Privacy policy

Last updated: November 16, 2025

Renata Khelemsky MD PLLC ("Renata Facial Cosmetic Surgery / Online") operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Renata Facial Cosmetic Surgery / Online is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
  • Account information including your username, password, security questions, preferences and settings.
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
  • Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
  • Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
  • Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
  • Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
  • With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. You can exercise your rights to opt-out of those uses here .
  • When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
  • With our affiliates or otherwise within our corporate group.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy . Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

  • Right to Access / Know. You may have a right to request access to personal information that we hold about you.
  • Right to Delete. You may have a right to request that we delete personal information we maintain about you.
  • Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
  • Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
  • Right to Opt out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may have a right to opt out of the "sale" or "share" of your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. You can exercise your rights to opt-out of those uses here. Please note that if you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out for the device and browser that you use to visit the website. If we are able to associate the device sending the signal to a Shopify account, we will apply the opt out request to the account as well. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/. Other than the Global Privacy Control, we do not recognize other "Do Not Track" signals that may be sent from your web browser or device.
  • Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

 

THE NOTICE BELOW DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

OUR POLICY REGARDING YOUR HEALTH INFORMATION

We are committed to preserving the privacy and confidentiality of your health information. This Privacy Notice describes how Renata Khelemsky, MD, PLLC (the “Practice”) may use and disclose your protected health information according to applicable laws and regulations. It also describes your rights with respect to your protected health information. Your “protected health information” includes most information about your physical and mental health, such as symptoms, treatment, test results, and demographic data, which contains details that can be used to identify you. We are required by law to maintain the privacy of your “protected health information” and to provide you with this notice of our legal duties and privacy practices.

We reserve the right to change this notice and to make the revised notice effective for all protected health information that we maintain at that time and any information we may receive in the future. We will post a copy of the current notice in our facility and we will make any revised notice available at the facility for you to request a copy. We are required to abide by the terms of this notice while it remains in effect, including any future revisions that we may make to the notice as required or authorized by law.

USES AND DISCLOSURES WITH AND WITHOUT YOUR AUTHORIZATION

We must obtain your written permission or “authorization” to use or disclose your protected health information except in the limited situations listed below, which do not require your written authorization:

1. Treatment: We will use and disclose your protected health information to provide, coordinate and manage your health care and related services. We may disclose your protected health information to health care providers, including providers not affiliated with the Practice, so that they may provide you with treatment. For example, we may disclose your protected health information to a pharmacy to fill a prescription, to a laboratory to order a test, or to a specialist for a consultation.

2. Payment: We will use and disclose your protected health information, as needed, for the Practice to obtain payment for our health care services. For example, we may disclose protected health information to your health insurance company so we may obtain prior approval for a surgery, to determine whether you are eligible for benefits or to determine whether a particular service is covered under your plan. We may also disclose your protected health information to other health care providers, health plans, or health care clearinghouses for their payment activities. For example, we may disclose protected health information to anesthesia care providers so that they may obtain payment for their services.

3. Health Care Operations: We will use and disclose your protected health information for our health care operations. For example, we may use your protected health information to evaluate the performance of the Practice’s personnel and to perform licensing, training, and accreditation activities. In certain situations, we may also disclose your protected health information to another health care provider, health plan, or health care clearinghouse who has or had a relationship with you, for the purpose of that entity’s health care operations, as long as the protected health information is related to your relationship with that entity. For example, the Practice may disclose your protected health information to allow another entity to conduct activities to determine whether it has provided quality services, to review the performance and qualifications of health care providers, to conduct training programs, and to perform accreditation, certification, licensing or credentialing activities.

4. Law Enforcement Purposes: We may disclose your protected health information to law enforcement officials under certain circumstances when we are required or permitted by law to disclose such information. For example, we may disclose your protected health information if we are required by law to report a certain type of wound or injury, such as a gunshot wound. We may also disclose your protected health information pursuant to an order, warrant, subpoena or summons issued by a judicial officer. Under certain circumstances, we may disclose your protected health information pursuant to administrative requests related to law enforcement purposes. We may disclose limited protected health information to law enforcement officials upon their request to assist them in identifying or locating a suspect, fugitive, material witness or missing person. Additionally, under certain circumstances we may disclose your protected health information to law enforcement officials if you are suspected to be the victim of a crime or in order to report evidence of criminal conduct that occurred on our premises.

5. Public Health Activities: The Practice may disclose your protected health information to certain public health authorities and others according to specific rules that apply to public health activities. For example, the Practice may disclose your protected health information to public health authorities or other government authorities authorized by law to receive such information for purposes of preventing or controlling disease, injury, disability, or child abuse or neglect or for the conduct of public health surveillance, investigations and interventions. We may also disclose your protected health information to certain individuals subject to the jurisdiction of the Food and Drug Administration regarding FDA-regulated products or activities, to certain individuals who may be at risk of contracting or spreading a disease or condition, and under certain circumstances to your employer if we have provided health care to you at your employer’s request.

6. Health Oversight Activities: The Practice may disclose your protected health information to a health oversight agency for oversight activities authorized by law, including audits; civil, administrative, or criminal investigations, proceedings and actions; inspections; licensure or disciplinary actions; and other activities necessary for appropriate oversight of the health care system and oversight of certain programs and entities as authorized by law.

7. Judicial and Administrative Proceedings: We may disclose your protected health information in the course of any judicial or administrative proceeding in response to an order of a court or administrative tribunal as expressly authorized by such order. In certain circumstances, we may disclose your protected health information in response to a subpoena, discovery request or other lawful process to the extent authorized by State law if we receive satisfactory assurances from the party requesting your information that you have been notified of the request or that they have made reasonable efforts to obtain a qualified protective order. A qualified protective order is an order of a court or tribunal that prohibits the use or disclosure of your protected health information for any purpose other than the proceeding for which it was requested and which requires that your protected health information will be returned to the Practice at the end of the proceeding.

8. Specialized Government Functions: In certain circumstances, Federal regulations authorize the Practice to use and/or disclose your protected health information for specialized government functions. If you are a member of the armed forces, the Practice may use and disclose your protected health information as directed by appropriate military authorities. We may disclose your protected health information to authorized Federal officials for certain national security and intelligence activities and to protect the President of the United States and other dignitaries. The Practice may also disclose your protected health information to law enforcement personnel or to a correctional institution if such information is required for the health and safety of inmates, law enforcement personnel, individuals at the correctional institution, or individuals responsible for transporting inmates or if such information is required to maintain safety, law and order at a correctional institution.

9. Suspected Abuse, Neglect or Domestic Violence: The Practice will disclose medical information that reveals that you may be a victim of abuse, neglect or domestic violence to a government authority if the Practice is required by law to make such disclosure. For example, State law requires health care professionals to report cases of suspected child abuse or maltreatment. If the Practice is authorized, but not required, by law to disclose evidence of suspected abuse, neglect or domestic violence, it will do so if it believes that the disclosure is necessary to prevent serious harm, or if you are incapacitated and government officials need such information for an immediate law enforcement activity.

10. To Avert a Serious Threat to Health or Safety: The Practice may, consistent with applicable law and standards of ethical conduct, use or disclose protected health information if we believe, in good faith, that such use or disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public and the disclosure is made to an individual who is reasonably able to prevent or lessen the threat.

11. Research: We may use and disclose your protected health information for research as long as such research has been approved by an institutional review board or privacy board that has reviewed the research proposal and established protocols to preserve the privacy of your protected health information. For example, a research project may involve comparing the health of patients who received one treatment to those who received another treatment for the same condition. Before we use or disclose protected health information for research purposes, the research project will go through a special review and approval process. Even without special approval, however, we may permit researchers to review your protected health information if it is necessary to help them prepare for a research project, as long as they do not remove or take a copy of any protected health information.

12. Medical Examiners, Funeral Directors, and Organ Donation: The Practice may disclose your protected health information to a medical examiner for identification purposes, to determine the cause of death or for other purposes authorized by law. We may also disclose your protected health information to a funeral director, as authorized by law, to permit the funeral director to carry out his or her duties. Additionally, the Practice may use and disclose your protected health information for the purpose of arranging for cadaveric organ, eye, or tissue donation and transplantation.

13. Workers’ Compensation: The facility may disclose your protected health information, as authorized by and in compliance with workers’ compensation laws.

14. Appointment Reminders: The Practice may, from time to time, use or disclose your protected health information to contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that we believe may be of interest to you. The Practice may remind you of appointments by mailing a postcard to you at the address provided by you or by telephoning your home and leaving a message on your answering machine or with the individual answering the phone. The Practice will not disclose any information with these appointment reminders except your name, your address and the time, date and location of your appointment.

15. De-identified Information: The Practice may de-identify your protected health information according to specific Federal rules so that the information does not identify you and cannot be used to identify you. The Practice may use and disclose your de-identified information. The Practice may also partly de-identify your protected health information by removing your name, address, telephone number and many other identifying factors to create a “limited data set,” which may be used and disclosed for research purposes. Your protected health information will only be disclosed in the form of a “limited data set” to recipients who sign an agreement to use your protected health information for specific purposes according to law and who agree not to identify you.

16. Business Associates: The Practice may disclose your protected health information to a business associate of the Practice if we obtain satisfactory written assurance, in accordance with applicable law, that the business associate will appropriately safeguard your protected health information. A “business associate” is an entity that provides certain services to the Practice or assists the Practice in undertaking some functions, such as a billing company that assists the Practice in submitting claims for payment to insurance companies.

17. Personal Representatives: The Practice may disclose your protected health information to or according to the direction of a person who, under applicable law, has the authority to represent you in making decisions related to your health. For example, we may disclose your protected health information to an agent who you authorize through a health care proxy form to make healthcare decisions for you in the event that you should become unable to make your own health care decisions.

18. Family and Friends: Under certain circumstances, the Practice may disclose to your family member, other relative, a close personal friend, or any other person identified by you, your protected health information directly relevant to such person’s involvement with your care or the payment for your care. The Practice may also use or disclose your protected health information to the previously named individuals as well as to a public or private entity authorized by law or by its charter to assist in disaster relief efforts to notify or assist in the notification (including identifying or locating) of a family member, a personal representative, or another person responsible for your care, of your location, general condition or death. However, the following conditions will apply:

a. If you are present at or available prior to the use or disclosure of your protected health information, the Practice may use or disclose your protected health information if you agree, or if the Practice can reasonably infer from the circumstances, based on the exercise of its professional judgment, that you do not object to the use or disclosure.

b. If you are not present or are unable to agree or object to the use or disclosure because of incapacity or an emergency, the Practice will, in the exercise of professional judgment, determine whether the use or disclosure is in your best interests and, if so, disclose only the protected health information that is directly relevant to the person’s involvement with your care.

19. Required by Law: In addition to those uses and disclosures listed above, we may use and disclose your protected health information if and to the extent we are required by law.

YOUR RIGHTS

You have the following rights regarding your protected health information:

1. Right to Revoke an Authorization: You may revoke an Authorization in writing, at any time. To request a revocation, you must submit a written request to the Practice’s Privacy Contact, whose contact information is listed below in part D of this Privacy Notice.

2. Right to Request Restrictions on Uses and/or Disclosures: You may request restrictions on the use and/or disclosure of your protected health information, or of certain parts of your protected health information, for treatment, payment or health care operations. You may also request that we not disclose your protected health information to family members or friends who may be involved in your care or for notification purposes as described in section (18) of part B of this Privacy Notice, titled “Friends and Family.” To request restrictions, you must submit a written request to the Practice’s Privacy Contact. In your written request, you must identify the specific restriction requested and identify who you want the restrictions to apply to. The Practice is not obligated to agree to any of your requested restrictions. If we deny your request to a restriction, we will notify you. If the Practice agrees to your requested restriction, we may not use or disclose your protected health information in violation of that restriction unless it is needed to provide you with emergency treatment. Under certain circumstances, we may terminate our agreement to a restriction.

3. Right to Request Confidential Communications: You may request to receive confidential communications of protected health information by alternative means or at alternative locations. You must make your request to the Practice’s Privacy Contact. The Practice will accommodate all reasonable requests. We may condition this accommodation on your providing us with information as to how payment will be handled or by specifying an alternative address or other method of contact. We will not require you to provide an explanation for your request.

4. Right to Inspect and Copy Information: According to Federal regulations, you may generally inspect and obtain a copy of your protected health information that we maintain in a designated record set. A “designated record set” is a group of records that includes medical and billing records or other records that your surgeon and the Practice use for making decisions about you. Under Federal privacy regulations, however, you have no right to inspect or copy certain records, including psychotherapy notes, information compiled in reasonable anticipation of legal proceedings and certain clinical laboratory information. Please note that New York State’s Mental Hygiene Law and Public Health Law may provide you with independent rights to inspect and copy such information. If Federal law does not allow you to inspect or copy certain information, such as psychotherapy notes, but State law allows you to inspect and copy such information, the Practice will respond to your request to access such information in accordance with New York State law. We may deny your request to inspect or copy your protected health information. Depending on the circumstances, you may or may not have a right to appeal our decision to deny your request. To inspect or copy your protected health information, you must submit a written request to the Practice’s Privacy Contact. If you request a copy of your information, we may charge you a fee for the costs of copying and mailing your information and for other costs only as allowed by law.

5. Right to Amend your Information: You may request that we amend your protected health information that we maintain in a designated record set. To request an amendment, you must submit a written request, along with a reason that supports your request to our Privacy Contact. In certain cases, we may deny your request for an amendment. If we deny your request for an amendment, you have the right to file a statement of disagreement with us. If you file such a statement, we may prepare a rebuttal to your statement and will provide you with a copy of any such rebuttal.

6. Right to Receive an Accounting: You may request an accounting of certain disclosures of your protected health information made by the Practice after October 10, 2019. We are not required to account for some disclosures, including those made for treatment, payment or health care operations in accordance with sections (1), (2), and (3) of part B of this Notice. Additionally, we are not required to provide you with an accounting of disclosures that you authorize or with an accounting of some disclosures that we are permitted to make without your authorization. Your request for an accounting of disclosures must be submitted in writing to our Privacy Contact and must specify a time period to be covered by the accounting. Your right to receive this information is subject to additional exceptions, restrictions and limitations.

7. Right to Receive a Copy of Notice: Upon your request, we will provide you with a paper copy of this Privacy Notice.

8. Right to Complain: You have the right to complain to the Practice or to the Secretary of the Department of Health and Human Services if you believe your privacy rights have been violated. You may complain to the Practice by contacting the Practice’s Privacy Contact, using the contact information below. You will not be retaliated against in any way for filing a complaint.

PRIVACY CONTACT

The Practice’s contact person for all issues regarding patient privacy and your rights under the Federal privacy standards is the Privacy Contact. Questions regarding matters covered by this Notice shall be directed to the Privacy Contact. You may contact the Privacy Contact at:

Renata Khelemsky, MD, PLLC
58 Prospect Street, Brooklyn, NY 11201