Skip to main content

Privacy Policy

Effective date: June 10, 2026
Last updated: June 10, 2026

This Privacy Policy describes how Albert Yang Facial Plastic Surgery ("the practice," "we," "our," or "us"), collects, uses, shares, and safeguards information submitted through our website. The practice is located at 15600 NE 8th St, Suite A-8, Bellevue, WA 98008. By using this website, you agree to the practices described below. If you do not agree, please do not use the website.

This policy is provided in plain language and is intended to be HIPAA-aware. The website itself is a marketing and informational resource, not a HIPAA-covered intake channel. Please read the section on Protected Health Information below before submitting any health-related information through this site.

1. Scope of this Policy

This policy applies to information collected through this public website. It does not apply to information you provide in person at the practice, through our patient portal (if any), through your insurance carrier, or through any other channel governed by separate notices and authorizations. The practice's clinical privacy practices for protected health information are described in our HIPAA Notice of Privacy Practices, provided separately at the time of patient intake.

2. Information We Collect

We collect a limited set of information through this website. The categories of information collected are described below.

2.1 Information you provide directly

When you fill out a contact or consultation request form, sign up for educational updates, or otherwise voluntarily submit information through the website, we collect what you provide. This typically includes your name, email address, telephone number, the procedure or topic you are inquiring about, and any free-text message you choose to include. We ask that you do not include sensitive medical information in free-text fields. The website's contact form is not a HIPAA-secured channel.

2.2 Information collected automatically

When you visit the website, certain information is collected automatically by your browser and our analytics tools. This includes IP address (often partially truncated for analytics purposes), device and browser type, operating system, referring URL, pages viewed, time spent on pages, and similar technical information. This information helps us understand how visitors use the site and improve content and performance. Automatic collection does not include your name or contact information unless you submit it through a form.

2.3 Cookies and similar technologies

The website uses cookies and similar tracking technologies for analytics, performance, and (where applicable) advertising. Some cookies are set by the practice; others are set by third-party service providers such as analytics platforms (for example, Google Analytics) and advertising networks. You may configure your browser to refuse cookies or to alert you when cookies are being sent. If you refuse cookies, some features of the website may not function as intended. See Section 7 for additional detail on cookies and tracking.

3. How We Use the Information

We use the information collected through the website for the following purposes.

  • Responding to inquiries. When you submit a contact form or consultation request, we use the information to respond to you, schedule appointments, answer questions, and provide requested information about procedures and the practice.
  • Improving the website. Aggregate analytics data helps us understand which content is most useful to visitors, identify pages that need improvement, monitor performance, and resolve technical issues.
  • Practice operations. Information may be used internally for administrative purposes such as appointment scheduling, follow-up communications you have requested, internal recordkeeping consistent with applicable law, and quality improvement.
  • Marketing communications. Where you have explicitly opted in to receive educational updates, newsletters, or marketing communications, we use your contact information to deliver those communications. You may opt out at any time using the unsubscribe instructions in any communication or by contacting us directly.
  • Legal compliance. We may use information to comply with applicable laws, respond to lawful requests from public authorities, enforce our policies, and protect the rights, property, or safety of patients, staff, the practice, or others.

We do not sell your personal information to third parties.

4. How We Share Information

We share information only as described below.

4.1 Service providers

We share limited information with third-party service providers who perform services on our behalf — for example, website hosting, analytics, email and form processing, customer-relationship-management systems, scheduling tools, and similar functions. These service providers are bound by contractual obligations (including, where applicable, business associate agreements or data processing addenda) that restrict their use of information to the services they provide.

4.2 Legal and safety disclosures

We may disclose information when required by law, in response to valid legal process (such as a subpoena or court order), to protect the rights or safety of patients, the practice, or others, or in connection with an investigation of suspected unlawful activity.

4.3 Business transitions

If the practice is involved in a merger, acquisition, asset sale, or similar transaction, information may be transferred as part of that transaction. We will notify affected individuals consistent with applicable law before any such transfer occurs.

4.4 With your consent

We share information for any other purpose only with your consent.

5. Protected Health Information (HIPAA Notice)

The practice is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Protected Health Information (PHI) you provide to the practice in the course of treatment, payment, or health-care operations is governed by our HIPAA Notice of Privacy Practices, which is provided separately at the time of patient intake.

Important: This website's contact form, consultation request form, and email channels are not HIPAA-secured intake mechanisms. Please do not submit detailed medical history, photographs of medical conditions, prescription information, insurance identifiers, or other Protected Health Information through the public website. If we receive PHI through the website, we handle it consistent with applicable law, but the website itself should not be used as a substitute for the practice's HIPAA-covered intake channels.

When you become a patient of the practice, additional protections under HIPAA apply to your treatment, payment, and health-care operations information. The HIPAA Notice of Privacy Practices describes those protections, your rights as a patient with respect to your PHI, and how to exercise those rights.

6. Patient Rights

Subject to applicable state and federal law, individuals may have rights with respect to their personal information, including:

  • Access. You may request information about the personal information we hold about you.
  • Correction. You may request correction of inaccurate or incomplete personal information.
  • Deletion. You may request deletion of personal information, subject to legal and operational retention obligations (including medical-record retention requirements under Washington state law and federal regulation).
  • Opt-out of marketing. You may opt out of marketing communications at any time using the unsubscribe link in any marketing email or by contacting us directly.
  • Withdrawal of consent. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the practice using the contact information at the bottom of this policy. We may need to verify your identity before responding. Patient health-record requests under HIPAA follow a separate process described in the HIPAA Notice of Privacy Practices.

Washington state residents have additional privacy rights under applicable Washington law. Residents of other states or jurisdictions may have additional rights under their respective laws.

7. Cookies and Tracking

The website uses cookies, pixels, and similar technologies for the following purposes.

  • Strictly necessary cookies. Required for the website to function — for example, to remember preferences during a single session.
  • Analytics cookies. Used to understand how visitors use the website. Our analytics provider (typically Google Analytics 4 via Google Tag Manager) processes information about your visit on our behalf in aggregate form. IP addresses are typically anonymized prior to processing.
  • Functional cookies. Used to remember preferences such as language or display settings.
  • Advertising cookies. Where used, these track interactions to deliver more relevant advertising and measure campaign effectiveness. The practice's current cookie posture is reviewed periodically.

You can control cookies through your browser settings. You can also opt out of certain analytics processing by Google Analytics by installing the Google Analytics opt-out browser add-on. Disabling cookies may affect how the website functions.

We do not knowingly respond to "Do Not Track" signals at this time, as no consistent industry standard has been adopted; we monitor developments in this area.

8. Children's Privacy

The website is not directed to children under 18. We do not knowingly collect personal information from children under 18 through the website. If you believe a child has submitted information through the website, please contact us so we can delete the information. Patients under 18 are seen at the practice only in the context of parent or guardian involvement consistent with applicable law and clinical practice.

9. Data Retention

We retain personal information collected through the website for the period necessary to fulfill the purposes for which it was collected, to comply with our legal, regulatory, and operational retention obligations, and to resolve disputes and enforce agreements. Medical-record retention is governed by applicable Washington state and federal law and is independent of any retention schedule for marketing or website information.

When personal information is no longer needed for these purposes, we securely delete or anonymize it.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission over the Internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security.

If we become aware of a security incident affecting personal information, we will respond consistent with applicable law and notify affected individuals where required.

11. Third-Party Links

The website may contain links to third-party websites, social media platforms, or services we do not control. This Privacy Policy does not apply to those third-party properties. We encourage you to review the privacy practices of any third party you visit through a link from our website.

12. International Visitors

The practice operates in the United States. If you access the website from outside the United States, please be aware that information you submit may be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. By using the website, you consent to that transfer where it occurs.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate, notify users through the website or other reasonable means. We encourage you to review this Privacy Policy periodically.

14. Contact Information for Privacy Inquiries

For privacy questions, requests to exercise rights described in this policy, or other privacy-related inquiries, please Contact us.

Albert Yang Facial Plastic Surgery 15600 NE 8th St, Suite A-8 Bellevue, WA 98008 Phone: +1-206-556-6478

For matters specifically related to your protected health information as a patient of the practice, please refer to the HIPAA Notice of Privacy Practices and contact the privacy contact identified there.

Schedule a Consultation

Privacy questions handled here. To schedule a consultation with Albert Yang Facial Plastic Surgery or to ask about a procedure, Contact us.