Privacy Policy

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. It applies to visitors to our Site, prospects we contact for business-to-business (B2B) marketing, and customers who use our services.

We are a U.S.-based marketing and SEO agency serving medical aesthetics practices and related businesses. We take privacy seriously and comply with applicable laws, including U.S. state privacy laws (e.g., California, Colorado, Connecticut, Virginia), CAN-SPAM, and (where relevant) the EU/UK GDPR.

If you do not agree with this Policy, please do not use our Site or provide us your information.

• We collect information you provide (e.g., forms, contracts), information from your device and browsing (e.g., cookies, analytics), and information from third-party sources (e.g., business contact databases for B2B outreach).
• We use your information to run our Site, deliver and improve services, communicate with you, provide customer support, personalize content and ads, and comply with law.
• We may share information with service providers (e.g., analytics, hosting, email, CRM), advertising partners, and, where you instruct us, your vendors.
• You have rights depending on where you live (e.g., access, deletion, correction, opt-out of targeted ads or the sale/sharing of data). We honor Global Privacy Control (GPC) signals for relevant jurisdictions.
• You can contact us with any questions or requests.

We collect the following categories of personal information for the business and commercial purposes listed below. Each category also indicates whether we “share” (for cross-context behavioral/targeted advertising) or “sell” personal information as defined by California law. We do not knowingly sell or share personal information of individuals under 16.

You can opt out of “sharing” for targeted advertising by using the “Do Not Sell or Share My Personal Information” link (if available on the Site), adjusting cookie preferences, or sending a request to us. We also honor GPC signals where applicable.

We collect:

• Information you provide directly: contact details, form submissions, emails, phone calls, meeting notes, account/contract data, billing and payment details (processed by third-party processors), testimonials, and support requests.
• Information from your device and use of the Site: IP address, device identifiers, cookie/SDK IDs, browser type, pages visited, time on page, referring/exit pages, and interactions with our content, emails, and ads.
• Information from third parties: B2B contact providers, social networks and ad platforms, partners/affiliates, public websites, and referral sources.

If you become a customer, we may process Client Content/Data under our master services agreement (MSA/SOW). In that case, we act as your processor/service provider, and our processing is governed by the contract’s data protection terms.

We use cookies, pixels, local storage, and similar tech to:

• Enable core Site functionality and security
• Analyze Site performance and usage
• Personalize content and measure campaigns
• Provide interest-based advertising (including retargeting)

Examples of tools we may use: Google Analytics (including GA4), Google Ads, Meta Pixel (Facebook/Instagram), LinkedIn Insight Tag, Microsoft Advertising, marketing automation/CRM platforms (e.g., HubSpot/ActiveCampaign/Mailchimp or similar), A/B testing and session analytics tools.

Your choices: You can manage cookies through our cookie banner (where available), your browser settings, platform-specific opt-outs, and the industry opt-out pages listed in Section 11. If you block cookies, some features may not work.

We do not support the older “Do Not Track” browser signal, but we honor Global Privacy Control (GPC) in relevant jurisdictions.

We use personal information to:

• Operate and secure the Site and our systems (including troubleshooting, debugging, and fraud prevention)
• Provide and improve our services, deliver proposals, and manage accounts
• Communicate with you about inquiries, projects, support, updates, and administrative messages
• Market and advertise our services, including retargeting and lookalike audiences where permitted
• Personalize content and measure performance
• Comply with legal obligations, enforce agreements, and protect our rights and users

Legal bases for EEA/UK visitors (where GDPR applies): performance of a contract; legitimate interests (e.g., B2B marketing, security, analytics); consent (e.g., non-essential cookies/marketing in certain jurisdictions); and legal obligations.

We may disclose personal information to:

• Service providers/Processors that host our Site, store data, provide analytics, advertising, communications, security, billing, and professional services. They may only use the data to perform services for us.
• Advertising/analytics partners to support targeted advertising, measurement, and reach. See your choices in Section 11.
• Business partners and subcontractors at your direction or to fulfill a project.
• Authorities or other parties when required by law, to enforce agreements, or to protect rights, safety, or property.
• Successors in a merger, acquisition, financing, or sale of assets (your information may be transferred as part of that transaction).

We do not sell your personal information for money. We may “share” data for cross-context behavioral advertising as defined by certain U.S. state laws; you can opt out (Section 11).

We may collect professional contact details from public websites, social networks, events, referrals, and reputable B2B data providers to contact businesses that may benefit from our services. Our outreach includes email, phone, social messages, and ads. You can opt out at any time (Section 11). We follow CAN-SPAM for commercial email.

We use administrative, technical, and physical safeguards designed to protect personal information. No system is 100% secure. If you believe your information has been compromised, contact us.

We retain personal information for as long as necessary to achieve the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type, business need, and legal requirements.

• Cookie/Tracking choices: Use the Site’s cookie banner (if available) and your browser/device settings. You can also visit the Digital Advertising Alliance at optout.aboutads.info, the Network Advertising Initiative at optout.networkadvertising.org, or Your Online Choices (EU/EEA) at youronlinechoices.eu.
• Email marketing: Click “unsubscribe” in any marketing email or email unsubscribe@rankandrejuvenate.com. Transactional/administrative messages may still be sent.
• Targeted advertising / Sale or Sharing opt-out (CA/CO/CT/VA and similar laws): Use our “Do Not Sell or Share My Personal Information” link (where available) or email privacy@rankandrejuvenate.com with “Opt-Out of Targeted Advertising.” We honor GPC signals where applicable.
• SMS/Calls: Follow provided instructions or reply STOP to opt out of SMS.

Your rights depend on where you live. We will not discriminate against you for exercising your rights.

California (CPRA)

You may have the right to: (i) know/access specific pieces and categories of personal information we collected about you; (ii) delete personal information; (iii) correct inaccuracies; (iv) opt out of selling/sharing; (v) limit use/disclosure of sensitive personal information (we do not use sensitive personal information for inferring characteristics). To exercise, see Section 13.

Colorado, Connecticut, Virginia, and Other U.S. State Laws

You may have the right to confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale of personal data, and certain profiling. You can also appeal our decision if we decline a request (see Section 13).

Nevada

We do not sell covered information as defined by Nevada law. Nevada residents can still email privacy@rankandrejuvenate.com to register an opt-out.

EU/EEA & UK (GDPR)

Where GDPR applies, you may have the right to access, rectification, erasure, restriction, data portability, and objection. Where we rely on consent, you can withdraw it at any time. You may also lodge a complaint with your local supervisory authority.

Submit a request to us with:

• What you’re requesting (e.g., access, deletion, correction, opt-out)
• Your full name and the email address you used with us
• Your state/country of residence

We may take steps to verify your identity (e.g., email verification, reasonable additional info). You may authorize an agent to submit a request on your behalf, subject to verification of the agent’s authority and your identity. For states that provide an appeal right, you may email us with the subject line “Privacy Appeal” if you disagree with our response.

We operate in the United States and may transfer data to service providers in other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect international transfers.

Our Site and services are intended for business users and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child provided us information, contact us and we will take appropriate steps.

Our Site may link to third-party websites, apps, and services that we do not control. This Policy does not apply to those third parties. Review their privacy policies before providing personal information.

We may update this Policy from time to time. The “Effective date” at the top indicates when it was last revised. Material changes will be posted on the Site and/or communicated as required by law. Your continued use of the Site after changes means you accept the updated Policy.

For questions or requests, contact us. Privacy requests may also be emailed to privacy@rankandrejuvenate.com.

Controller vs. Processor: For Site visitors and our own marketing/operations, we act as a controller (or “business”). For customer-provided data we process to deliver services, we act as a processor/service provider per our contract, which governs data handling and subprocessor disclosures.

Subprocessors: We maintain a list of core subprocessors (e.g., hosting, analytics, communications, CRM, billing). Upon request, we can provide a current list and notify customers of material changes in accordance with our contract.

CAN-SPAM: Commercial emails will include our valid contact information and an easy way to opt out.

“Personal information” / “personal data”

Information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable person.

“Sale” / “Sell”

Disclosing personal information for monetary or other valuable consideration as defined by law. We do not sell for money.

“Share” (California)

Disclosing personal information for cross-context behavioral advertising.

“Targeted advertising”

Advertising based on personal data obtained or inferred from your activities across nonaffiliated websites or apps over time.

“Processor/Service Provider”

A company that processes personal information on behalf of another.

“GPC”

Global Privacy Control, a browser or device signal indicating an opt-out preference.

• California (CPRA): Rights to know, delete, correct, opt out of sell/share, and non-discrimination. We honor GPC signals. Sensitive personal information not used for inferring characteristics.
• Colorado/Connecticut/Virginia: Rights to access, correct, delete, portability, and opt out of targeted ads/sale/profiling. Right to appeal a denied request.
• Utah/Nevada: Opt-out of sale (as defined by law); we do not sell covered information.

This Privacy Policy is for general informational purposes and does not constitute legal advice. For counsel specific to your situation, consult an attorney.