Privacy Policy
Who we are
Health Hue Digital ("Health Hue Digital," "we," "us," or "our") is a business-to-business marketing and software provider for medical aesthetic clinics, including medical spas, dermatology practices, and oculofacial and plastic surgery practices, across Canada and the United States. We provide custom clinic websites, marketing and growth services, the Health Hue Hub clinic operating platform, and Hue AI automation.
This policy explains what information we collect when you visit healthhuedigital.com or contact us, how we use it, the legal basis for using it, and the choices you have. It applies to our website and our own marketing activities.
Important: where we operate the Health Hue Hub for a clinic that is our client, and that platform processes a clinic's patient personal or health information, we act as a service provider and data processor on the clinic's behalf and on the clinic's instructions, not as the controller of that information. Patient data handled through the Hub is governed by our separate client agreement and the clinic's own privacy notice, and is not covered by this website policy. See "How the Health Hue Hub handles clinic and patient information" below.
1. Information we collect
We collect information in three ways:
- Information you give us, such as your name, email address, phone number, clinic or business name, role, and anything you include in a form, booking request, consultation enquiry, or message to us.
- Information collected automatically, such as your IP address, approximate location, browser and device type, pages viewed, and the source that referred you, gathered through privacy-respecting analytics (see Section 4).
- Information from third parties, such as details you share when you connect an advertising or business account, when a referral partner introduces you, or that we receive from our marketing and lead-generation tools.
We do not seek to collect sensitive personal information through our website, and we ask that you not submit any patient health information to us through this site.
2. How we use your information
We use the information we collect to:
- Respond to your enquiries, schedule calls and demos, and deliver the materials you request;
- Provide, operate, maintain, and improve our website, products, and services;
- Send relevant updates, product news, or marketing where you have asked to hear from us or where permitted by law, and to let you opt out at any time;
- Understand how our website is used so we can make it better;
- Keep our systems secure and prevent fraud or misuse;
- Meet our legal, regulatory, accounting, and contractual obligations.
3. Consent and legal basis
We are based in Canada and our handling of personal information is grounded in the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. We collect, use, and disclose personal information with your knowledge and consent, except where collection, use, or disclosure without consent is permitted or required by law.
By submitting a form, booking a call, or contacting us, you consent to the handling of your information as described in this policy. We rely on consent and on our legitimate interest in operating and growing a business-to-business service. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent may mean we can no longer provide certain services to you.
4. Cookies and privacy-respecting analytics
Our website uses a small number of cookies and privacy-respecting analytics to understand how the site is used and to keep it working properly. We use Cloudflare for hosting and web analytics; Cloudflare's analytics are designed to measure site traffic without building advertising profiles of individual visitors and without the kind of cross-site tracking used by conventional ad networks.
We do not use website analytics to build advertising profiles of individual visitors. You can control or block cookies through your browser settings; disabling them may affect how some parts of the site work.
5. How we share information
We do not sell your personal information.
We share personal information only with trusted service providers who help us run our business, for example, website and platform hosting, content-delivery and security, customer-relationship and booking tools, email delivery, and analytics, and only to the extent they need it to perform their work for us. These providers are required to protect the information and to use it only for the services they provide to us.
We may also disclose information where we are required to do so by law, to comply with a legal process, to enforce our agreements, or to protect the rights, safety, or property of Health Hue Digital, our clients, or others. If our business is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.
6. How the Health Hue Hub handles clinic and patient information
The Health Hue Hub is a white-labelled clinic operating platform we provide to clinic clients. When a clinic uses the Hub, the Hub may process personal and health information about that clinic's patients.
In that role, Health Hue Digital acts as a service provider and data processor on behalf of the clinic. The clinic, not Health Hue Digital, decides what information is collected and why, and remains the party responsible to its patients for that information. We process patient information only on the clinic's documented instructions and as set out in our client agreement.
For clinics located in Ontario, this means a clinic may be a "health information custodian" under Ontario's Personal Health Information Protection Act (PHIPA), and we may act as its "agent" or information-processing service provider under that Act. Comparable roles apply under the privacy and health-information laws of other provinces and US states where our clients operate.
Patients of a clinic should refer to that clinic's own privacy notice to understand how their information is handled. This website policy does not govern patient information processed through the Hub.
7. Data retention
We keep personal information only as long as necessary to fulfil the purposes described in this policy, to provide our services, to meet our legal, tax, and accounting obligations, and to resolve disputes and enforce our agreements. When information is no longer needed, we securely delete or anonymise it. Patient information processed through the Hub is retained according to the clinic's instructions and our client agreement, not this policy.
8. International transfers
We are based in Canada, and some of our service providers operate in the United States and other countries. Where your information is processed or stored outside your home jurisdiction, it may be subject to the laws of those countries, including lawful access requests by courts, law enforcement, and government authorities there. We take reasonable steps to ensure your information remains protected to a standard consistent with this policy wherever it is processed.
9. Your rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you and ask how we use it;
- Ask us to correct information that is inaccurate or incomplete;
- Withdraw your consent to our use of your information, subject to legal and contractual limits;
- Unsubscribe from our marketing communications at any time.
To make a request, contact us using the details in Section 13. We will respond within the timeframes required by law and may need to verify your identity first. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your jurisdiction.
10. Security
We use reasonable administrative, technical, and physical safeguards intended to protect personal information against loss, theft, and unauthorised access, use, or disclosure. No method of transmission over the internet or method of electronic storage is completely secure, however, and we cannot guarantee absolute security.
11. Children's privacy
Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.
12. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the "last updated" date at the top of this page. Material changes will be highlighted here. Your continued use of our website after an update means you accept the revised policy.
13. Contact us
Questions about this policy, or requests about your personal information, can be directed to our privacy contact:
- Email:
- Phone:
- Mail: Health Hue Digital, 701 N Andrews Ave, Fort Lauderdale, FL 33311, United States, Canada