1. Overview
This Privacy Policy describes the categories of personal information TRC may collect through its website, digital planning experience, Aesthetic Studio, forms, and non-clinical patient coordination services.
2. Categories of information
Depending on your interaction, information may include: name, email, phone, general location, age or age range if requested, account identifiers, login and verification information, procedure interests, goals and concerns, planning responses, appointments and scheduling preferences, estimates, payment status and transaction references, messages, support records, images you choose to submit, recovery-related information, device/browser information, cookies, logs, and approximate location inferred from network information.
3. How we use information
Subject to applicable law and choices, TRC may use information to provide accounts and requested services; save planning selections; respond to inquiries; coordinate authorized administrative steps; prepare estimates; communicate about requested appointments or services; verify identity; process transactions through service providers; secure systems; correct errors; meet legal requirements; and improve usability using appropriately configured analytics. Marketing communications and sensitive health information uses must follow applicable consent, privacy, and advertising laws.
4. Sharing of information
We may share information with service providers performing hosting, security, communications, customer support, identity verification, payment processing, or authorized administrative services under appropriate arrangements. At your direction, and subject to necessary permissions and laws, information may be sent to a physician, practice, facility, or other party you select. We may disclose information when legally required or to protect rights and safety as permitted by law.
5. Sensitive health-related information
Your procedure interests, photographs, and planning responses may reveal sensitive health-related information, whether or not regulated as HIPAA-protected health information. TRC should limit collection and sharing to legitimate purposes, apply appropriate safeguards, and obtain any authorizations required by law. We do not regard a general website privacy policy as a substitute for a legally required HIPAA notice or authorization.
6. Cookies, analytics and advertising
TRC uses cookies and similar technologies for essential functions and security. With your permission where required, TRC also uses the Google Ads tag (provided by Google) to measure whether our ads lead to guide or consultation requests. TRC configures the tag to report a general site address and title instead of the page you viewed, and sends ad-click identifiers and an anonymous request number. Google's own scripts may still collect technical details such as your browser's page address, as described in Google's policies; TRC never sends names, contact details, procedure or body-area selections, health information or guide contents to Google. Remarketing, ad personalization, Google Signals and enhanced conversions are off. In the EEA, UK and Switzerland, or when your region cannot be determined, the tag does not load unless you choose Allow. Elsewhere it loads unless you choose Don't allow. You can change your choice anytime with Cookie settings in the site footer; TRC keeps a record of your choice, its date and the notice version in your browser.
TRC uses Google Ads for advertising measurement. With the same advertising choices, TRC retains Microsoft Advertising click identifiers internally for up to 30 days to understand which ads lead to accepted inquiries. When an inquiry is accepted, Microsoft Advertising receives a generic accepted-inquiry signal together with the Microsoft click identifier for measurement and ad optimization — never your name, contact details, form contents, selections or health information. Ad clicks and impressions count either way. In consent-required or unknown regions, advertising measurement waits for Allow; elsewhere it is permitted unless you refuse. Change or withdraw your choice anytime using Cookie settings in the footer.
Private Auryn measurement records generic conversation openings, observed turns, successful or failed response delivery, broad response-time buckets, versioned model and prompt-template identifiers, rendered invitation cards and explicit form actions. Structural sequence checks do not evaluate medical accuracy or clinical quality. Analytics do not contain conversation text, reviewed summaries, concerns, contact details, or raw conversation/message/card identifiers; short-lived consented session correlation and the same withdrawal and retention controls apply. Synthetic testing is excluded from business metrics and outreach.
TRC records private generic website and Studio action counters, including confirmed inquiry persistence, first verified registration and first saved plan. Counters contain no contact details, selected body areas, face features, chat text, concerns or plan content. With permitted advertising measurement, an HttpOnly random session capability links generic actions and outcomes to sanitized campaign identifiers for up to 24 hours; anonymous sessions are not people and no fingerprint is used. Without permission, only unlinked generic action counts are recorded. Use Cookie settings to refuse or withdraw: session links and campaign identifiers are removed, including pending outcome attribution, while prior acceptance evidence is preserved. Detailed event records are retained for 30 days and session records for at most 24 hours. Production, preview and signed synthetic QA remain separate. Meta Pixel and Conversions API delivery remain inactive pending account association and health/wellness eligibility verification; this funnel sends nothing to Meta.
TRC records your advertising choice, time, region and notice version on this browser. Withdrawal preserves the previous acceptance evidence and stops future permitted reporting; blocked events are not replayed. Previously accepted Google-only choices do not authorize Microsoft reporting in consent-required regions. No customer matching or booked-consultation reporting is enabled.
7. Retention
We retain information for periods reasonably necessary for the purposes described, subject to legal, security and legitimate business requirements.
8. Security
No online transmission or storage can be guaranteed perfectly secure. Report a suspected privacy or security issue promptly to care@tissuerestorationcenter.com. TRC will comply with any legally applicable incident-notification requirements.
9. Your choices and requests
You may request information about personal data, request correction or deletion when available under applicable law, update account information, or withdraw particular optional consents where applicable. Contact care@tissuerestorationcenter.com. Identity verification, recordkeeping obligations, and legal exceptions may apply. ADD REQUIRED STATE-SPECIFIC RIGHTS AND APPEAL PATHWAYS IF APPLICABLE.
10. Minors
The public-facing TRC planning services are intended for adults aged 18 or older. Do not knowingly submit a child's personal or health information through adult planning workflows.
11. Other parties and external links
Independent medical providers, lenders, and external websites may have their own privacy policies and legal duties. Their collection and use of data is governed by their practices and applicable law, not automatically by this notice.
12. Changes and contact
We may update this policy prospectively and post the revised effective date. Material changes may require additional notice or consent. Questions and applicable privacy requests: care@tissuerestorationcenter.com.