Last updated: August 30, 2026

These instructions apply to information stored in systems controlled by Sam Medspa and service providers processing information on our behalf. They do not delete messages, account information or other data retained independently by Meta on Facebook or Instagram.

Information the messaging assistant may process

When you communicate with Sam Medspa through Facebook Messenger or Instagram, we may process:

• Your name, username and platform account identifier
• The content of your messages and our responses
• The date, time and status of the conversation
• Contact information you voluntarily provide, such as your email address and telephone number
• Appointment preferences, including preferred clinic location, day and time
• The service or treatment in which you express interest
• Whether you are a previous Sam Medspa client
• Conversation-routing information, including whether a member of our team has taken over the conversation
• Technical and referral context supplied by the platform, such as the advertisement or post connected to an inquiry

How we use messaging information

• Respond to general questions about Sam Medspa services
• Assist with appointment inquiries
• Provide consistent customer service in English or Arabic
• Refer conversations to authorized Sam Medspa personnel when human assistance is required
• Maintain the security, reliability and appropriate operation of the messaging service

The assistant provides general information only. It does not provide a medical diagnosis, medical advice or a guarantee that an appointment is available.

Automated processing and service providers

Our messaging service uses automated technology. OpenAI may process message content to help classify inquiries and generate proposed responses. Cloudflare provides application infrastructure, message routing, operational storage and security services. SiteGround hosts the private WordPress administration interface that connects authorized staff to the messaging service. Meta operates Facebook Messenger and Instagram and processes information under its own terms and privacy practices.

Authorized Sam Medspa personnel may review conversations when assistance, quality control or follow-up is required. Sam Medspa does not sell messaging information or share it with third parties for their independent marketing purposes.

How to request deletion

1. Email [email protected].
2. Use the subject line Messaging Data Deletion Request.
3. State whether you contacted us through Facebook Messenger or Instagram.
4. Provide the name of the Sam Medspa Page or Instagram account you contacted.
5. Provide the name or username used for the conversation and, if possible, the approximate date of the conversation.
6. If you provided an email address or telephone number in the conversation, include it so we can locate the correct record.

Do not send your password or a copy of government identification unless we specifically determine that additional verification is required and provide secure instructions.

We may request reasonable information to verify your identity and prevent unauthorized deletion. Once verified, we will delete or de-identify eligible information within our control and, where applicable, direct our service providers to do the same. We may retain limited information when required by law or reasonably necessary for security, fraud prevention, dispute resolution or another lawful obligation. We will confirm completion or explain why particular information cannot be deleted.

Messages retained by Meta

Deleting information from Sam Medspa’s systems does not necessarily delete the original conversation or other information retained by Meta. To manage or delete information held by Facebook or Instagram, use the privacy and account controls provided by Meta or visit the Meta Privacy Centre.

Retention

Operational data held by the messaging assistant is scheduled for deletion after 90 days. Limited, non-readable security markers may be retained to prevent delayed message reprocessing; they do not contain the original name, username or telephone number in readable form. Information separately transferred to an appointment or clinical record is governed by the retention requirements applicable to that record. We may also retain limited information when required by law or reasonably necessary for security, fraud prevention or dispute resolution.