Russak Dermatology Clinic and Russak+ Aesthetic Center (together, “Russak+,” “we,” “us,” or “our”) respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, contact us, request an appointment, subscribe to communications, or otherwise use our online services.This Policy applies to:

russakplus.com
russakdermatology.com
Related pages, landing pages, online forms, and official social media pages that we control

This Policy is not our HIPAA Notice of Privacy Practices. If you are a patient, a separate Notice of Privacy Practices describes how we may use and disclose your protected health information (PHI) for treatment, payment, and health care operations, and the rights you have under HIPAA. Request a copy at the front desk or by contacting us. We will also post the Notice of Privacy Practices on our website.

Please read this Policy carefully. If you do not agree with our practices, do not use the websites or submit information to us online.

1. Who We Are

We are a physician-led dermatology and aesthetic practice in Midtown Manhattan offering medical dermatology, cosmetic and regenerative treatments, and longevity-focused programs.

Russak Dermatology Clinic / Russak+ Aesthetic Center
115 East 57th Street, Suite 1220
New York, NY 10022
Phone: 646-873-7546
Email: info@russakplus.com or info@russakdermatology.com

2. Information We Collect

We collect information in three ways: (a) information you provide; (b) information collected automatically; and (c) information from third parties.

2.1 Information you provide

Depending on how you interact with us, this may include:

Identifiers and contact data: name, email address, phone number, mailing address, and preferred method of contact
Appointment and inquiry data: requested service, preferred dates, how you heard about us, and free-text messages
Account or portal credentials: if we offer a patient portal or online scheduling account
Communications preferences: newsletter signup, SMS/text opt-in, or marketing consent
Payment-related data: billing name and address; payment card data is typically processed by our payment processor and is not stored in full on our websites
Employment data: if you apply for a position, résumé, work history, and related application materials
Health-related information you choose to submit online: skin concerns, treatment history, photos you upload, or other details in a contact or pre-consult form. Health information submitted through a website form may become protected health information when it is linked to you as a patient. Do not send urgent medical information through website forms.

2.2 Information collected automatically

When you visit our websites, we and our service providers may automatically collect:

IP address, approximate location derived from IP, browser type and version, device type, operating system, and unique device or cookie identifiers
Pages viewed, links clicked, referring URL, date/time of visit, and time spent on pages
Diagnostic logs used to maintain security and performance

2.3 Information from third parties

We may receive information from:

Appointment and listing platforms (for example, Zocdoc or similar services), if you book or request care through them
Analytics, advertising, and social platforms, if you interact with our ads or social pages
Payment processors and scheduling vendors
Public sources or referrals (for example, another clinician who refers you)

3. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies for essential site functions, security, analytics, and (where enabled) advertising measurement.

Strictly necessary: load the site, keep a session, remember cookie choices, and protect against abuse
Preferences: remember language or display settings
Analytics: understand how the site is used so we can improve it (for example, Google Analytics or a healthcare-appropriate analytics tool)
Advertising / social: measure campaigns or remarket to visitors, if those tags are active

You can refuse non-essential cookies through your browser settings and, where we display a cookie banner or preference center, through that tool. If you block cookies, some features may not work.

Where required by law, we honor Global Privacy Control (GPC) and similar legally recognized opt-out preference signals as a request to opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising.

Healthcare tracking note: Federal guidance treats certain website tracking that captures identifiable health-related information as a disclosure of PHI. We do not use advertising or analytics pixels on pages that collect health information unless the vendor is under an appropriate contract (including a Business Associate Agreement where required) or we have a valid HIPAA authorization. Cookie banners are not a HIPAA authorization.

4. How We Use Information

We use personal information to:

Respond to inquiries and schedule, confirm, or remind you of appointments
Provide, maintain, secure, and improve the websites and our services
Send administrative messages (appointment changes, policy updates, security notices)
Send newsletters or promotional messages if you opted in, and honor opt-outs
Process payments and prevent fraud
Analyze site performance and content effectiveness
Comply with law, enforce our terms, and protect patients, staff, and the public
Evaluate job applicants
Support treatment, payment, and health care operations when information is PHI (as described in our Notice of Privacy Practices)

We do not use website information to make solely automated decisions that produce legal or similarly significant effects about you.

5. How We Disclose Information

We may disclose personal information to:

Service providers and vendors who help us operate (website hosting, form processors, email/SMS platforms, analytics, payment processing, scheduling, IT and security, professional advisors). They are permitted to use the information only to perform services for us and must protect it.
Business associates that create, receive, maintain, or transmit PHI on our behalf, under a Business Associate Agreement as required by HIPAA.
Professional partners involved in your care, when permitted (referring or consulting clinicians, laboratories, pharmacies).
Legal and safety recipients when we believe disclosure is required or appropriate to comply with law, a valid legal process, or to protect rights, safety, or security.
Successors in connection with a merger, acquisition, or sale of assets, subject to appropriate protections.

We do not sell your personal information for money. Some state laws treat the use of advertising cookies or sharing identifiers with advertising networks as a “sale” or “share” of personal information. If we use such technologies, you may opt out as described in Section 8.

We do not disclose patient photos, names, or treatment details for marketing without a valid written authorization that meets HIPAA requirements.

6. Retention

We keep personal information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law.

Website inquiry and marketing records: typically up to 3 years after last interaction, or until you opt out or request deletion where we can honor that request
Analytics data: according to the vendor’s configured retention period
Patient medical and billing records: according to New York medical-record retention rules and our records policy (generally at least 6 years; longer for certain records and minors)
Job applicant materials: generally up to 2 years unless hired or a longer period is required

When information is no longer needed, we delete or de-identify it using reasonable methods.

7. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, consistent with the New York SHIELD Act and, for PHI, the HIPAA Security Rule. Measures may include access controls, encryption in transit, staff training, vendor due diligence, and incident-response procedures.

No method of transmission or storage is completely secure. If we determine that a breach of private information has occurred, we will provide any notice required by applicable law, including New York General Business Law and, for PHI, the HIPAA Breach Notification Rule.

8. Your Privacy Choices and State Privacy Rights

8.1 Marketing communications

You may unsubscribe from promotional emails using the link in the message. You may opt out of promotional texts by replying STOP (or the instruction in the message). Transactional messages about an existing appointment or account may still be sent.

8.2 Cookies and advertising

Use our cookie preference tool if available, your browser settings, industry opt-out pages (for example, the Network Advertising Initiative), and GPC where recognized.

8.3 Rights under certain U.S. state laws

Residents of states with comprehensive privacy laws (including California, Colorado, Connecticut, Virginia, Texas, and others as they take effect) may have some or all of the following rights, subject to legal exceptions:

Know / access the personal information we collected about you
Correct inaccurate personal information
Delete personal information
Obtain a portable copy of information you provided
Opt out of sale or sharing of personal information for cross-context behavioral advertising
Limit use and disclosure of sensitive personal information, where applicable
Appeal a denied request, where the law provides an appeal
Not be discriminated against for exercising these rights

To submit a request, email info@russakdermatology.com with the subject line “Privacy Request,” or call 646-873-7546. We will verify your identity before completing the request. You may use an authorized agent where the law allows; we may require proof of authorization.

These consumer rights apply to website and consumer data. Requests that concern a medical record are handled under HIPAA and our Notice of Privacy Practices, not this section.

8.4 California notice at collection (summary)

In the preceding 12 months we may have collected the following categories of personal information from website visitors and inquirers: identifiers; customer records information; commercial or service-inquiry information; internet or other electronic network activity; geolocation derived from IP address; audio/visual information if you send photos or leave a voicemail; professional information (job applicants); and inferences drawn from the above. We collect this information from you, your device, and the third parties listed in Section 2.3, for the purposes in Section 4, and disclose it to the categories of recipients in Section 5. We retain it as described in Section 6. We do not sell personal information for money. We may “share” identifiers and internet activity with advertising partners if advertising pixels are enabled; you may opt out as described above.

California residents may also have rights under the Shine the Light law to request information about certain direct-marketing disclosures. Contact us as described below.

9. Children’s Privacy

Our websites are directed to adults. We do not knowingly collect personal information online from children under 13 (COPPA). Pediatric dermatology patients are registered by a parent or legal guardian through our practice processes, not through children’s use of the website. If you believe a child under 13 submitted information to the site, contact us and we will delete it.

10. International Visitors

Our practice and servers are located in the United States. If you access the websites from outside the United States, you understand that your information will be processed in the United States, where privacy laws may differ from those in your country.

11. Links to Other Sites

Our websites may link to third-party sites or embed third-party tools (maps, social plugins, scheduling widgets). We are not responsible for the privacy practices of those third parties. Review their policies before providing information.

12. Social Media

If you interact with us on Facebook, Instagram, or other platforms, those companies collect information according to their own policies. Do not send PHI or detailed medical information through social media messages or comments.

13. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date will change when we do. If we make material changes, we will post the updated Policy on this page and, where appropriate, provide additional notice (for example, a site banner or email). The updated Policy is effective when posted unless a later date is stated.

14. Contact Us

Questions about this Privacy Policy or a privacy request:

Privacy Contact
Russak Dermatology Clinic / Russak+ Aesthetic Center
115 East 57th Street, Suite 1220
New York, NY 10022
Phone: 646-873-7546
Email: info@russakdermatology.com

For medical-record or HIPAA questions, ask for our Privacy Officer or request the Notice of Privacy Practices.