Privacy Policy

Last updated: October 4, 2026

Rowan Pellis (“we”, “us”) is a dermatology clinic and skincare shop at 214 Halden Street, 3rd Floor, New York, NY 10012. This policy explains what personal information we collect through this website, how we use it, who we share it with, and the choices you have. We have written it to be read, not skimmed past.

What we collect

We collect only what we need to run the clinic and the shop.

When you book a visit: your name, email address, phone number, the treatment and specialist you choose, your preferred date and time, and the optional note you can add, for example allergies, goals or medications.
When you order from the shop: your name, delivery and billing address, email, phone number and the items you order.
Payments: card payments are handled by our payment provider, Stripe. Your card details go directly to Stripe. We never see or store your full card number.
When you create an account: your name, email and password (stored in encrypted form), and your order history.
When you write a review: your name, email address (never shown publicly), your rating and your review.
When you subscribe to our newsletter: your email address.
When you contact us: your email address and whatever you tell us in your message.
When you browse the site: basic technical information such as your browser, device type, approximate location and the pages you view.

Your health information

If you add health details to the optional booking note, we treat them as part of your patient information: only the clinical team and the staff who manage appointments can see them, and they are never used for marketing. You can leave the note empty and tell us in person instead. Your clinical records, such as consultation notes, photographs and treatment plans, are created and kept at the clinic and are covered by our separate Notice of Privacy Practices, which we give you at your first visit. We never publish before and after photographs without your written consent.

How we use your information

To confirm, change or cancel your appointment and to send reminders.
To process, deliver and support your orders, and to send receipts and shipping updates.
To run your account and show your order history.
To publish your review on the product page, with your name as you entered it.
To send our newsletter, only if you subscribed. You can unsubscribe at any time with the link in every email.
To keep the site secure, prevent spam and fraud, and understand which parts of the site are useful.
To meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not share it with advertisers.

We share information only with the companies that help us operate, and only what they need:

Payment processing: Stripe.
Email delivery: the service that sends our booking confirmations, order receipts and newsletter.
Delivery: the courier that delivers your order.
Website hosting and security: our hosting provider.

We may also disclose information when the law requires it, or to protect the safety of our patients, staff and customers. If the business is ever sold or reorganised, your information would transfer to the new owner under the same protections.

Cookies and similar technologies

We use a small number of cookies and browser storage items:

Essential: to keep items in your cart, keep you signed in, and secure checkout. The site cannot work without these.
Preferences: a note in your browser, kept for 30 days, so the short welcome screen does not play on every page.
Payments: Stripe may set cookies to detect fraud when you pay.

You can block or delete cookies in your browser settings. Some parts of the site, such as the cart and checkout, will not work without the essential ones.

How long we keep your information

Order and payment records: for seven years, as tax law requires.
Appointment details: for as long as you are our patient, then as the law requires for medical records.
Accounts: until you ask us to delete them.
Newsletter subscriptions: until you unsubscribe.
Reviews: until you ask us to remove them.

How we protect it

The site uses encryption (HTTPS) on every page, passwords are stored in encrypted form, and access to personal information is limited to the people who need it. No system is completely secure, but we take reasonable steps to protect what you share with us.

Your choices and rights

You can ask us at any time to:

tell you what personal information we hold about you;
correct information that is wrong;
delete your information, where we are not legally required to keep it;
stop sending you marketing email.

Email us at the address below and we will reply within 30 days. Residents of some states, including California, have additional rights under local law. We will honour those rights wherever they apply.

Children

This website is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, tell us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If the change is significant, we will also tell you by email or with a notice on the site.

Contact us

For any question about this policy or your information:

Rowan Pellis
214 Halden Street, 3rd Floor
New York, NY 10012
[email protected]
+1 (212) 555-0148