Legal, privacy & health information notices.

Part 1

Terms of Service

1. Who we are and acceptance of these Terms

These Terms govern your use of websites, forms, digital tools, content, and online services operated for the practice identified in historical public materials as Michael Salzhauer, M.D., P.A., doing business as Dr. Miami and Bal Harbour Plastic Surgery Associates (collectively, the “Services,” “we,” “us,” or “our”). Current intake or corporate records may identify the operative entity more precisely and should control. By accessing or using the Services, or by selecting a button that states you agree, you acknowledge that you have read and agree to these Terms and the notices linked at that point. If you do not agree, do not use the Services.

2. Eligibility and emergencies

The consultation questionnaire is intended only for people who are at least 18 years old and legally able to enter into these Terms. The Services are not an emergency service. Do not use a website form, email, social media, or the AI visualizer for urgent or emergency care. Call 911 or go to the nearest emergency department if you may have a medical emergency.

3. No medical advice or patient relationship online

Website content is general educational and administrative information. It is not individualized medical advice, diagnosis, treatment, a prescription, or a substitute for an in-person or otherwise clinically appropriate evaluation by a qualified professional. Using the Services, sending information, or receiving an automated or staff response does not by itself create a physician-patient relationship. A relationship is formed only through the practice's formal intake and acceptance process and any required agreements and clinical evaluation.

4. Questionnaire and consultation requests

Questionnaire results, eligibility messages, BMI or age calculations, readiness indicators, and similar outputs are preliminary administrative screening tools. They do not confirm candidacy, safety, availability, pricing, scheduling, or a medical outcome. A clinician must make any clinical decision. You agree to provide information that is accurate and complete to the best of your knowledge and to update it when it changes.

When the questionnaire presents a notice before you continue, selecting “Next” records your acknowledgment of the Terms and Privacy Policy shown there. A separate affirmative choice is used before collecting consumer health data. These actions do not replace any separate medical consent or authorization, financial agreement, or marketing consent that may be required.

5. AI visualizer and digital simulations

The AI visualizer and any image manipulation, simulation, or generated content are for illustration and discussion only. Outputs may be incomplete, inaccurate, unrealistic, or affected by lighting, camera angle, body position, clothing, software, and other factors. They are not a diagnosis, treatment plan, surgical recommendation, guarantee, warranty, or prediction of actual results. Do not rely on an output to make a medical or financial decision.

6. Communications

If you give us contact information, you authorize us and service providers acting for us to respond about your request through the contact methods you provide, including calls, email, or text messages. Message and data rates may apply. This service-related permission is not consent to receive automated or promotional marketing where separate consent is required. You may ask us to stop promotional messages at any time; essential care, transactional, security, or legal notices may still be sent.

7. Your submissions, images, and feedback

You retain any rights you hold in information, photographs, videos, recordings, questions, and other materials you submit. You give us a limited, nonexclusive permission to host, copy, process, transmit, and use those materials as reasonably needed to provide the requested Services, evaluate or coordinate your consultation or care, maintain records, secure the Services, meet legal duties, and exercise the rights described in these notices. We will not use identifiable patient images or stories in public advertising merely because you submitted them through a questionnaire; separate permission or authorization is required when applicable.

You represent that you have the right to submit your materials and that doing so does not violate another person's privacy, intellectual-property, or other rights. Do not submit content about another person unless you are legally authorized to do so.

8. Acceptable use and intellectual property

The Services and their design, software, text, graphics, logos, compilations, and other content are owned by us or our licensors and protected by law. We give you a limited, revocable, nontransferable right to use the Services for personal, noncommercial purposes in accordance with these Terms.

You may not:

• break the law, impersonate another person, or submit false information;
• interfere with security, availability, or another person's use;
• introduce malware, scrape at unreasonable volume, or bypass access controls;
• reverse engineer or copy the Services except where law expressly permits;
• use website content, patient images, or outputs to train a model or build a competing service without written permission; or
• use the Services to harass, exploit, or infringe the rights of others.

We may suspend access, preserve evidence, or cooperate with authorities when we reasonably believe these Terms or law have been violated.

9. Third-party services and links

The Services may link to or integrate independent scheduling, financing, payment, hotel, social-media, map, video, AI, or other providers. Their services, availability, security, eligibility, decisions, and terms are controlled by them. A link or integration does not mean we guarantee or accept responsibility for an independent provider. Review the provider's terms and privacy notice before using it.

10. Pricing, financing, testimonials, and results

Website prices, specials, timelines, availability, recovery descriptions, financing information, and procedure descriptions are general and may change. A personalized written quote and signed patient documents control. Financing is offered and decided by independent providers. Testimonials and before-and-after images reflect individual experiences and do not guarantee that another person will receive the same result. All procedures have risks, and outcomes vary.

11. Disclaimers

To the fullest extent permitted by law, the website and general digital Services are provided “as is” and “as available.” We disclaim implied warranties of merchantability, fitness for a particular purpose, title, noninfringement, and warranties arising from course of dealing or usage. We do not warrant that the Services will be uninterrupted, error-free, secure, or free from harmful components, or that content or digital outputs will be complete or accurate. Nothing in these Terms disclaims a healthcare duty or other responsibility that cannot legally be disclaimed.

12. Limitation of liability

To the fullest extent permitted by law, we and our personnel, licensors, and service providers will not be liable for indirect, incidental, special, exemplary, punitive, or consequential damages, or lost profits, data, goodwill, or business opportunity, arising from use of or inability to use the general digital Services. This limitation does not apply where prohibited by law and does not alter rights or remedies for professional healthcare services under applicable law.

13. Indemnification

To the extent permitted by law, you agree to defend, indemnify, and hold us harmless from third-party claims and reasonable costs arising from your unlawful misuse of the Services, your material breach of these Terms, or materials you submit in violation of another person's rights. This obligation does not apply to the extent a claim results from our own conduct or where law prohibits it.

14. Florida law and venue

Except where applicable law requires otherwise, these Terms are governed by the laws of the State of Florida, without regard to conflict-of-law principles. Any dispute concerning the general digital Services that is not governed by a separate valid agreement must be brought exclusively in the state courts located in Miami-Dade County, Florida, or the United States District Court for the Southern District of Florida, and each party consents to jurisdiction and venue there. Nonwaivable consumer, privacy, and healthcare rights remain unaffected.

15. Changes, severability, and contact

We may update these Terms by posting a revised effective date. Material changes apply prospectively unless law permits otherwise. If a provision is unenforceable, it will be limited to the minimum extent necessary and the remaining provisions will remain in effect. Our failure to enforce a provision is not a waiver. These Terms, together with any additional terms presented for a particular Service, are the agreement for use of the general digital Services; signed patient agreements separately govern care.

Part 2

Privacy Policy

1. Scope

This Privacy Policy describes how we collect, use, disclose, retain, and protect information through our general websites, consultation questionnaire, scheduling pathways, communications, and related business operations. Information may also become part of a patient record when a healthcare practice receives or maintains it for care, payment, or healthcare operations.

2. Information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information: name, email, telephone number, country, address, date of birth, and preferred contact method.
• Consultation and consumer health information:procedure interests, surgery readiness, budget range, height, weight, calculated BMI and age, pregnancy or children-related responses, nicotine use, health conditions, medical history, medication or risk information, screening results, and other details you choose to provide.
• Photos, video, audio, and appearance information:body or facial images submitted for consultation, camera or microphone inputs used with an AI visualizer, generated outputs, and separate testimonial or gallery materials when authorized.
• Appointments and communications: requested dates, scheduler information, CRM records, forms, messages, call notes, consent and acknowledgment timestamps, and support history.
• Transaction information: payment status, quotes, deposits, or related administrative records. Independent payment or financing providers collect their own application and account information under their notices.
• Device and website information: IP address, browser and device type, operating system, referring page, visited pages, approximate location derived from IP, timestamps, session identifiers, campaign parameters, cookie or similar identifiers, and interactions with general website pages.
• Derived information: preliminary qualification or disqualification status, age and BMI calculations, preferences, and service-performance or attribution measurements.

3. Sources of information

We collect information directly from you or an authorized representative; automatically from your device on general site pages; from staff and clinicians; from scheduling, CRM, hosting, communications, AI, analytics, security, and payment service providers; from referral or advertising links; and from public sources when permitted by law. If another person provides your information, they must be authorized to do so.

4. How we use information

We may use information as reasonably necessary to:

• provide, personalize, maintain, and secure the Services;
• respond to inquiries and coordinate screening, consultations, scheduling, care, recovery, payments, and support;
• calculate preliminary administrative screening results and route requests to appropriate personnel;
• process images or other inputs requested through the AI visualizer;
• authenticate requests, document acknowledgments and consent, prevent abuse, troubleshoot, and maintain records;
• communicate service information and, where law permits or you separately consent, promotional information;
• measure general website performance and campaign effectiveness without putting questionnaire answers, medical details, names, email addresses, telephone numbers, or submitted photos into general analytics or advertising events;
• comply with law, protect safety and rights, enforce agreements, handle disputes, and complete a business transaction subject to required safeguards; and
• create aggregated or deidentified information and use it for lawful operational, research, security, or improvement purposes without attempting to reidentify it where prohibited.

5. When we disclose information

We may disclose information only as described here, with your direction or authorization, or as permitted by law. Recipient categories may include:

• the Dr. Miami practice, authorized workforce members, clinicians, and entities involved in your requested services;
• vendors that provide hosting, security, CRM and lead management (including HighLevel/LeadConnector), scheduling (including Symplast), email, telephony, file storage, support, AI visualizer functionality (including ClinicOS), payments, and professional services;
• analytics providers on general website pages, such as Vercel, PostHog, and Ahrefs, subject to the choice control below;
• independent embedded media, video, AI, social-media, and map providers when you choose to load, activate, or open their content; those providers may receive device, network, and interaction data under their own privacy notices;
• regulators, courts, law enforcement, public health authorities, auditors, insurers, advisors, or other parties when law permits or requires disclosure or it is reasonably necessary to protect rights, safety, and security; and
• a successor or transaction participant in a merger, financing, reorganization, acquisition, or sale, subject to applicable confidentiality and legal requirements.

We do not sell questionnaire consumer health data, and we do not use or disclose questionnaire answers, submitted consultation photos, or medical details for targeted advertising. We do not place personal or medical form answers in general analytics or advertising payloads. If our practices materially change, we will update this notice and obtain consent when required before applying the change to previously collected information.

6. Cookies, analytics, and privacy signals

Essential storage supports functions such as security, questionnaire progress, requested features, and remembering your privacy choice. On general pages, nonessential analytics may measure visits and interactions. You can turn those analytics off in Privacy Choices. We treat an enabled Global Privacy Control signal as an opt-out for this browser.

The analytics choice does not block every independent third party. If you choose to load or open embedded media, video, the AI visualizer, social-media content, or maps, that provider may receive your IP address, browser or device information, and interaction data under its own privacy notice. We do not include questionnaire health answers, submitted consultation photos, or medical records in those general website requests. Browser settings can also limit storage, but disabling essential storage may affect functionality.

7. Retention

We retain information for as long as reasonably necessary for the purpose collected, including responding to a request, coordinating care, maintaining legally required medical and business records, resolving disputes, enforcing agreements, preventing fraud, and meeting tax, insurance, regulatory, and security obligations. Retention varies by record type, relationship, and applicable law. When information is no longer required, we take reasonable steps to delete, destroy, or deidentify it, subject to backups and legal holds.

8. Security and breach response

We use administrative, technical, and physical safeguards designed for the nature of the information, including access controls and service-provider restrictions where appropriate. No internet, email, storage, or security system is perfectly secure, so we cannot guarantee absolute security. We investigate suspected incidents and provide notices when required by applicable law. Do not send urgent medical information or information we did not request through ordinary email or social media.

9. Children and minors

The consultation questionnaire and AI visualizer are intended for adults age 18 or older and are not directed to children. We do not knowingly collect questionnaire consumer health data from a child through those tools. A parent or legal guardian should contact us if they believe a minor submitted information so we can review and take appropriate action. Separate pediatric or dependent records, if any, are handled under applicable healthcare law.

10. Your privacy rights

Depending on where you live and which law applies, you may have rights to confirm processing; access, correct, delete, or obtain a portable copy of information; withdraw consent; opt out of sale, targeted advertising, or certain profiling; limit certain uses; appeal a decision; and receive equal service without unlawful discrimination. We do not sell questionnaire health data.

Submit a request using the contact information below. Please state the right you want to exercise and the jurisdiction where you live. We may verify your identity and authority, request only the information reasonably necessary for verification, and deny or limit a request where law permits. An authorized agent may submit a request when they provide legally sufficient authorization. You may appeal a denial by replying to our decision with “Privacy Appeal.” We will respond within the time required by applicable law.

11. Other websites and changes

Independent websites and applications have their own privacy practices. We may update this Policy to reflect legal, operational, or technical changes. We will post the new effective date and give additional notice or seek consent when required for a material change.

Part 3

Consumer Health Data Privacy Notice

This section supplements the Privacy Policy for “consumer health data” that may be covered by state consumer health privacy laws. The law and rights that apply depend on your location, the context in which information is collected, and other applicable healthcare requirements.

Consumer health data we may collect

Consumer health data may include information that identifies or can reasonably be linked to you and reveals or could be used to infer your physical or mental health, conditions, treatment, surgery interests, measurements, medical history, medication or risk factors, reproductive or pregnancy-related information, nicotine use, biometric or appearance-related information, health-service appointments, health-related purchases, or precise location if you affirmatively provide it in a health context. It may include consultation photos, visualizer inputs and outputs, and derived screening status.

Sources and purposes

We collect this data from you or your authorized representative; from authorized staff and clinicians involved in your request; and from processors that help operate the electronic questionnaire, CRM, scheduler, communications, hosting, secure storage, security, and AI visualizer. We collect and use it to provide the service you request, perform preliminary screening, respond and schedule, coordinate consultations or care, document your choices, maintain and secure records, prevent fraud or misuse, comply with law, and create deidentified information where permitted.

How consumer health data is processed

Processing may occur through electronic forms; transfer into the CRM and lead-management system; scheduling and practice workflows; secure hosting, transmission, and storage; the consent-gated AI visualizer; review by authorized clinicians or workforce members; and administrative derivations such as age, BMI, preliminary eligibility, qualification, or disqualification status. The questionnaire is an administrative screening tool and does not make a clinical decision.

Who may receive consumer health data

Based on the current site code and records available for this notice, recipient and processor categories may include:

• the identified operator/practice, described in historical public materials as Michael Salzhauer, M.D., P.A., doing business as Dr. Miami and Bal Harbour Plastic Surgery Associates;
• authorized clinicians and workforce members;
• HighLevel/LeadConnector for CRM, lead management, and consultation communications;
• Symplast for scheduling and practice-related workflows;
• ClinicOS for the AI visualizer, but only after the user completes the visualizer's separate affirmative consent gate;
• Vercel for website hosting, proxy, and related infrastructure; and
• legal, audit, security, safety, regulatory, or transaction recipients when directed by you or permitted or required by law.

Naming a processor here does not describe the disclosure as a sale. Each provider's legal role, contractual scope, instructions, data flow, and retention obligations may vary by service and applicable law.

We do not currently identify a separately named affiliate as a recipient of consumer health data collected under this website Notice. Other entities may be identified in formal patient, facility, or clinical agreements and privacy notices for the services they provide. Before sharing consumer health data collected under this Notice with a newly identified affiliate for a new purpose, we will update this Notice and obtain consent where required.

No sale, targeted advertising, or cross-site health tracking

We do not sell consumer health data collected through the questionnaire, and we do not use or disclose questionnaire health answers, medical details, or consultation photos for targeted advertising. We do not use geofencing around healthcare facilities to identify, track, collect data from, or send health-related messages to consumers as prohibited by applicable consumer health law.

The questionnaire disables general advertising and analytics tracking, and we do not authorize cross-site tracking of questionnaire health data. Independent tools have their own practices and contract terms, which should be reviewed before use. ClinicOS is not loaded or contacted by the AI visualizer page until the user affirmatively confirms they are at least 18, consents to the described consumer health data processing, and chooses to continue.

Your consumer health data rights

Where applicable, you may request confirmation and access, including a list of third parties or affiliates to which data was disclosed; ask us to review or correct information; withdraw consent; request deletion from our systems and notification to applicable processors or other recipients; and appeal a denied request. Consent withdrawal does not affect lawful processing already completed and may prevent us from providing a requested consultation service. Some information may be retained where law permits, including for legal claims, security, fraud prevention, or required records.

To exercise a right, email info@drmiami.com with the subject “Consumer Health Data Request,” call (786) 982-8788, or write to the address below. To appeal, reply with the subject “Consumer Health Data Appeal.” We will verify and respond as required by applicable law.

Material changes to this Notice

If consumer health data categories, purposes, processing methods, affiliates, or recipient practices materially change, we will post an updated effective date and provide prominent notice. We will obtain new consent before applying a material change to previously collected consumer health data when applicable law requires reconsent.

Part 4

Privacy Choices

Manage general website analytics

Use the control below to turn nonessential Ahrefs, PostHog, Vercel Analytics, and Vercel Speed Insights measurement off or on for this browser. The selection is stored locally and in a cookie so we can honor it on later visits. The control does not disable storage needed for security, the questionnaire, or remembering the choice. An active Global Privacy Control signal overrides an “allow” selection. Clearing browser data may clear your selection.

Submit a privacy request

Email info@drmiami.com with “Privacy Request” or “Consumer Health Data Request” in the subject, as appropriate. Describe the information and right involved. You may also call (786) 982-8788 or write to the address below. We may need to verify your identity, authority, and jurisdiction before completing a request. Do not email a copy of a government ID unless we specifically provide a secure way to do so.

To stop promotional email, use its unsubscribe link or contact us. Reply STOP to an eligible promotional text. Service, care, security, and legally required communications may continue. To withdraw questionnaire consumer health data consent, use the same contact methods and state “Withdraw Health Data Consent.”