Privacy Policy

Evidence MD Medicine & Aesthetics | Portland, Oregon

Effective date: June 30, 2026     Last updated: June 30, 2026

Evidence MD Medicine & Aesthetics LLC ("Evidence MD," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through our website at evidencemdaesthetics.com, how we use and share it, the choices you have, and the rights you hold under the Oregon Consumer Privacy Act and other applicable law.

By using our website or submitting information to us, you agree to the practices described in this Privacy Policy. Submitting information through this website does not create a physician and patient relationship.

1. Scope of This Policy and Relationship to HIPAA

Evidence MD is a physician-owned medical practice. Health information that we create or receive in the course of providing care to you as a patient is Protected Health Information (PHI) governed by the Health Insurance Portability and Accountability Act (HIPAA) and described in our separate Notice of Privacy Practices, not by this Privacy Policy.

Under Oregon law, the consumer-privacy exemption applies to the PHI itself, not to our business as a whole. This Privacy Policy therefore governs the personal information we process that is not PHI, including website-visitor data, marketing and contact-form submissions, lead inquiries from prospective (non-patient) consumers, analytics data, and email and text-message marketing data.

2. Information We Collect

A. Information you provide to us

We collect personal information you give us voluntarily, which may include:

• Name, email address, telephone number, and mailing address
• Date of birth
• Appointment, consultation, or treatment-interest details
• Information you submit through contact forms, scheduling tools, or text-message opt-in

If you provide health or treatment-related information through our website, that information may be considered sensitive data (see Section 4). Please do not submit detailed medical history or emergency information through the website.

B. Information collected automatically

When you visit our website, we may automatically collect IP address, browser type, device type, pages viewed, referring URLs, and the date and time of your visit, through cookies, analytics tools, and similar technologies (see Section 8).

C. Payment information

Payments are processed by secure third-party providers. We do not store full payment-card numbers on our website servers.

3. Categories of Personal Data and Sources

For transparency under Oregon law, the categories of personal data we process are: identifiers and contact data; demographic data such as date of birth; commercial and transaction data; internet and device activity; general location inferred from IP address; and, where you choose to provide it, sensitive data relating to your health interests. We collect this data directly from you, automatically from your device, and from service providers such as our scheduling and analytics platforms.

4. Sensitive Data and Your Consent

Oregon law treats personal data revealing your physical or mental health condition or diagnosis as sensitive data, and requires your consent before we process it. We collect health-related information through the website only when you choose to provide it, for example by describing a treatment interest in a contact form. By submitting that information, you consent to our processing it for the purpose of responding to your inquiry.

You may withdraw your consent at any time using the contact details in Section 18. We will stop the related processing within 15 days of your request, except where we are permitted or required by law to retain the information.

5. How We Use Your Information

We use personal information to:

• Schedule and confirm appointments and consultations
• Respond to your inquiries and provide the information you request
• Send appointment reminders and service-related communications
• Send promotional communications when you have opted in
• Operate, maintain, and improve our website and services
• Detect and prevent fraud and protect the security of our systems
• Comply with our legal obligations

6. Text Message (SMS) Program

If you provide your mobile number and opt in, you may receive text messages from Evidence MD related to appointment confirmations, appointment reminders, practice updates, and, if you separately opt in, promotional offers. Consent to receive marketing text messages is not a condition of receiving services or making a purchase.

Message frequency: Message frequency varies.

Cost: Message and data rates may apply.

How to stop or get help: Reply STOP to opt out at any time. Reply HELP for help.

Terms: Your use of the text-message program is also governed by our Terms and Conditions. The opt-in point on our website links to both these Terms and this Privacy Policy.

7. Email Communications

If you opt in, we may send promotional emails. You may unsubscribe at any time by using the unsubscribe link in any marketing email. We will continue to send service-related messages, such as appointment confirmations, as needed to provide the services you request.

8. Cookies, Analytics, Targeted Advertising, and Profiling

We use cookies and similar technologies to operate the website, analyze traffic and usage, and support advertising and remarketing. We may use third-party analytics and advertising tools, such as Google Analytics and the Meta Pixel.

Some of this activity may constitute targeted advertising or profiling under Oregon law. You have the right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. You can exercise these rights as described in Section 11, and you can also disable cookies through your browser settings, though some website features may not function properly if you do.

9. How We Share Information

We do not sell your personal information for money. We may share personal information with the following categories of third parties, described so you can understand what type of entity each is and how it may process your data:

• Service providers and processors: website hosting, scheduling and booking systems, payment processors, email and SMS messaging platforms, and analytics providers, which process data only to perform services for us.
• Advertising and analytics partners: platforms that help us measure and deliver marketing, which may receive website-activity data for analytics and targeted advertising.
• Professional advisors: attorneys, accountants, and similar advisors, as needed.
• Legal and safety recipients: government authorities or other parties when required by law or to protect rights, safety, and property.

As stated in Section 6, text-messaging opt-in data and consent are excluded from all of the above sharing for marketing or promotional purposes and are never sold.

10. Your Oregon Privacy Rights

If you are an Oregon resident, you have the following rights regarding the personal data we process, subject to the Oregon Consumer Privacy Act:

• Right to confirm and access: confirm whether we are processing your personal data and access that data and the categories we process.
• Right to a list of specific third parties: obtain a list of the specific third parties, other than individuals, to which we have disclosed your personal data or any personal data.
• Right to a copy: obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format.
• Right to correct: correct inaccuracies in your personal data.
• Right to delete: delete personal data we hold about you.
• Right to opt out: opt out of (a) targeted advertising, (b) the sale of personal data, and (c) profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to appeal: appeal our refusal to act on a request, as described in Section 11.

We will not discriminate against you for exercising any of these rights.

11. How to Exercise Your Rights

You may submit a request by emailing us at hello@evidencemdaesthetics.com or by calling (971) 455-2411. You do not need to create an account to submit a request. We may ask you for information to verify your identity, except for opt-out requests, which do not require verification. An authorized agent may submit an opt-out request on your behalf.

We will respond without undue delay and within 45 days of receipt. When reasonably necessary, we may extend that period once by an additional 45 days and will notify you within the first 45 days, with the reason for the extension. Your first request in any 12-month period is complimentary.

Appeals. If we decline to act on your request, we will tell you why and how to appeal. To appeal, reply to our decision or contact us using the details in Section 18. We will respond to an appeal in writing within 45 days. If we deny your appeal, you may contact the Oregon Attorney General to submit a complaint at oregonconsumerprivacy.gov.

12. Recognized Opt-Out Signals

Your browser or device may let you send an opt-out preference signal, such as Global Privacy Control. Where required by Oregon law, we treat a recognized signal as a valid request to opt out of targeted advertising and the sale of personal data for that browser or device.

13. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information at a level consistent with the volume and sensitivity of the data. No method of internet transmission or electronic storage is fully secure, and we cannot guarantee absolute security.

14. Data Retention

We retain personal information only as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.

15. Children's Privacy

Our website and services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.

16. Health Information and HIPAA

Evidence MD is a medical practice. Information you provide in connection with treatment may be protected under HIPAA and Oregon health-privacy law. This website is not intended for transmitting emergency or highly sensitive medical information. If you become a patient, you will receive our Notice of Privacy Practices, which governs how your PHI is handled.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page with a revised effective date. Material changes will take effect on the date stated in the updated policy.

Contact Us