I. Policy Introduction

1. This Privacy Policy (hereinafter referred to as "this Policy") applies to your acts of submitting personal information, consulting medical aesthetic services, booking experiences, and other lead generation-related behaviors through Wonder Medical Spa Official Website (Domain Name: https://www.wondermedicalspa.com, hereinafter referred to as "this Website").
2. This Policy aims to clarify the rules for this Website to collect, use, store, protect, and share your personal information. You shall carefully read and understand this Policy before submitting any information. Your act of submitting lead information shall be deemed as your consent to all contents of this Policy; if you do not agree, please do not submit any personal information through this Website.
3. The operator of this Website is Wonder Medical Spa, which is the processor of your personal information. For contact information, please refer to Article VII of this Policy.

II. Scope and Methods of Information Collection

(I) Types of Collected Information

1. Basic Identity Information: Including but not limited to your name, mobile phone number, email address, and contact address (if you need on-site consultation or receive materials), used to establish effective communication with you.
2. Medical Aesthetic Consultation and Health-Related Information: Including but not limited to your age, gender, skin condition, past medical aesthetic history, health status (e.g., allergies, chronic diseases, etc.), intended medical aesthetic projects (e.g., plastic surgery, skin care, anti-aging, etc.), budget range, and consultation questions, used to provide you with accurate medical aesthetic program recommendations and safety assessments.
3. Device and Technical Information: When you visit this Website, we may automatically collect your device model, IP address, browser type, visit time, page browsing records, etc., through technical means, used to optimize website experience and statistical visit data. Such information is not directly associated with your real identity.
4. Other Information Voluntarily Provided by You: Such as other relevant information you voluntarily supplement during consultation (e.g., name of previous medical aesthetic institution, expected effects, etc.).

(II) Collection Methods

1. Voluntary Submission by You: Information actively filled in and submitted through modules such as "Online Consultation", "Booking Form", and "Lead Generation Incentives" on this Website.
2. Retention of Communication Records: Information recorded by us to provide services and retain evidence when you communicate with online customer service or consultants of this Website through text, phone calls, or other means.
3. Automatic Technical Collection: Device and visit information collected through technical tools such as website server logs and Cookies (you can disable Cookies through browser settings, but this may affect the use of some functions).

III. Purposes and Restrictions of Information Use

1. To provide you with medical aesthetic consultation services: Based on your intended projects and health information, match professional consultants to answer your questions, provide program recommendations, and inform you of project risks and precautions.
2. Booking Service Connection: Confirm your booking time and projects, and send booking reminders, on-site guidelines, and other information.
3. Safety Assessment and Compliance Requirements: Based on the safety of medical aesthetic services, assess whether you are suitable for the intended projects to avoid health risks; at the same time, retain necessary consultation and booking records to comply with medical industry regulatory requirements.
4. Service Optimization and Personalized Recommendations: According to your consultation records and lead generation preferences, recommend more suitable medical aesthetic projects and preferential activities for you (you can request to stop such recommendations in accordance with Article VI of this Policy).
5. Website Operation and Maintenance: Analyze visit data, optimize website functions, page design, and service processes, and ensure the normal operation of the website.
6. Legal and Compliance Purposes: Provide necessary information to cooperate with compliance reviews when required by laws and regulations or investigations by competent authorities.
7. Without your explicit consent, we will not use your personal information for any purposes other than those agreed in this Policy.

IV. Information Storage and Protection

(I) Storage Rules

1. Storage Period: Your personal information will be stored for the shortest period necessary to achieve the purposes agreed in this Policy, unless otherwise required by laws and regulations (e.g., medical records need to be retained for a certain number of years). After the termination of services, we will delete your information or anonymize it within a reasonable period.
2. Storage Location: Your personal information is stored on compliant servers within the territory of the People's Republic of China. We will not arbitrarily transfer the information overseas. If cross-border transmission is required, we will obtain your explicit consent in advance and comply with relevant laws and regulations.

(II) Protection Measures

1. Technical Guarantee: Adopt technical means such as data encryption, access control, firewalls, and security audits to prevent information leakage, tampering, and loss.
2. Management Norms: Establish internal management systems for personal information processing, clarify the authority of each post, and only authorize necessary personnel to access your information; conduct privacy protection training for employees and sign confidentiality agreements.
3. Emergency Response: In the event of security incidents such as information leakage or tampering, we will take immediate measures to mitigate the impact and notify the relevant authorities and affected users in accordance with the law.

V. Information Sharing and Disclosure

1. With explicit consent: We will only share your personal information with third parties with your explicit consent.
2. Sharing with affiliated entities: To provide better services, your information may be shared with our affiliated entities, but we will require them to comply with this Policy and take confidentiality measures.
3. Sharing with service providers: We may share necessary information with service providers who provide technical support, payment processing, data analysis, etc., but we will sign strict confidentiality agreements with them and supervise their compliance.
4. Legal disclosure: We may disclose your information in accordance with laws and regulations, legal procedures, or government requirements.

VI. Your Rights

1. Access and Correction: You have the right to access and correct your personal information held by us.
2. Deletion: Under certain circumstances, you have the right to request us to delete your personal information.
3. Withdrawal of Consent: You have the right to withdraw your consent to the processing of your personal information.
4. Objection to Processing: You have the right to object to certain types of processing, such as marketing communications.
5. To exercise these rights, please contact us through the methods provided in Article VII.

VII. Contact Information

If you have any questions, suggestions, or complaints regarding this Policy or the processing of your personal information, please contact us through the following methods:

Company Name: Wonder Medical Spa

Phone: 408-216-9623

Email: wondermedicalspa@gmail.com

Address: 4949 Stevens Creek Blvd, Santa Clara, CA 95051

VIII. Policy Updates

We may update this Policy from time to time. When we make significant changes to this Policy, we will notify you through prominent positions on the Website or other appropriate means. Please check this Policy regularly to stay informed of the latest updates.

IX. Other Provisions

This Policy is governed by the laws of the People's Republic of China. If any provision of this Policy is deemed invalid or unenforceable, the remaining provisions shall remain valid and enforceable.

Last Updated: December 07, 2025