Privacy Policy
Privacy Policy
Effective Date: September 1, 2026
Mountcastle Medical Aesthetics (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information of visitors to our website.
This Privacy Policy describes how we collect, use, maintain, protect, and disclose information from users (“Users”) of our website, https://www.mountcastlemedicalspa.com/, and any related services, including SMS communications.
By accessing or using this website, you agree to the practices described in this Privacy Policy.
Information We Collect
We may collect several types of information from visitors to our website.
Personal Information
Personal information is provided voluntarily and may include:
• Name
• Email address
• Telephone number
• Mailing address
• Appointment and service history
• Information submitted through forms, bookings, appointment requests, or inquiries
• Other information you voluntarily provide
Users may browse our website anonymously. Personal information is only collected when voluntarily submitted.
Non-Personal Information
We may also collect information that does not directly identify you, including:
• IP address and connection data
• Browser type and version
• Device type and operating system
• Internet service provider
• Website usage patterns
• Pages visited and time spent on the website
How We Collect Information
We collect information in several ways.
Information You Provide
You may provide personal information when you:
• Complete contact forms
• Request appointments
• Subscribe to communications
• Opt into SMS communications
• Contact our office
Automatic Data Collection Technologies
As you navigate through our website, we may collect certain information automatically through technologies such as:
• Cookies
• Analytics tools
• Web beacons
• Tracking technologies
These tools help us understand website traffic and improve user experience.
How We Use Your Information
We may use the information we collect to:
• Provide, manage, and improve our services
• Schedule and manage appointments
• Respond to inquiries and customer support requests
• Send transactional messages such as confirmations, reminders, and updates
• Send marketing and promotional communications, with consent
• Improve website performance and user experience
• Analyze usage trends in aggregate form
• Maintain website security and performance
We do not sell personal information to third parties.
Cookies and Tracking Technologies
Our website may use cookies to improve browsing experience and analyze website traffic.
Cookies help us:
• Understand visitor behavior
• Remember preferences
• Customize website content
• Improve website functionality
• Measure marketing performance
You may disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.
Analytics and Advertising Technologies
Our website may use analytics and advertising services including:
• Google Analytics
• Meta / Facebook Pixel
• Online advertising platforms
These services may collect anonymous information about your interactions with the website and may track activity across websites to improve marketing performance.
You can learn more about how Google uses data here:
https://policies.google.com/technologies/partner-sites
SMS and Text Message Communications
By opting into our SMS program, you consent to receive recurring automated text messages from Mountcastle Medical Aesthetics, which may include:
• Appointment confirmations and reminders
• Scheduling updates and administrative notifications
• Service updates and waitlist notifications
• Patient satisfaction surveys
• Promotional offers and marketing messages, where permitted and with consent
SMS Terms
• Message frequency varies based on service needs and engagement
• Message and data rates may apply depending on your mobile carrier
• You may opt out at any time by replying STOP to any message
• You may request assistance at any time by replying HELP
• Consent is not required as a condition of purchase or receipt of services
• Wireless carriers are not responsible for delayed or undelivered messages
Full details of our SMS program are described in our Terms and Conditions.
Mobile Data and Consent Protection
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
• Mobile phone numbers and SMS consent data are used strictly for communication purposes
• Text messaging originator opt-in data and consent will never be shared with third parties for marketing purposes
• Exceptions apply only to service providers who directly support SMS delivery, such as messaging platforms or aggregators
• All third-party service providers are required to maintain appropriate confidentiality and data protection safeguards
Sharing and Disclosure of Information
We do not sell, trade, or rent personal information. We may disclose personal information:
• To trusted service providers that assist in operating our business, such as email or SMS platforms
• To comply with legal obligations
• To protect our rights, property, or safety
• In connection with a merger, sale, or transfer of business assets
• With your consent
We may also share aggregated, de-identified information that cannot reasonably identify any individual user.
We do not share SMS opt-in data or consent with third parties for marketing purposes.
HIPAA Notice Regarding Website Communications
We are committed to protecting your privacy and maintaining compliance with applicable privacy laws, including HIPAA where applicable.
Communications submitted through this website, including contact forms, email, or text messaging, may not be fully secure.
While we take reasonable precautions to protect personal information, electronic communication should not be used to transmit sensitive medical information unless specifically directed by our office.
Protected Health Information (PHI) collected through clinical systems is handled in accordance with applicable healthcare privacy regulations.
Telehealth and Virtual Consultation Privacy
Mountcastle Medical Aesthetics may offer virtual consultations or communications through electronic platforms including email, phone, video consultations, or messaging.
While we take precautions to protect privacy, electronic communications may involve certain risks. By communicating electronically with our office, you acknowledge and accept these risks.
Data Security
We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including:
• Secure data storage and communication systems
• Restricted access controls limiting access to authorized personnel
• Vendor compliance requirements for data protection
• Protection against unauthorized access, alteration, disclosure, or destruction
However, no method of internet transmission or electronic storage is completely secure.
Your Rights
Depending on your location, you may have rights to:
• Access the personal information we hold about you
• Request corrections to inaccurate data
• Request deletion of your data
• Withdraw consent for marketing communications
To exercise these rights, contact us using the information below.
Virginia Consumer Data Protection Act (VCDPA)
Residents of Virginia may have certain rights regarding personal information under the Virginia Consumer Data Protection Act (VCDPA).
These rights may include:
• Access to personal information collected about you
• Correction of inaccurate personal information
• Deletion of personal information
• Opting out of targeted advertising
Requests related to these rights may be submitted using the contact information below.
Data Retention
We retain personal information only as long as necessary to:
• Provide services
• Maintain business operations
• Comply with legal obligations
Age Restriction and Children’s Privacy
Our website and SMS services are intended for individuals 18 years of age or older. By using our services, you confirm that you meet this requirement.
This website is not directed to children. We do not knowingly collect personal information from children under the age of 13.
If we become aware that information from a child under 13 has been collected without parental consent, we will delete that information.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date.
Your continued use of the website after changes are posted indicates acceptance of the updated policy.
Users are encouraged to review this page periodically.
Contact Information
If you have questions about this Privacy Policy, your personal data, or our privacy practices, please contact us:
Mountcastle Medical Aesthetics
44095 Pipeline Plaza, Suite 270
Ashburn, VA 20147
Phone: 571-570-1930
Email: [email protected]
Accessibility Statement
Mountcastle Medical Aesthetics is committed to providing a website that is accessible to all users, including individuals with disabilities. We strive to follow recognized accessibility standards such as the Web Content Accessibility Guidelines (WCAG) to improve usability and access for everyone.
If you experience difficulty accessing any part of this website or need assistance obtaining information about our services, please contact our office and we will make reasonable efforts to assist you.
Mountcastle Medical Aesthetics
Ashburn, Virginia
Phone: 571-570-1930
Email: [email protected]
Local Service Information
Mountcastle Medical Aesthetics provides aesthetic and skin care services for patients in Ashburn, Leesburg, Loudoun County, Northern Virginia, and the Washington DC metropolitan area.
The practice is led by Dr. Timothy Mountcastle, Double Board Certified Plastic Surgeon, who provides surgical and aesthetic expertise for patients seeking advanced cosmetic and skin rejuvenation treatments.