Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains how Be Still Aesthetics and Wellness PLLC collects, uses, and discloses your information when you use our website, and outlines your privacy rights and how the law protects you.

We use your personal data to provide and improve our service. We collect, use, and disclose your information as described in this policy, and where required by law, only when we have a valid legal basis to do so, including your consent where consent is required.

Interpretation and Definitions

Capitalized terms in this policy have the meanings defined below, whether used in singular or plural form.

Account means a unique account created for you to access our service or parts of our service, including patient accounts created through our online booking platform, Prospyr.

Affiliate means an entity that controls, is controlled by, or is under common control with a party, where control means ownership of 50% or more of the shares, equity interest, or voting power.

Company (“the Company,” “we,” “us,” or “our”) refers to Be Still Aesthetics and Wellness PLLC, 8609 W 26th St, Sioux Falls, SD 57106, USA.

Cookies are small files placed on your device by a website, containing details of your browsing history and other information.

Country/State refers to South Dakota, United States.

Device means any device that can access the service, such as a computer, phone, or tablet.

Personal Data (or “Personal Information”) is any information relating to an identified or identifiable individual. We use these terms interchangeably unless a specific law requires otherwise.

Service refers to the website.

Service Provider means any person or company that processes data on our behalf to help deliver the service, including our website platform (Squarespace), our online booking platform (Prospyr), email marketing tools, and analytics tools.

Usage Data refers to data collected automatically through use of the service, such as the duration of a page visit.

User means any individual who accesses or uses the service.

Website refers to Be Still Aesthetics & Wellness, accessible from bestillsd.com.

You means the individual accessing or using the service, or the organization on whose behalf they are doing so.

Collecting and Using Your Personal Information

Types of Data Collected

Personal Data. While using our service, we may ask you to provide personally identifiable information that can be used to contact or identify you, including your email address, first and last name, and phone number.

Usage Data. Usage data is collected automatically and may include your device’s IP address, browser type and version, the pages you visit, the time and date of your visit, time spent on those pages, unique device identifiers, and other diagnostic data. When you access the service through a mobile device, we may also collect your device type, unique device ID, mobile operating system, and mobile browser type.

Health Information

Our website is intended for general information, contact requests, and appointment booking. Please do not submit detailed medical or health information through our website contact form. Online booking is provided through Prospyr, a third-party scheduling platform, and any health information you share with us as a patient, whether through booking, intake forms, or during your care, is handled in accordance with our Notice of Privacy Practices and applicable health privacy laws, which may provide protections beyond those described in this policy.

Tracking Technologies and Cookies

We use tracking technologies, including cookies, to operate and improve our service.

Cookies or browser cookies. Small files placed on your device. You can set your browser to refuse cookies or alert you when they’re being used, though some parts of the service may not work properly without them.

Web beacons. Small electronic files, sometimes called clear gifs or pixel tags, that let us count visitors to certain pages and gather related website statistics.

Cookies may be persistent, remaining on your device after you close your browser, or session-based, deleted once you close your browser.

Where required by law, we use non-essential cookies only with your consent, and you can withdraw or change that consent at any time through our cookie preferences tool, if available, or your browser settings. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.

We use the following categories of cookies:

Necessary / Essential Cookies
Type: Session. Administered by: us. These cookies are required to provide the services you’ve requested and to help keep the website secure.

Cookies Policy / Notice Acceptance Cookies
Type: Persistent. Administered by: us. These cookies record whether you’ve accepted our use of cookies so we can honor your choices on future visits.

Functionality Cookies
Type: Persistent. Administered by: us. These cookies remember choices you make, such as your preferences, to give you a more personalized experience.

Use of Your Personal Data

We may use your personal data to:

Provide and maintain our service, including monitoring how it’s used.

Manage your account and give you access to features available to registered users, such as booking follow-up appointments.

Fulfill a contract, including the products or services you’ve purchased through us.

Contact you by email, phone, or other electronic means about appointments, updates, or service-related communications.

Send you news, offers, and information about services similar to those you’ve purchased or inquired about. Where the law requires prior consent, we’ll only send these with your consent. Otherwise, we may send them until you opt out. You can unsubscribe at any time using the link in our marketing emails or by contacting us directly.

Manage and respond to your requests.

Evaluate or carry out a merger, sale, or other business transfer involving some or all of our assets.

Analyze data, identify usage trends, and improve our service, marketing, and your overall experience.

We may share your personal data in the following situations:

With service providers, to help us operate the website, manage bookings, send emails, and analyze use of the service.

During business transfers, such as a merger, acquisition, or sale of company assets.

With affiliates, who will be required to honor this privacy policy.

With your consent, for any other purpose you agree to.

Retention of Your Personal Data

We retain your personal data only as long as necessary for the purposes described in this policy, including to provide our services, meet legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and why we collected it, and where possible, we delete or anonymize data once it’s no longer needed.

Contact form submissions: kept as long as needed to respond to your inquiry and for reasonable record-keeping, and you may request deletion at any time.

Email newsletter subscriptions: kept until you unsubscribe, after which we may retain your email address only to honor your opt-out.

Website analytics and cookies: retained according to the settings of our website platform, Squarespace, and our analytics tools.

Appointment booking: handled through Prospyr and retained according to Prospyr’s policies and applicable health privacy laws.

Medical records: retained separately as required by applicable law.

We may retain data longer when required by law, needed to establish or defend a legal claim, requested by you, or when it exists in backup systems scheduled for routine deletion. You can contact us at any time to ask how long we’ll retain a specific category of your data or to request its deletion.

When a retention period ends, we securely delete or anonymize your data. In some cases, we convert personal data into anonymous statistical data that can no longer be linked back to you, which we may retain for analytics purposes.

Transfer of Your Personal Data

Your information is processed at our operating offices and any other locations where our service providers operate, which may mean it’s transferred to and stored on computers outside your state or country, where data protection laws may differ from your own. Where required by law, we ensure appropriate safeguards are in place for any international transfer, and we take reasonable steps to make sure your data stays secure and is handled in accordance with this policy.

Delete Your Personal Data

You have the right to delete, or ask us to help delete, the personal data we’ve collected about you. If you have a patient account through Prospyr, you may be able to update certain information there, and you can always contact us to request access to, correction of, or deletion of your personal data. We may need to retain certain information, including medical records, when we have a legal obligation to do so.

Disclosure of Your Personal Data

Business transactions. If we’re involved in a merger, acquisition, or asset sale, your data may be transferred, and we’ll notify you before it becomes subject to a different privacy policy.

Law enforcement. We may disclose your data if required by law or in response to a valid request from a public authority, such as a court or government agency.

Other legal requirements. We may disclose your data in good faith when necessary to comply with the law, protect our rights or property, prevent or investigate wrongdoing in connection with the service, protect the safety of users or the public, or defend against legal liability.

Security of Your Personal Data

We care about the security of your data, but no method of transmission over the internet or electronic storage is completely secure. While we use commercially reasonable measures to protect your information, we can’t guarantee absolute security.

Children’s and Minors’ Privacy

Our service isn’t directed at anyone under 16, and we don’t knowingly collect personal information from children under that age. If you’re a parent or guardian and believe your child has shared personal information with us, please contact us so we can remove it. Where the law sets a higher age of consent than 16 for a particular user, we may require parental or guardian consent before collecting that user’s information.

Links to Other Websites

Our service may link to third-party websites we don’t operate, including our online booking platform, Prospyr, and our social media pages. We encourage you to review the privacy policy of any site you visit, since we have no control over and aren’t responsible for their content or practices.

Changes to This Privacy Policy

We may update this policy from time to time. When we do, we’ll post the revised policy here and update the “last updated” date above, and we’ll notify you by email or a prominent notice on our service before the change takes effect. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy, you can reach us by email at hello@bestillsd.com