HighKey Privacy Policy
1. Who We Are and What This Covers
HighKey Enterprises LLC, doing business as HighKey Agency and HighKey Clout (“HighKey,” “we,” “us”), is a marketing agency for medical aesthetics, plastic surgery, and wellness practices, based in San Juan, Puerto Rico.
This Privacy Policy explains how we collect, use, and share personal information through highkeyagency.com (the “Site”), our booking forms, and related emails, texts, and calls. Information we handle for clients under a signed services agreement is governed by that agreement.
Please do not submit patient health information. Our Site forms are for business inquiries only. They are not designed to receive protected health information about patients.
2. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Contact details | Name, email, phone number | You, through forms and bookings |
| Business details | Practice name, role, location, website, social handles, services offered, revenue range, marketing budget | You, through our questionnaire and calls |
| Communications | Emails, texts, call notes, call recordings and transcripts | You, when you contact us or join a call |
| Device and usage data | IP address, browser, device type, pages viewed, referring site, time on page | Automatically, through cookies and pixels |
| Advertising data | Ad clicks, campaign source, conversion events | Automatically, and from ad platforms such as Meta |
| Applicant data | Resume, work history, contact details | You, through our careers portal |
3. How We Use Your Information
- Respond to inquiries, check fit, and schedule and hold calls.
- Send call confirmations, reminders, and follow-ups by email, text, and phone.
- Send marketing emails about our services, which you can opt out of anytime.
- Prepare proposals and agreements if you choose to work with us.
- Measure Site performance and improve our pages and offers.
- Run and measure our own advertising, including retargeting on Meta.
- Review job applications.
- Protect the Site, prevent fraud, and meet legal obligations.
4. How We Share Information
Service providers. Vendors that help us run the business, under contracts that limit their use of your data:
- CRM, booking, email, and text messaging: GoHighLevel (LeadConnector)
- Email marketing: Mailchimp
- Email, documents, calendar, and video calls: Google Workspace
- Call recording and transcription: Fathom
- Workflow automation: Zapier
- Contracts and e-signature: DocuSign
- Analytics and advertising: Google Analytics and Meta
- Website hosting: [HOSTING PROVIDER]
- Recruiting: Breezy HR
Text message consent is never shared. We do not share or sell your mobile number or text-messaging opt-in data with third parties for their own marketing.
Other sharing. We may disclose information to comply with law or legal process, to protect our rights or others’ safety, to professional advisors such as lawyers and accountants, or as part of a merger, sale, or reorganization of our business.
5. Cookies, Pixels, and Ad Tracking
The Site uses cookies and similar tools to keep it working, measure traffic, and show our ads to people who visited. These include Google Analytics, the Meta Pixel, and tools embedded in our booking calendar and videos.
Under some U.S. state laws, using ad pixels for targeted advertising can count as “sharing” or “selling” personal information. You can opt out at any time:
- Use our cookie settings link in the footer, if shown.
- Turn on Global Privacy Control in your browser. We treat it as an opt-out request.
- Adjust ad preferences in your Meta and Google account settings.
- Block or delete cookies in your browser settings. Some Site features may not work without them.
- Install the Google Analytics opt-out add-on.
6. Retention, Security, Location, and Children
Retention. We keep personal information as long as needed for the purposes above, then delete or anonymize it. Inquiry and lead records are kept for up to 3 years after last contact unless you ask us to delete them sooner. Client records follow the retention terms in the client agreement and our legal obligations.
Security. We use reasonable administrative, technical, and physical safeguards. No system is fully secure, so we cannot guarantee absolute security.
Location. We are based in Puerto Rico and use providers in the United States. If you visit from outside the U.S., your information will be transferred to and processed in the U.S.
Children. The Site is for adults in business. We do not knowingly collect information from anyone under 18. If you believe a minor has sent us information, contact us and we will delete it.
7. Your Rights and Choices
Depending on where you live, you may have the right to:
- Know what personal information we hold about you and get a copy.
- Correct inaccurate information.
- Delete your information.
- Opt out of targeted advertising and any “sale” or “sharing” of your information.
- Withdraw consent you gave earlier.
- Appeal if we deny your request.
We honor these requests for all Site visitors where we reasonably can, whether or not a specific law requires it. We will not treat you differently for using them.
Quick opt-outs. Reply STOP to any text. Click unsubscribe in any marketing email. Tell us on a call to stop calling.
To make a request, email [email protected] with the subject “Privacy Request.” We will verify your identity using the details you gave us and respond within 45 days. An authorized agent may submit a request on your behalf with your written permission.
8. Changes and Contact
Contact us: HighKey Enterprises LLC 1250 Ave Ponce de Leon, Ste 301 PMB 0800 San Juan, PR 00907 [email protected]
