Last updated: September 2026
Your health information is covered by a separate notice
This page is about the website. The medical information the practice holds about you as a patient is governed by our Notice of Privacy Practices, which sets out how we may use and disclose protected health information and what rights you have over it. The two documents are separate on purpose, and neither one replaces the other.
Information you give us
If you submit the consultation request form, we receive the name, email address, telephone number, procedure of interest, and message you enter. That information is delivered to the practice by email through our forms provider, Formspree. It is used to contact you about your enquiry. We do not sell it, rent it, or share it for anyone else’s marketing.
Please do not submit detailed medical history through this form. It is a general enquiry form, not a clinical record, and it is not the right channel for protected health information.
Information collected automatically
This site uses Google Tag Manager to load Google Analytics 4 and Google Ads conversion tracking. With your consent, these record:
- Pages viewed, and how you arrived at the site
- Approximate location derived from IP address
- Device, browser, and screen characteristics
- Interactions we count as conversions: consultation form submissions, telephone-number clicks, email clicks, and Get Directions clicks
What we do not send to Google
We do not transmit personal or health information to any advertising or analytics provider. No name, email address, telephone number, or message you enter on this site is passed to Google in any form, hashed or otherwise. Google’s Enhanced Conversions feature is not used by this practice, and it is switched off at the conversion tag, in the tag container, and at the advertising account itself.
When a consultation form is submitted successfully, what a conversion records is that a submission happened, which form it came from, and, if you chose to tell us from a short fixed list, how you heard about the practice. Nothing that identifies you travels with it.
Consent, and how to decline
Analytics and advertising storage are set to denied by default. Nothing is stored until you choose Accept in the banner shown on your first visit. Choosing “Decline analytics” keeps that denial in place; the site works identically either way.
Your choice is remembered in your browser’s local storage. Clearing your browsing data will present the banner again. You can also opt out through the Google Analytics opt-out browser add-on or through your browser’s own privacy controls.
That banner is a cookie choice and nothing more. It is not a HIPAA authorization and cannot stand in for one. The U.S. Department of Health and Human Services, Office for Civil Rights has stated expressly that a website cookie banner does not satisfy the requirements for a valid HIPAA authorization. Accepting analytics here gives no permission to use or disclose your protected health information. Any such permission is a separate document that you sign.
Before-and-after photographs
Before-and-after photographs in the gallery are aligned by software that identifies reference points on the face, for example the corners of the eyes and mouth, so that the two images line up and a patient’s face does not appear to shift between them. The coordinates are used at the moment the images are prepared and are then discarded.
Illinois law excludes ordinary photographs from the definition of a biometric identifier, and the practice’s position is that this alignment step does not create one. We ask for written consent for it anyway, on a separate initial line of the new patient consent form, and we publish what is collected and for how long in our biometric policy.
How long it is kept
Google Analytics data associated with cookies and identifiers is retained for 14 months, after which it is deleted automatically. Enquiries you send us are retained by the practice for as long as needed to respond to you and to meet our record-keeping obligations.
Third parties
- Google — Analytics, Tag Manager, and Ads conversion measurement
- Formspree — delivery of consultation form submissions
- Vercel — website hosting, including standard server logs
- YouTube — video testimonials, embedded in privacy-enhanced mode so no cookie is set unless you press play
Your rights
Depending on applicable law, you may have rights concerning your personal information, including rights to request access, correction, or deletion. These rights may be limited where we are required to retain information under HIPAA, medical record requirements, litigation obligations, or other applicable law. We will review and respond to verified requests as required by applicable law.
Contact
For any privacy question, or to make a request about your information, contact us at info@drkeni.com or 630.613.9660, or write to FaceLove Facial Plastic Surgery, One TransAm Plaza Drive, Suite 312, Oakbrook Terrace, IL 60181.