Privacy Policy | Summit Aesthetics

1. Introduction

Summit Aesthetics ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, services, and AI-powered automation systems (collectively, the "Services").

2. Information We Collect

We collect the following types of information:

Contact Information: Name, email address, phone number, business name, and clinic details provided when you inquire about our services or sign up.
Usage Data: Information about how you interact with our website, including IP address, browser type, pages visited, and time spent on pages.
Client Data (for active clients): Information necessary to configure your automation systems, including but not limited to patient lead data, appointment schedules, and business metrics.
Communication Data: Records of our communications with you, including emails, call recordings (with consent), and support tickets.

3. How We Use Your Information

We use your information for the following purposes:

To provide, maintain, and improve our Services
To communicate with you about your account, projects, and support requests
To process payments and manage billing
To configure and optimize your AI automation systems
To analyze usage patterns and improve our website and offerings
To meet legal requirements and protect our rights
To send marketing communications (with your consent, which you can withdraw at any time)

4. Data Storage and GoHighLevel

Summit Aesthetics builds automation systems on top of enterprise-grade platforms, including GoHighLevel (GHL), which serves as the primary Customer Relationship Management (CRM) system for our clients.

Important: Your lead and patient data is stored in GoHighLevel's secure, enterprise-grade infrastructure. GoHighLevel maintains SOC 2 Type II audit reports and employs enterprise-grade encryption. For more information about GoHighLevel's security practices, please visit gohighlevel.com/security.

We also utilize Supabase for certain operational data, Vercel for hosting, and Retell AI for voice automation. Each partner maintains strict security standards and data protection measures.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: With trusted third-party vendors who assist us in operating our business (e.g., payment processors, hosting providers, AI platforms).
Legal Requirements: When required by law, court order, or government regulation.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
With Your Consent: In any other circumstances where we have your explicit permission.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security audits. However, no method of transmission over the internet is completely secure.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (where permitted by law)
Object to or restrict certain processing activities
Request portability of your data
Withdraw consent for marketing communications

To exercise these rights, please contact us using the information below.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. For active clients, this typically means the duration of our business relationship plus any required retention period. Upon contract termination, client data is exported and removed from our systems within 30 days, unless otherwise specified in your service agreement.

9. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors come from. You can control cookie preferences through your browser settings. For more information, please see our Cookie Policy (available upon request).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Summit Aesthetics

Email: privacy@summitaesthetics.com

For data-related requests, please allow up to 30 days for a response.