Privacy Policy

Introduction

Opus Plastic Surgery (“we,” “us,” or “our”), operated by Dr. Tyler Frew, MD, is committed to protecting the privacy and security of your personal and health information. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you visit our website, join our waitlist, or communicate with our practice.

Please read this policy carefully. By using this website or submitting your information to us, you agree to the practices described here.

Information We Collect

We collect the following categories of information depending on how you interact with our website and practice:

Contact and Identity Information

• Full name
• Email address
• Phone number
• Mailing address (if provided)

Health and Medical Information

• Information you voluntarily share about areas of interest, aesthetic goals, or medical history during consultations or via intake forms
• Photographs submitted for consultation purposes (see the Photo Consent section below)

Automatically Collected Information

• Browser type, operating system, and device identifiers
• IP address and general geographic location (city/region level)
• Pages visited, time on site, and referring URLs (via analytics tools described below)
• Cookie data (see our cookie section below)

Waitlist and Communication Data

• Name and email address submitted via our waitlist or contact forms
• Messages, questions, and preferences you communicate to us directly

How We Use Your Information

We use the information we collect for the following purposes:

• Scheduling and Consultations: To confirm appointments, send reminders, and coordinate your care
• Practice Opening: To notify waitlist members when our practice opens and consultations become available
• Medical Communication: To respond to questions about procedures, pricing, and candidacy
• Marketing (with consent): To send newsletters, promotions, and educational content about procedures — only when you have explicitly opted in. You may opt out at any time using the unsubscribe link in any email.
• Website Improvement: To analyze how visitors use our site and improve our content and experience
• Legal and Compliance: To comply with applicable laws, regulations, and professional licensing requirements

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Photo Consent and Usage Policy

Patient photographs are among the most sensitive information our practice handles. We take their collection, storage, and use seriously.

Consultation Photos

Photographs you submit for virtual consultation purposes are used solely to assess candidacy and discuss procedural goals with Dr. Frew. These photos are not shared publicly without your explicit written consent.

Before-and-After Photos

We may request permission to use your before-and-after photographs for educational, marketing, or promotional purposes — including on our website, social media, and in presentations. This requires your separate, explicit, written (or digital) consent prior to any public use.

You have the right to:

• Decline photo use at any time
• Withdraw previously granted consent (subject to reasonable operational timelines for removal from published materials)
• Request that your photos be deleted from our systems

EXIF and Metadata

We strip all embedded EXIF metadata (including GPS location, device identifiers, and timestamps) from images before they are stored or published. This is done to protect your privacy and prevent unintended disclosure of location or device data.

HIPAA Compliance

As a healthcare provider, Dr. Frew and Opus Plastic Surgery are subject to the Health Insurance Portability and Accountability Act (HIPAA) with respect to Protected Health Information (PHI) created or received in connection with patient care.

Information submitted through our website prior to an established patient relationship is governed by this Privacy Policy rather than a HIPAA Notice of Privacy Practices. Once a patient relationship is established, you will receive a separate HIPAA Notice of Privacy Practices that governs the use and disclosure of your PHI in connection with your medical care.

We implement administrative, technical, and physical safeguards consistent with HIPAA requirements to protect the security and confidentiality of patient information.

Third-Party Services

We use the following third-party services that may receive certain information about your interactions with our website:

Google Analytics

We use Google Analytics to understand aggregate website traffic patterns. Google Analytics collects anonymized data about page views, session duration, and user behavior. This data does not identify you personally. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Email Service Providers

To send confirmation emails and newsletters, we use reputable email delivery providers. Your email address may be stored on their servers subject to their privacy policies. We only use providers that maintain industry-standard security practices.

Hosting and Infrastructure

This website is hosted on Vercel. Vercel may process technical data such as IP addresses and server logs in connection with delivering the website to you. Please review Vercel’s Privacy Policy for more information.

Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience and gather analytics data. Cookies are small text files stored on your device. You can control cookie settings through your browser preferences; however, disabling cookies may affect the functionality of certain features.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this policy, comply with legal obligations, and resolve disputes. Waitlist and contact form data is retained until the practice opens and the initial outreach period concludes, after which it is securely deleted unless you have established an ongoing relationship with the practice.

Your Rights

Depending on your location and applicable law (including the California Consumer Privacy Act for California residents), you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information, subject to any legal obligations we may have to retain it
• Opt-out of marketing: Unsubscribe from marketing communications at any time

California residents have additional rights under the CCPA, including the right to know about categories of personal information collected and the right to non-discrimination for exercising privacy rights.

Children's Privacy

Our website is not directed toward individuals under the age of 18, and we do not knowingly collect personal information from minors. If you believe a minor has submitted information to us, please contact us so we can promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your rights, or need to report a privacy concern, please contact us: