Privacy Policy

Last updated: [DD Month 2026]

This Privacy Policy explains how Medspa Exit Report (“Medspa Exit Report,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit medspaexitreport.com (the “Site”), subscribe to our newsletter, contact us, download a guide, or otherwise interact with our content.

Medspa Exit Report is the M&A intelligence platform for medical aesthetics, published by Salesenzine Ltd ([company number], [registered address]). Salesenzine Ltd is the data controller responsible for your personal information under applicable data protection law.

Discretion is part of what we do. We publish for an audience that treats confidentiality as non-negotiable, and we hold ourselves to the same standard with your data.

1. Scope of this policy

This policy applies to personal information we collect through the Site and our related communications, including our monthly digest, The Exit Brief, and any gated guides or resources we offer.

It does not apply to third-party websites we link to — including the advisory firm Olympic M&A (olympicma.com) — each of which operates under its own privacy policy. We encourage you to read the privacy policy of any site you visit.

2. Information we collect

Information you give us directly

  • Newsletter sign-up: your name and email address when you subscribe to The Exit Brief.
  • Contact and enquiry forms: your name, email address, phone number if you provide one, and any details you choose to include in your message.
  • Gated content: the information you submit to access a downloadable guide, benchmark, or report.
  • Correspondence: any information you provide when you write to us or respond to our communications.

Please do not send confidential, sensitive, or transaction-specific information through general Site forms. If you are exploring a sale, acquisition, or recapitalization and want a confidential conversation, we will direct you to Olympic M&A, who handle those discussions under their own confidentiality terms.

We do not ask for, and you should not send us, patient information, protected health information, or anything else subject to HIPAA or equivalent health-privacy law.

Information we collect automatically

When you visit the Site, we and our service providers may collect certain technical information through cookies and similar technologies, including:

  • IP address and approximate location;
  • browser type, device type, and operating system;
  • pages viewed, links clicked, time on page, and referring website;
  • date and time of access.

See Section 6 (Cookies and tracking) for details and your choices.

Information from third parties

We may receive limited analytics or engagement data from the platforms we use to deliver content and email — for example, whether a newsletter was opened or a link was clicked — and aggregate audience data from social platforms where we publish.

3. How we use your information

We use personal information to:

  • deliver and administer The Exit Brief and other communications you have requested;
  • provide the guides, benchmarks, and resources you ask for;
  • respond to your enquiries and correspondence;
  • operate, maintain, and improve the Site and our content;
  • understand which topics and articles are most useful to our readers;
  • protect the Site against fraud, abuse, and security threats;
  • comply with our legal and regulatory obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Legal bases for processing (UK/EU readers)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

  • Consent — for example, when you opt in to receive The Exit Brief. You may withdraw consent at any time.
  • Legitimate interests — to operate and improve the Site, understand our audience, respond to enquiries, and keep our services secure, balanced against your rights and reasonable expectations.
  • Legal obligation — where processing is required to comply with the law.

5. Sharing your information

We share personal information only as described below, and only as necessary:

  • Service providers (processors): companies that help us run the Site and our communications — for example, our hosting provider [provider], our email platform [provider], and our analytics provider [e.g., Google Analytics]. These providers process data on our behalf under contract and may not use it for their own purposes.
  • Olympic M&A: Medspa Exit Report is the publication; Olympic M&A is the independent advisory firm we refer ready readers to. If you choose to be connected with an advisor — by following a referral link, submitting a contact request, or asking us for an introduction — the information you provide for that purpose will be shared with Olympic M&A, who will then process it under their own privacy policy. We will not share your information with Olympic M&A for advisory purposes unless you take a step to request it.
  • Legal and safety reasons: where required by law, regulation, or legal process, or to protect the rights, property, or safety of Salesenzine Ltd, our readers, or others.
  • Business transfers: if Salesenzine Ltd is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

6. Cookies and tracking

The Site uses cookies and similar technologies to function correctly, remember your preferences, and help us understand how the Site is used:

  • Essential cookies — required for the Site to work.
  • Preference cookies — remember choices you have made, such as dismissing a banner.
  • Analytics cookies — measure and improve performance (for example, [Google Analytics]).
  • Third-party content — pages that embed external media (for example, YouTube or LinkedIn) may set cookies controlled by those providers.

You can control or disable cookies through your browser settings and, where shown, through our cookie consent banner. Disabling some cookies may affect how the Site works.

We honor Global Privacy Control (GPC) signals where required by applicable law.

7. International data transfers

We are based in [the United Kingdom], and many of our readers are in the United States. Some of our service providers may store or process data outside your country of residence.

Where personal information is transferred internationally, we take steps to ensure it is protected by appropriate safeguards — such as adequacy regulations, the International Data Transfer Agreement or UK Addendum, or Standard Contractual Clauses — consistent with applicable law.

8. How long we keep your information

We retain personal information only for as long as necessary for the purposes set out in this policy, including any legal, accounting, or reporting requirements:

  • Newsletter data — until you unsubscribe or ask us to delete it, plus a short suppression record so we do not email you again.
  • Contact and enquiry data — for as long as needed to handle your enquiry and for a reasonable period afterward, then deleted or anonymized.
  • Analytics data — for the retention period configured with our analytics provider.

When information is no longer needed, we securely delete or anonymize it.

9. Your rights

Subject to applicable law, you have the right to:

  • access the personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request erasure of your information;
  • object to or restrict certain processing;
  • request portability of information you provided to us;
  • withdraw consent at any time where we rely on it — for example, by using the unsubscribe link in any email.

To exercise any of these rights, contact us using the details in Section 13. We will respond within the timeframe required by law. We will not discriminate against you for exercising a privacy right.

Additional rights for U.S. state residents

If you are a resident of California, Colorado, Connecticut, Virginia, Texas, or another state with a comprehensive privacy law, you may have the right to know what personal information we collect, to access or delete it, to correct it, to obtain a portable copy, and to opt out of sale, sharing, targeted advertising, or profiling with legal effects.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for profiling that produces legal or similarly significant effects.

You may use an authorized agent to submit a request on your behalf, and you may appeal a decision by writing to us at the address in Section 13.

Complaints

If you are in the UK and believe we have not handled your information properly, you may complain to the Information Commissioner’s Office (ICO) at ico.org.uk. If you are elsewhere, you may contact your local data protection authority or, in the U.S., your state Attorney General.

10. How we protect your information

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

11. Children’s privacy

The Site is intended for professional adults — practice owners, operators, executives, and investors — and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Links to other sites

The Site contains links to third-party websites, including Olympic M&A and external sources we cite. We are not responsible for the privacy practices or content of those sites. This policy applies only to medspaexitreport.com.

13. Contact us

If you have questions about this policy or wish to exercise your rights, contact us at:

Medspa Exit Report Published by Salesenzine Ltd Email: info@medspaexitreport.com Phone: +1 775-406-9968 [Registered address]

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Site or, where appropriate, by email. Your continued use of the Site after an update means you accept the revised policy.