Facebook Instagram Linkedin Quora

Privacy Policy

Privacy Policy
Last updated: 27/07/2026

This Privacy Policy explains how Medspa Exit Report (“Medspa Exit Report,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit medspaexitreport.com (the “Site”), subscribe to our newsletter, contact us, download a guide, or otherwise interact with our content.

Medspa Exit Report is the M&A intelligence platform for medical aesthetics. Medspa Exit Report is the data controller responsible for your personal information under applicable data protection law.

Discretion is part of what we do. We publish for an audience that treats confidentiality as non-negotiable, and we hold ourselves to the same standard with your data.

1. Scope of this policy

This policy applies to personal information we collect through the Site and our related communications, including our monthly digest, The Exit Brief, and any gated guides or resources we offer.

It does not apply to third-party websites we link to — including the advisory firm Olympic M&A (olympicma.com) — each of which operates under its own privacy policy. We encourage you to read the privacy policy of any site you visit.

2. Information we collect

Information you give us directly

  • Newsletter sign-up: your name and email address when you subscribe to The Exit Brief.
  • Contact and enquiry forms: your name, email address, phone number if you provide one, and any details you choose to include in your message.
  • Gated content: the information you submit to access a downloadable guide, benchmark, or report.
  • Correspondence: any information you provide when you write to us or respond to our communications.

Please do not send confidential, sensitive, or transaction-specific information through general Site forms. If you are exploring a sale, acquisition, or recapitalization and want a confidential conversation, we will direct you to Olympic M&A, who handle those discussions under their own confidentiality terms.

We do not ask for, and you should not send us, patient information, protected health information, or anything else subject to HIPAA or equivalent health-privacy law.

Information we collect automatically

When you visit the Site, we and our service providers may collect certain technical information through cookies and similar technologies, including: IP address and approximate location; browser type, device type, and operating system; pages viewed, links clicked, time on page, and referring website; date and time of access. See Section 6 (Cookies and tracking) for details and your choices.

Information from third parties

We may receive limited analytics or engagement data from the platforms we use to deliver content and email — for example, whether a newsletter was opened or a link was clicked — and aggregate audience data from social platforms where we publish.

3. How we use your information

We use personal information to: deliver and administer The Exit Brief and other communications you have requested; provide the guides, benchmarks, and resources you ask for; respond to your enquiries and correspondence; operate, maintain, and improve the Site and our content; understand which topics and articles are most useful to our readers; protect the Site against fraud, abuse, and security threats; comply with our legal and regulatory obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Legal bases for processing (UK/EU readers)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases: Consent — for example, when you opt in to receive The Exit Brief. You may withdraw consent at any time. Legitimate interests — to operate and improve the Site, understand our audience, respond to enquiries, and keep our services secure, balanced against your rights and reasonable expectations. Legal obligation — where processing is required to comply with the law.

5. Sharing your information

We share personal information only as described below, and only as necessary:

  • Service providers (processors): companies that help us run the Site and our communications — for example, our hosting provider [provider], our email platform [provider], and our analytics provider [e.g., Google Analytics]. These providers process data on our behalf under contract and may not use it for their own purposes.
  • Olympic M&A: Medspa Exit Report is the publication; Olympic M&A is the independent advisory firm we refer ready readers to. If you choose to be connected with an advisor, the information you provide for that purpose will be shared with Olympic M&A, who will then process it under their own privacy policy. We will not share your information with Olympic M&A for advisory purposes unless you take a step to request it.
  • Legal and safety reasons: where required by law, regulation, or legal process, or to protect the rights, property, or safety of Medspa Exit Report, our readers, or others.
  • Business transfers: if Medspa Exit Report is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

6. Cookies and tracking

The Site uses cookies and similar technologies to function correctly, remember your preferences, and help us understand how the Site is used: Essential cookies, Preference cookies, Analytics cookies, Third-party content cookies. You can control or disable cookies through your browser settings and, where shown, through our cookie consent banner. We honor Global Privacy Control (GPC) signals where required by applicable law.

7. International data transfers

We are based in [the United Kingdom], and many of our readers are in the United States. Where personal information is transferred internationally, we take steps to ensure it is protected by appropriate safeguards, consistent with applicable law.

8. How long we keep your information

Newsletter data, contact/enquiry data, and analytics data are retained only as long as necessary, then deleted or anonymized.

9. Your rights

You have the right to access, correct, erase, restrict/object to processing, request portability, and withdraw consent. Contact us using details in Section 13. Additional rights apply for U.S. state residents (CA, CO, CT, VA, TX, etc.). Complaints in the UK can be made to the ICO.

10. How we protect your information — reasonable technical and organizational security measures are used.

11. Children’s privacy — the Site is not directed to children under 16.

12. Links to other sites — the Site links to third parties including Olympic M&A; we’re not responsible for their practices.

13. Contact us

Medspa Exit Report
Email: info@medspaexitreport.com
Phone: +1 775-406-9968

14. Changes to this policy — we may update this policy; continued use means acceptance of the revised policy.