Privacy Policy

This Privacy Policy explains what information NuWays MD collects when you visit NuWaysMD.com, use our planning tools, create a professional account, request an emailed resource or ask us for help, and what we do with it. NuWays MD is owned and operated by Go2Brand LLC (“NuWays MD,” “we,” “us” or “our”). The policy covers NuWaysMD.com, its subdomains and the emails we send. It does not cover websites or services run by others, including the practices, manufacturers and stores we mention or link to.

NuWays MD publishes education for people researching aesthetic treatments and practical guidance for aesthetic practice owners. We are not a medical provider. We do not treat patients, schedule appointments or keep medical records.

The short version

You can read every guide on NuWays MD without giving us your name or email address.
We collect contact details only when you submit a form or choose to save your work, and we use them for the purpose you chose.
We do not sell personal information. We do not share it with advertisers for targeted advertising.
We do not pass your details to a practice or an equipment company unless you ask us to, on a form that names who will receive them.
Professional accounts are optional. Your saved plans are not visible to other members or the public. We do not share your figures with manufacturers, dealers or lenders, or use them for research.
You can ask to see, correct or delete your information, and you can unsubscribe from our emails at any time.

The rest of this policy gives the details.

Information you give us

Emailed resources and newsletters. When you request a checklist or other resource, we collect your name, your email address, the resource you asked for, the page you asked from and your newsletter choice. If you choose email interests, such as laser treatments or equipment buying, we keep those too.

Saved research and planning tools. Saving is optional. If you save, we keep the name and email address you enter and the work you save. For consumer tools, that can include your research topic, treatment interests, consultation questions, budget figures and saved articles. For practice-owner tools, it can include practice details, calculator inputs, cost models, worksheets and notes.

Professional accounts. If you create a professional account, we collect your name, email address and password, the date and version of the terms you accepted, and whether you asked for the optional Practice Brief newsletter. WordPress stores your password only in a one-way scrambled form. Each plan you save keeps its name, the figures and assumptions you enter, any notes or question answers supported by that tool, and earlier saved revisions. Membership plans, service pricing scenarios, software cost comparisons and equipment plans also keep the calculator version used for that revision, so their results can be recalculated from the saved figures. A saved pricing plan can include your current scenario and up to three comparisons you choose. A software comparison can include two system names, quote dates, entered costs, demo preparation steps and business-planning notes. Unanswered cost fields can remain blank. An equipment plan can include supplier quotes, a two-offer comparison, ROI scenarios and notes. When you use a quote to start a scenario, we keep the copied figures and their source within that plan so you can review later changes. If you choose to import a plan, we keep the selected figures and limited information about the copy, such as its calculator version and stated date. A file’s stated date is not a verified creation date. When you copy selected earlier equipment saves into an account, we keep a record of which saves were copied to prevent duplicate copies. The earlier saves stay unchanged. We do not copy their contact profile, consent records, assessment answers or requests for help into the account plan. Importing does not give us access to other files or unrelated information stored in your browser.

Practice review. Some professional extras require a practice review. If you apply, we collect your practice name, your role, the practice website, its country and state, and any note you add. Our decision and the message we send you are kept with the application. To review it, we may look up your practice in public sources such as its website, the NPI Registry, a state business registry or a web search.

Equipment help requests. When you ask us for help choosing equipment or reviewing a quote, we collect your name and email address and, if you provide them, your phone number, practice name, region and role. We also keep the project details you give us, such as the service you are considering, your timing, budget range, the equipment you already own and the terms of a quote, along with any saved project you choose to attach.

Consultation requests. When consultation requests are open, the request form collects your name, the contact details you choose to give, the treatment you want to discuss, your timing, a referral reference and the permissions you select, including any permission to receive scheduling texts.

Messages. If you email us or use our contact form, we keep your message and our reply.

Please do not send us medical records, patient information, photographs of your body or a detailed medical history. None of our forms ask for them, and our saved-work tools are not designed to hold them.

Information collected automatically

Device and visit information. Like almost every website, our servers and our content delivery and security provider receive your IP address, browser and device type, the page you requested, the page that referred you and the date and time of the visit. We use this to deliver pages, protect the site, prevent abuse and fix problems.

Security records. Our security software records sign-in attempts, which can include sign-ins to professional accounts, and requests that look abusive, along with the IP address involved. It may block an address for a period of time. While you are signed in to a professional account, WordPress keeps a record of that sign-in, including the IP address and browser used, until it ends. To limit abuse, we keep short-lived counters of recent account-form attempts. They are linked to a coded form of the IP address and email address, not the address itself, and are deleted within a day.

Cloudflare Turnstile. Our account sign-up, sign-in, email-confirmation and password-reset forms use Cloudflare Turnstile to tell people apart from automated abuse. It runs in the background and processes information such as your IP address and browser and device characteristics. Cloudflare processes that information under its Turnstile Privacy Addendum. We do not send Cloudflare your name, email address or anything you enter in the workbook.

Where a request came from. When you submit a request, we save the page you submitted it from and, if the link you followed included them, basic campaign labels such as the source, medium and campaign name. We do not collect your search terms or your browsing on other websites.

Email opens and clicks. Our emails can include a small image and tracked links that tell us whether a message was opened and which links were clicked. We use this to confirm delivery, see which resources people find useful and remove addresses that no longer work. Most email apps let you turn off images, which stops open tracking.

Cookies and browser storage

Reading NuWays MD does not require an account, and an ordinary page visit does not set advertising cookies. It can set analytics cookies from Google Analytics, described below.

Saved-work cookie. When you open a saving tool, we set one cookie, named nuways_wp_session, so this browser can reopen your saved work. It lasts up to 30 days, is sent only to our site over a secure connection and cannot be read by scripts on the page. Clearing it removes this browser’s access. A private return key, if you created one, still opens your work. On the software, equipment quote and ROI tools, we check whether this browser already has older saved work. That check does not create or renew the older workspace cookie or create a saved workspace. If you already have saved work there, you can continue using its existing save and return options.
Professional account cookies. Signing in sets WordPress sign-in cookies. They are sent only to our site over a secure connection and cannot be read by scripts on the page. A sign-in ends when you sign out and lasts no longer than two days. Account pages also set a cookie named nw_pa_browser, which holds a random value that ties account requests to this browser and is cleared when the browser session ends. These cookies are needed for the account to work and are not used for analytics or advertising.
Browser storage. Some tools keep a temporary draft in your browser until you save or close the tab. If you turn off analytics with the controls below, we store that choice in your browser. This preference storage is not used to identify you.
Temporary selections for your workspace. If you choose to continue to your workspace from the membership, service pricing, software cost, equipment quote or ROI calculator, we keep your selected plan or scenarios in that browser while you sign in or create an account. This selection is separate from the calculator’s own browser or tab draft. The temporary selection lasts up to 30 minutes, or up to seven days from the first sign-up attempt. It is removed after a successful account save, when you discard it or sign out of the workspace, or when the site next finds that it has expired. A closed browser cannot remove it at an exact time. Clearing browser data or closing a private-browsing session may remove it sooner. You can download an editable file as a backup. The selection is not sent with your sign-up details; it is sent to your account only when you review it and choose to save. You can confirm your email on another device, then return to the original browser to finish saving.
Security. Our content delivery and security provider may set a short-lived cookie to tell people apart from automated traffic.
Google Analytics. We use Google Analytics to understand, in aggregate, which pages and tools people use and how they find the site. It sets cookies named _ga and _ga_ followed by an ID, and it collects information such as the pages you view, how long you stay, your browser and device type, the website that referred you and your approximate location. It does not receive what you type into our forms. It runs on most of the site, including our guides and our pages for practice owners with their calculators, planning tools and request forms. It does not run on your research plan or saved-information page, the treatment budget or laser hair removal worksheet, the Boca Raton consultation pages, or the pages where you request and open the checklists and emails we send. We do not load it for visitors located in Washington State, or when we cannot tell where a visitor is located. You can also block Google Analytics with Google’s opt-out browser add-on and read how Google uses this information.
Plausible Analytics. We use Plausible to count page visits, understand referral sources and measure selected actions such as downloads and link clicks. It does not set analytics cookies or use persistent visitor identifiers. It uses the IP address and browser information to generate a daily, site-specific identifier and estimate location; Plausible states that it does not store raw IP addresses or use the data for advertising or cross-site tracking. Its analytics processing and storage take place in the EU. We remove query strings, private access keys and address fragments before sending analytics. Private resource and saved-plan views use generic reporting addresses. We do not send form answers, saved-plan contents, calculator figures or site-search terms to Plausible. The private membership-plan copy does not load analytics. Professional account pages, including the workbook, saved plans, summaries and PDF downloads, do not load Google Analytics or Plausible. Signing in does not change how our public pages measure visits. See Plausible’s data policy.
Cloudflare Web Analytics. We also use Cloudflare Web Analytics to measure page visits and loading performance, including page paths, referring sites, browser and device type, and country. Cloudflare states that this service does not use analytics cookies or track individuals across sites, and does not log query strings. Its analytics beacon is blocked on professional account pages. The Google Analytics and Plausible controls below do not switch off Cloudflare Web Analytics. See Cloudflare’s Web Analytics documentation and Privacy Policy.
Your analytics choice. You can turn off Google Analytics and Plausible in this browser or allow analytics again. This affects future measurement in this browser. It does not unsubscribe you, delete saved information or change access to your emailed resources. Clearing browser storage clears this choice.
Affiliate links. Some links may be affiliate links. Affiliate programs and merchants we link to, which may include Amazon, may place and read cookies on your browser or use web beacons to record that you arrived from NuWays MD. That happens on their websites and is governed by their privacy policies. We receive commission reports from them, not a record of what you personally bought.

We do not use advertising pixels or retargeting, and we do not use analytics information to target advertising. If that changes, we will update this policy before we begin and give you a way to opt out.

Do Not Track and Global Privacy Control. Browsers can send a “Do Not Track” request, and there is no common standard for how websites should respond to it. Because we do not sell personal information or use it for targeted advertising, there is currently nothing for either signal to switch off. We will treat a Global Privacy Control signal from your browser as a request to opt out of any sale or sharing of your personal information, now and if our practices change.

How we use information

We use the information described above to:

send the resource you requested and keep your saved work available to you;
run your professional account, including confirming your email address, keeping your sign-in secure, saving your plans and creating your PDF summaries, reviewing practice-access applications, and measuring overall workbook use so we can fix errors and improve it;
respond to equipment help requests and handle consultation requests you submit;
send newsletters you confirmed, apply the interests you chose and honor your unsubscribe and preference choices;
run, secure and improve the site and its tools, including detecting spam, fraud and abuse;
understand, in aggregate, which guides and tools are useful; and
comply with the law, enforce our Terms of Use and protect the rights and safety of our readers, our business and others.

We do not use your saved research, treatment interests or consultation details to target advertising.

Service providers. We use companies that host and deliver the site (our servers are located in the United States), protect it from attacks, run our contact management and email delivery, and provide our business email. They receive only what they need to do that work, such as your name, email address, requested resources, interests, request references, source information and permission records for email delivery. They act on our instructions and may not use your information for their own marketing.

Professional accounts. Account emails, such as email confirmation, password resets, review updates and links you request, are sent through our email delivery provider. That provider is also our contact-management system, so your email address and a copy of each account email can appear there. These emails never include your saved figures, plan names or the content of a review decision; you sign in to read those. We do not add account holders to marketing lists. If you request the optional Practice Brief when signing up, we start its separate email-confirmation process after you confirm your account. Account confirmation does not subscribe you. Existing newsletter subscriptions and unsubscribe choices remain separate from your account. We do not share your saved plans or practice application with manufacturers, dealers, lenders or other companies, and we do not use your figures for research, benchmarks or published statistics. If that ever changes, we will ask for your separate permission first.

A practice or company you ask us to contact. A consultation request is shared with the practice named on the form, currently All About Aesthetics in Boca Raton, Florida, only after you give permission on that form, and only with the details shown on the request. We do not currently offer introductions to equipment companies. If we do, we will ask for separate permission that names each recipient before sharing anything.

Legal and safety reasons. We may disclose information when we believe in good faith that the law requires it, or to protect the rights, property or safety of NuWays MD, our readers or others.

Business changes. If Go2Brand LLC sells, merges or transfers the NuWays MD business, information may transfer with it. The new owner will be bound by this policy for information collected under it unless you agree otherwise.

With your permission. We share information in other ways only when you ask us to or agree.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done either in the past 12 months.

Categories at a glance

State privacy laws describe personal information in categories. Here is how ours fit together.

Contact details: name, email address and, if you give it, phone number. They come from you. We use them to send what you asked for and to reply. Our service providers receive them, and so does the practice you name, only with your permission.
Account details: name, email address, password (stored scrambled), sign-in records and your terms and newsletter choices. They come from you and your browser. We use them to run your account and keep it secure. Our hosting and email delivery providers receive what they need for that.
Professional details: practice name, role, region, website and the equipment, budget and quote information you describe. They come from you. We use them to answer equipment help requests and review practice-access applications. Our service providers receive them.
Health-related interests: treatment interests, research topics, consultation questions and the resources you request. They come from you. We use them to keep your plan, send the emails you chose and handle a consultation request. Our service providers receive them, and so does the practice you name, only with your permission.
Saved planning information: budget figures, calculator and workbook inputs, results, saved articles, notes and question answers. They come from you. We use them to keep your saved work available to you. Our hosting provider stores them, encrypted.
Internet and device activity: IP address, browser and device type, pages requested, the referring page, campaign labels, and email opens and clicks. They come from your browser and email app. We use them to deliver and protect the site and to learn which resources help. Our service providers receive them.

We do not collect Social Security, driver’s license or passport numbers, financial account or payment card numbers, precise geolocation or biometric information.

Health-related information

Research about a treatment can reveal something personal, even when you never tell us about your health. Saving a Botox research plan, choosing “laser treatments” as an email interest or requesting a consultation all suggest an interest in a health service. We treat this information as sensitive. We collect it only when you choose to give it to us for a purpose you selected, we use it only for that purpose, and we share it only as described above.

Residents of Washington and Nevada, and anyone who wants the details, can read our Consumer Health Data Privacy Policy.

How long we keep information

Saved workspaces in tools that do not require an account are deleted automatically after 180 days without an update. You can delete yours sooner from the tool.
Professional accounts and their saved plans are kept until you delete them or close the account. We do not delete them for inactivity. When you delete a plan, all of its saved revisions are erased from our database immediately. When you close your account, we delete the account, its plans, any practice application and our decision on it, and any pending account emails. We keep a coded record of the deletion, without your name, email address or plan contents, so that restoring a backup cannot bring the account back.
If you do not confirm your email within seven days of signing up, the account can no longer be confirmed, and it is deleted. You can sign up again.
We keep a short record that an account email was sent (its type, time and delivery status), not its contents.
The saved-work cookie lasts up to 30 days in your browser.
Email records are kept while you are subscribed or have an open request. After you unsubscribe, we keep the minimum needed to honor your choice and to show when and how you gave or withdrew permission.
Equipment and consultation requests are kept as long as we need them to respond and to maintain an accurate history, then deleted or stripped of identifying details.
Security records are usually kept for about 60 days.
Backups are replaced on a rolling schedule. Deleted information can remain in a backup until that backup is overwritten.

How we protect information

The whole site uses encrypted connections. Saved workspace records are encrypted in our database. Private email links and return keys are stored in a form that cannot be read back, and access to our administration area requires two-factor authentication. No system is perfectly secure, so please keep your private links and return key to yourself. Anyone who has them can open what they unlock.

Professional accounts require a password of at least 12 characters. Their sign-in and account forms are protected by Cloudflare Turnstile and attempt limits. Saved plans, practice applications and review messages are encrypted in our database with a key kept outside the database. This is not end-to-end encryption: our servers decrypt your plan to show it to you, and someone with administrative access to our servers could technically read it. Access to saved plans is limited to the NuWays MD staff who run the service. To see how the workbook is used, we look at overall counts, such as how many plans are saved or completed, not at individual plans. We open a saved plan only when you ask us for help with it, when we need to investigate a security or technical problem, or when the law requires it. PDF summaries are created in your browser; we do not keep a copy.

Your choices and rights

Email. Every marketing email includes an unsubscribe link, and your private preferences page lets you change interests or stop either newsletter. Requesting a resource never signs you up for a newsletter on its own.

Saved work and requests. You can delete a saved plan in the tool and withdraw an equipment or consultation request from its receipt.

Professional accounts. You can delete any saved plan from your workspace. To close your account, email [email protected] from the address on the account. A practice review is optional: your base workbook and saved plans stay available whether or not you apply.

Privacy rights. Depending on where you live, state law may give you the right to know what personal information we hold about you, get a copy of it, correct it, delete it, and opt out of its sale, its use for targeted advertising or certain profiling. We honor these requests from anyone in the United States, whether or not your state’s law requires it.

To make a request, email [email protected], or [email protected] for practice-owner matters, with the subject line “Privacy request.” We may ask you to confirm that you control the email address involved before we act. You may use an authorized agent; we may ask the agent for proof of that authority. We respond within 45 days and will tell you if we need up to 45 more days. We will not treat you differently for exercising these rights.

Appeals. If we decline your request, you may appeal by replying to our decision with the word “Appeal” within 60 days. We will respond within 45 days of receiving your appeal and explain our reasons. If you disagree with the result, you may contact your state attorney general.

California “Shine the Light.” We do not share personal information with third parties for their own direct marketing.

Nevada. We do not sell covered information as Nevada law defines it. Nevada residents may still send an opt-out request to [email protected], and we will honor it if our practices change.

Children

NuWays MD is written for adults. Our forms and tools are not intended for anyone under 18, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

Text messages

If a form offers text messages and you opt in, we will text you only about the request you submitted. Consent to texts is never required to use the site or to submit a request. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Carriers are not liable for delayed or undelivered messages. We do not sell or share mobile numbers or text-message consent with third parties for their marketing.

Visitors outside the United States

NuWays MD is intended primarily for readers in the United States. Our website and saved-information services store and process information in the United States. Plausible processes and stores its analytics data in the European Union, as described above.

Changes to this policy

When we change this policy, we will update the date at the top. If a change materially affects how we use information we already hold, we will post a notice on the site and, where appropriate, email subscribers before it takes effect.

Contact us

Go2Brand LLC, operator of NuWays MD
1309 Coffeen Ave STE 1200
Sheridan, WY 82801

Consumer and privacy questions: [email protected]
Practice owners and professional inquiries: [email protected]

For more detail on how our saving tools, return keys and request receipts work, see How your saved information works.