Privacy Policy

Effective Date: March 11, 2026 | Last Updated: March 11, 2026
Gerow Scalp Micro | LTL Expansion LLC | gerow-scalpmicro.com

At Gerow Scalp Micro (operated by LTL Expansion LLC), your privacy is important to us. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights as a user. By using our website or services, you agree to the practices described below.

---

1. What Information We Collect

We collect the following categories of personal information:

1.1 Information You Provide Directly

• Contact Information: Full name, email address, phone number (including mobile/cell number), and mailing address when you submit our contact form or book an appointment.
• SMS Opt-In Consent Data: When you check the SMS consent checkbox on our contact form, we record your consent, the timestamp, IP address, and the consent language agreed to. This data is maintained for legal compliance.
• Appointment & Service Details: Service preferences, scalp condition information, preferred appointment dates/times, and any photos or notes you choose to share during consultation.
• Payment Information: Processed securely by a PCI-compliant third-party payment processor. We do not store complete credit card numbers.
• Communications: Messages, questions, and feedback you send via forms, email, or SMS.

1.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage Data: Pages visited, time on page, referring URLs, links clicked, and navigation behavior on our site.
• Location Data: Approximate geographic location (city/country level) inferred from your IP address. We do not collect precise GPS location.
• Log Files: Server access logs including IP address, access timestamps, HTTP request types, and response codes.

1.3 Information from Third Parties

• Information you share when contacting us via social media platforms (Instagram, Facebook).
• Referral information if an existing client refers you to us.
• Public reviews posted on Google, Yelp, or similar platforms.

---

2. How We Use Your Information

We use your personal information for the following purposes:

• Providing and Managing Services: Scheduling appointments, sending confirmations, conducting consultations, and delivering scalp micropigmentation treatments.
• SMS Communications: Sending appointment reminders, follow-up messages, and promotional offers via SMS — but only after you have given us your explicit consent by opting in through our contact form. Consent is not required as a condition of service.
• Responding to Inquiries: Replying to messages sent through our contact form, email, phone, or SMS.
• Marketing and Promotions: Sending email and SMS marketing messages about new services, special offers, and updates — only to individuals who have opted in to receive such communications.
• Improving Our Website: Analyzing traffic patterns and usage data to improve the user experience on our website.
• Legal Compliance: Maintaining opt-in records for TCPA compliance, responding to lawful legal requests, and detecting fraud.
• Business Administration: Internal record-keeping, billing, staff training, and auditing.

We do not sell your personal information to any third party for their own marketing or commercial use, under any circumstances.

---

3. SMS / Text Messaging Program — Opt-In Details

3.1 How You Opt In to SMS

You opt in to receive SMS messages from Gerow Scalp Micro by visiting our contact form at gerow-scalpmicro.com/contact and checking the mandatory SMS consent checkbox, which states:

“I consent to receive SMS notifications, alerts & occasional marketing communication from Gerow Scalp Micro. Message frequency varies. Message & data rates may apply. Text HELP to (917) 924-6863 or (917) 722-8049 for assistance. You can reply STOP to unsubscribe at any time.”

This checkbox is required to submit the form and cannot be pre-checked on your behalf. Your enrollment constitutes informed, written consent under the Telephone Consumer Protection Act (TCPA).

3.2 Types of SMS Messages We Send

• Appointment Confirmations — Sent when you book or modify an appointment
• Appointment Reminders — Sent 24–48 hours before your scheduled visit
• Post-Treatment Follow-Up — After-care instructions and satisfaction check-ins
• Rescheduling Notices — If we need to change your appointment
• Promotional Offers — Seasonal discounts and new service announcements (max 4/month)
• Service Announcements — Holiday hours, location updates, and operational news

3.3 Message Frequency

Message frequency varies. Transactional messages are sent as needed based on your appointments. Promotional messages are sent no more than 4 times per calendar month.

3.4 Message and Data Rates

Standard message and data rates may apply. These are charged by your mobile carrier per your plan — not by Gerow Scalp Micro. We do not impose any additional fee for SMS communications.

3.5 How to Get Help — HELP Keyword

Text HELP to (917) 924-6863 or (917) 722-8049 at any time for support. You will receive a response with our business name, program description, and opt-out instructions. You may also contact us at info@gerow-scalpmicro.com or (917) 924-6863.

3.6 How to Opt Out (Unsubscribe) — STOP Keyword

You may opt out of SMS messages at any time, for any reason, at no cost:

• Reply STOP to any message from us (also accepted: STOP ALL, UNSUBSCRIBE, CANCEL, END, QUIT)
• Email info@gerow-scalpmicro.com with subject line “SMS Opt-Out” and your phone number
• Call us at (917) 924-6863

We will send one final confirmation of your opt-out and no further messages. Your opt-out is permanent unless you re-enroll by providing fresh consent.

3.7 Opt-In Record Retention

We retain records of your SMS opt-in (date/time, IP address, phone number, and consent language) for a minimum of 5 years to demonstrate TCPA compliance.

3.8 No Sharing of SMS Opt-In Data — CRITICAL

We do not share, sell, rent, transfer, or otherwise disclose your SMS opt-in data — including your phone number, consent status, messaging history, or any associated personal information — with any third party, affiliate, partner, or data broker for any marketing, advertising, or commercial purpose whatsoever. This prohibition is absolute and unconditional.

The only parties who may access your phone number in connection with our SMS program are our telecommunications service providers (including GoHighLevel/GHL and their carrier partners), who act strictly as data processors under our instruction and are contractually prohibited from using your information for any other purpose.

Your SMS consent to Gerow Scalp Micro does not constitute consent to receive messages from any other business, brand, or SMS program. We do not engage in list sharing, list rental, co-registration, or any other practice that would result in your number being contacted by third parties based on your opt-in to our program.

---

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and analyze website traffic. Below is a detailed description of what we use and why.

4.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to remember your preferences and behavior. We use both “session cookies” (deleted when you close your browser) and “persistent cookies” (remain for a set period).

4.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the website to function (e.g., session tokens, form security). Cannot be disabled.
• Analytics & Performance Cookies: Used to understand how visitors interact with our site (e.g., Google Analytics _ga, _gid). Help us improve the website experience.
• Functional Cookies: Remember your preferences such as language settings and form data.
• Marketing & Advertising Cookies: Used by Meta Pixel (Facebook/Instagram) and Google Ads to measure campaign performance and show relevant ads. Can be opted out.

4.3 Third-Party Tracking Technologies

• Google Analytics: Tracks site traffic and user behavior. Opt out via Google Analytics Opt-out Add-on.
• Meta Pixel (Facebook/Instagram): Measures ad conversions and enables retargeting. Opt out at facebook.com/settings.
• Google Ads Conversion Tracking: Measures advertising effectiveness. Manage at adssettings.google.com.

4.4 How to Control Cookies

• Browser Settings: Most browsers allow you to block or delete cookies via their settings menu.
• Opt-Out Tools: Use the Network Advertising Initiative opt-out tool or the Digital Advertising Alliance tool to opt out of interest-based advertising.
• Do Not Track: We honor Do Not Track (DNT) browser signals where technically feasible.

Note: Cookies are never used to collect, store, or transmit your SMS opt-in status or messaging history. Those records are stored separately in our secure CRM system.

---

5. Data Security Practices

We implement comprehensive administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• TLS/SSL Encryption: All data transmitted between your browser and our website is encrypted via HTTPS using TLS 1.2 or higher.
• Data Encryption at Rest: Personal information stored in our CRM and databases is stored on encrypted servers.
• Access Controls: Access to personal data is restricted to authorized personnel based on job function, using role-based access controls and unique user credentials.
• Multi-Factor Authentication (MFA): All staff accounts with access to client data require MFA.
• Secure Form Submission: Our contact forms include server-side validation and CSRF protection.

5.2 Administrative Safeguards

• Staff Training: All team members with data access receive training on privacy and security best practices.
• Need-to-Know Principle: Personal information is shared internally only with staff who need it to perform specific job functions.
• Data Processing Agreements: All third-party vendors who process personal data on our behalf are bound by Data Processing Agreements (DPAs) that prohibit unauthorized use.
• Incident Response Plan: We maintain a breach response plan including notification procedures consistent with applicable law (state breach notification statutes).

5.3 Physical Safeguards

• Physical access to areas housing client data is restricted to authorized staff.
• Paper records containing personal information are stored in locked storage and securely shredded when no longer needed.

5.4 Service Provider Security

• GoHighLevel (GHL): SOC 2 Type II compliant CRM and SMS platform.
• Payment Processor: PCI DSS-compliant payment processing.
• Website Hosting: Regular security updates, server-side malware scanning, and firewall protection.

5.5 Limitations

While we take reasonable steps to protect your information, no internet transmission or electronic storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

---

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law:

• Client contact and appointment records: 7 years after last appointment
• SMS opt-in consent records: Minimum 5 years (TCPA compliance)
• SMS opt-out records: Permanently (do-not-contact compliance)
• Website analytics data: 26 months
• Payment records: 7 years (tax compliance)
• Contact form inquiries (non-clients): 3 years

---

7. Third-Party Services

We use the following service providers who may process your data on our behalf. They are permitted to use your data only for the specific purposes we authorize:

• GoHighLevel (GHL): CRM, scheduling, email and SMS communications
• Google Analytics: Website traffic analysis
• Meta (Facebook/Instagram): Social media marketing and ad measurement
• WPForms: Website form collection
• WordPress/Elementor: Website platform

We do not share your personal information with any third parties for their independent marketing or commercial use.

---

8. Children’s Privacy

Our services and SMS messaging program are intended for individuals 18 years of age or older only. We do not knowingly collect personal information from minors. If we learn we have collected information from a person under 18, we will promptly delete it. Contact us at info@gerow-scalpmicro.com if you believe we have inadvertently collected a minor’s information.

---

9. Your Rights & Choices

Regardless of your location, you have the following rights regarding your personal information:

9.1 Right to Access

You may request a copy of the personal information we hold about you, including what we have, how we use it, and with whom we have shared it.

9.2 Right to Correction

You may request that we correct or update any inaccurate or incomplete personal information we hold about you.

9.3 Right to Deletion

You may request that we delete your personal information, subject to legal retention requirements. We will honor deletion requests within 30 days.

9.4 Right to Opt Out of SMS (Unsubscribe)

You may unsubscribe from our SMS program at any time by replying STOP to any message, emailing info@gerow-scalpmicro.com with “SMS Opt-Out” in the subject line, or calling (917) 924-6863. Your number will be immediately added to our permanent do-not-contact list for SMS.

9.5 Right to Opt Out of Marketing

You may opt out of marketing emails or SMS at any time while continuing to receive transactional messages about your appointments.

9.6 Right to Data Portability

You may request your personal data in a structured, machine-readable format for transfer to another service provider.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

9.8 How to Exercise Your Rights

Contact us at info@gerow-scalpmicro.com or (917) 924-6863. We will respond within 30 days. We will not charge a fee and will not discriminate against you for exercising your privacy rights.

---

10. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know what personal information we collect, use, disclose, and sell
• Right to Delete your personal information
• Right to Correct inaccurate personal information
• Right to Opt Out of Sale/Sharing — We do not sell or share personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Information to service delivery purposes
• Right to Non-Discrimination for exercising CCPA rights

To submit a CCPA request, email info@gerow-scalpmicro.com with “CCPA Request” in the subject line or call (917) 924-6863. We will respond within 45 days.

---

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make changes, we will update the “Last Updated” date above. Material changes will be communicated via a notice on our website. If we make material changes to our SMS program, we will notify you by SMS and obtain fresh consent where required by law.

---

12. Contact Us