tools and best practices evolve, these safeguards may be strengthened; this policy will always describe our current approach rather than a fixed technical specification.
Retention
We retain records only as long as reasonably necessary for the purposes described in this policy, for client safety and continuity of care, to meet legal or licensing obligations, and to resolve disputes. Valid deletion requests are handled as described below, subject to lawful retention obligations and limited backup exceptions.
Your Nevada consumer rights
Subject to applicable exceptions and identity verification, a Nevada consumer may request that we:
- Confirm whether we collect, share, or sell consumer health data relating to the consumer.
- Identify third parties with whom that data was shared or sold.
- Cease collecting, sharing, or selling the data.
- Delete consumer health data concerning the consumer.
- Review and request correction of information we maintain in an accessible record.
We do not discriminate against anyone for exercising these rights, though some requests may affect our ability to safely provide a service.
How to submit a request or appeal
Visit Nevada Consumer Health Privacy Requests for instructions, or your client portal account for a self-service view of your own appointments, packages, and consent history. To begin a formal request, email boujieandbare@outlook.com with the subject “Nevada Consumer Health Privacy Request,” or call or text 916-871-9400. Please do not place intake answers, diagnoses, medication details, photographs, or other sensitive information in ordinary email — we will verify your identity before disclosing, correcting, ceasing, or deleting any records. If we decline to act on a request, you may appeal using the same process with the subject “Appeal — Nevada Consumer Health Privacy Request.”
Changes to this policy
We will update the effective date above and provide clear notice of any material change. If Nevada law requires new affirmative consent for an additional category of data, purpose, or recipient, we will request that consent before the new collection, use, or sharing begins.
Contact
Boujie and Bare Esthetics
4560 S Eastern Ave, Suite 20, Las Vegas, NV 89119
Email: boujieandbare@outlook.com
Call or text: 916-871-9400