Legal

Privacy Policy

Effective date: October 19, 2026

This is a demo website built to showcase web design work for a fictional medical spa, Lumen Aesthetics. This policy describes exactly what this site does, not what a typical med spa's site might do.

Information we collect

The treatment quiz asks what brings you in, the areas or concerns you choose, whether you have had a treatment before, your name, email and phone, how you would like to talk and a preferred time. The booking form asks for a name, email, phone, the kind of treatment you want to discuss, a preferred day and time and an optional note. Both are labeled as demos and submit nowhere. Nothing you enter is sent to us or to anyone else, stored on a server or seen by anyone.

The membership and financing calculators run entirely in your browser. The site loads no analytics and sets no tracking cookies, so it collects no other personal information about visitors.

Health-related information

What you choose in the quiz, and what you write about treatments in the booking form, can say something about your health. Our Consumer Health Data Privacy Policy explains how that kind of information is handled and the rights you have over it.

Information kept in your own browser

Your quiz answers are kept in your browser's session storage, so a reload does not lose them. They stay on your device, are never sent anywhere, and the browser deletes them when you close the tab. The "Start over" button at the end of the quiz deletes them at once.

Third parties

The quiz and the booking form include a Cloudflare Turnstile bot-check widget. When one of them is about to come into view, or the quiz reaches its contact step, your browser requests the widget from challenges.cloudflare.com, so Cloudflare receives your IP address and basic browser details as part of that request. Nothing you type is sent to Cloudflare.

The site is hosted on Cloudflare Pages, which keeps standard server logs of requests. Fonts, photos and diagrams are served from this site's own domain. No other third party receives information about your visit, and no information is sold or shared for advertising.

Cookies

This site sets no cookies of its own. The Turnstile widget, which Cloudflare serves, may store data in your browser as part of its bot check. See the Cookie Policy and Your Privacy Choices.

Text messages

Both forms include an optional, unchecked box about calls and texts. The demo sends nothing, so no messages are ever sent. The Text Message Terms explain what a real practice would say.

Requesting a change to your information

Since this site does not collect or store personal information on any server, there is nothing to access, correct or delete. Questions about this policy: call (615) 555-0187 (demo number).

Do Not Track and Global Privacy Control

This site does not track visitors across other sites or over time, so it has no behavior to change in response to a browser's Do Not Track signal. It reads the Global Privacy Control signal and reports what it found on the Your Privacy Choices page. The signal changes nothing, because the site does not sell or share personal information.

Medical privacy

This website is not a medical record and is not part of any patient portal. A real practice explains separately how it protects the information in your treatment records.

Changes to this policy

If this policy changes, the effective date above will be updated. Since this is a demo project, no changes are expected.