Koru Information
Website Privacy Policy
How information is handled when you visit our website, contact Koru, or use linked services.
Effective date:
About This Policy
This policy explains how Koru Wellness Aesthetics handles information connected with our public website, general inquiries, and online appointment and communication services. It is separate from our Notice of Privacy Practices, which addresses protected patient health information. If information is protected by health-privacy law, those protections continue to apply regardless of how you contact us.
The website operator is Vivian Chin, MD, PLLC, doing business as Koru Wellness Aesthetics. This policy does not replace the separate terms or notices that apply to a treatment, membership, payment service, or another provider's website.
Information You Provide
When you contact the practice, we receive the information you choose to share, such as your name, contact details, appointment preferences, and message. Booking, intake, and payment services may also request information needed for the particular transaction or visit. Please use the practice's designated intake and payment tools rather than sending medical records, photographs, full card numbers, or security codes in a general website inquiry.
We use this information to respond to you, arrange and administer appointments, provide services, manage payments and records, and address account or technical questions. Clinical information is handled under the applicable patient-privacy notice and law.
Website Resources and Technical Information
Opening a web page sends technical information to the servers that deliver it, which may include your IP address, browser and device information, requested page, and the time of the request. The website is hosted through GoDaddy. The host may maintain logs for operation, troubleshooting, and security.
Our page design uses Google Fonts. Your browser requests font resources from Google when those resources are needed. Our Visit page also offers a Google map. The map is not embedded until you select Show Google Map; the address and an ordinary directions link are available without loading it. Loading the map connects your browser to Google and may allow Google to receive technical information or use cookies under its own policies.
We do not add advertising pixels, session-recording software, or a visitor-analytics script to our public website pages. Hosting, booking, payment, and communication providers may still process information needed for their services, as described in this policy and their own notices.
Booking, Payments, and Other Providers
Our booking buttons open Zenoti. Information you enter there is used to administer the requested appointment, account, payment, or other service. Zenoti and payment providers may apply their own privacy notices and transaction terms. Third-party social media, rewards, and directions links also open services with their own policies.
We share information with service providers as needed to perform the functions they provide to Koru, subject to applicable confidentiality, privacy, and contractual requirements. We may also disclose information where required or permitted by law, to address security or fraud, or to respond to a dispute using appropriately limited records. This policy is not permission to disclose patient information without the authorization or other legal basis that applies to it.
For additional information, see GoDaddy's privacy notice, Google's privacy policy, and Zenoti's privacy notice. Koru remains your contact for requests about information it controls.
Shopping Through Our Brand Partners
Our Shop Skincare page links to Koru's SkinMedica Brilliant Connections and skinbetter science stores. These use the brands' separate websites and checkout services. Following a link connects your browser to that provider, which may receive technical information and use cookies under its own privacy notice.
Practice-link identifiers help the brand attribute qualifying purchases to Koru, for which we receive a commission. The brand's privacy notice explains its collection and sharing practices. This website policy does not mean that a partner store collects no information or that Koru receives no information associated with qualifying purchases.
Email and Text Preferences
Appointment, account, receipt, and care-related communications are different from optional marketing. Use the unsubscribe method in a marketing email, the opt-out instructions in a marketing text, or contact us to change your marketing preferences. Opting out of marketing does not cancel an appointment or a membership.
Our communication providers may process delivery, engagement, or opt-out information when those features are enabled. We do not treat reading this website as consent to marketing texts, recurring charges, or use of clinical photographs. Please contact us about confidential communication preferences.
Your Choices and Requests
You can ask us about your information, request a correction, or ask for deletion where applicable. We may need to verify your identity and the authority of a representative before acting. Some clinical, payment, consent, and business records must be retained; a request to close an online account does not automatically erase those records. Requests involving medical records follow the separate patient-privacy notice and applicable law.
You can use your browser's cookie controls, choose not to load the embedded map, and open written directions instead. Close Map removes the embedded map from the page but does not undo information already sent to Google or delete cookies Google may have stored. Browser preferences do not necessarily control communications or information processed in an external booking account.
California residents may contact us to request information about disclosures for third parties' direct marketing where California's Shine the Light law applies. Rights depend on the applicable law and the information involved; this policy does not promise that every privacy statute applies to every visitor.
Young Patients
The public website is not intended to collect information directly from children under 13. A parent or guardian should contact the practice to arrange a younger patient's visit. We handle information concerning minors and the authority of parents or representatives under applicable consent and confidentiality rules. If you believe a child submitted information through the public website, please contact us. We will address the request without promising deletion of records we are required to keep.
Retention and Security
We retain information for the purposes described in this policy, applicable recordkeeping requirements, and legitimate needs such as managing appointments, accounts, and disputes. Different information may have different retention periods. We use safeguards appropriate to the information and service involved; no website, email system, or storage method can be guaranteed completely secure. Any required breach notices are handled under applicable law, not by assuming that a website posting alone is sufficient.
Updates and Contact
This policy takes effect on October 9, 2026. We will update it when our practices change and show the revised effective date on this page. Where a change requires notice or consent, we will follow the applicable process rather than treating continued browsing as blanket permission.
Privacy questions can be directed to Dr. Chin through hello@korunyc.com or 212-396-3672. You may also write to Koru Wellness Aesthetics, 341 East 78th Street, Ground Floor, New York, NY 10075. Please do not include sensitive medical or payment information in an initial email.