Privacy Policy

Magic Post Op (magicpostop.com) is a post-surgical recovery medi spa located at 2708 Glenwood Road, Brooklyn, NY 11210. We specialize in manual lymphatic drainage and complementary recovery services for clients in the days and weeks following surgery.

For any privacy-related question or request, contact us at contact@magicpostop.com or call (929) 258-9852.

We collect only the information we need to schedule, deliver, and improve our recovery services. Typical categories include:

• Contact details you provide directly: name, email address, phone number, and WhatsApp number.
• Recovery context shared when you book or arrive for a session: procedure type, surgery date, and session preferences.
• Payment information processed by Square. We never store full card numbers on our systems. We retain only the limited transaction metadata that Square returns to us, such as last four digits and authorization status.
• Site usage data: IP address, browser type, pages viewed, and the path you took through the site. This data is aggregated and anonymized for analytics purposes.

• Schedule appointments and confirm bookings.
• Send appointment reminders and aftercare instructions.
• Process payments and issue receipts.
• Respond to inquiries you send via the contact form, email, or phone.
• Improve the quality and safety of our services.

We share the minimum amount of information required for each of the following service providers to do their job:

• Square: payment processing. Card data is collected and handled by Square under their own terms.
• Email and SMS providers: appointment confirmations, reminders, and aftercare messages.
• Hosting and infrastructure providers: our website is hosted on a private virtual server, and bookings and content are stored on a managed Supabase database. These providers do not access client data outside of routine infrastructure operation.

We do not sell your personal information. We do not share it with advertisers, data brokers, or marketing networks.

• HTTPS encryption for everything you submit on this site.
• Encrypted storage for client records and booking data.
• Access limited to staff who need the information to provide your care or run the business.
• Regular review of our infrastructure, third-party providers, and access policies.

You may, at any time, ask us to:

• Provide a copy of the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete your personal information, subject to record-keeping obligations we may have under New York state law.

Send the request to contact@magicpostop.com. We will respond within a reasonable time and may ask you to verify your identity before acting on the request.

We use only first-party cookies that are necessary for the site to work, including:

• The session cookie used by the admin and staff login.
• A short-lived booking cookie used to keep your contact form entries between page loads.

We do not load third-party advertising trackers, cross-site tracking pixels, or social media tracking scripts on the public site.

Our services are intended for adults. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us with information, please contact us and we will delete it.

We may update this policy from time to time. The latest version always lives at this URL, with the "last updated" date below reflecting the most recent change. Material changes will be highlighted on the page.