Privacy Policy
Last updated: June 1, 2025
Introduction
Aestive Digital (“we,” “our,” or “us”) operates the website aestive.digital and provides web design, development, SEO, website maintenance, and AI automation services exclusively for med spas and aesthetic clinics. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website or engage us for services. By using this website, you agree to the practices described in this policy. If you do not agree, please do not use the site.
Information We Collect
- Name and business name when submitting contact or booking forms
- Email address for correspondence
- WhatsApp or phone number when provided
- Business details shared during discovery calls or consultations
- Payment information processed through third-party payment processors (we do not store card details)
- IP address and approximate geographic location
- Browser type, operating system, and device type
- Pages visited, time on site, and referral source
- Cookies and similar tracking technologies (see Section 06)
We may receive information when you contact us via LinkedIn, WhatsApp, or email platforms. We do not purchase or acquire data from third-party data brokers.
How We Use Your Information
We use collected information to:
- Respond to enquiries and schedule discovery calls
- Deliver contracted services (website design, development, SEO, maintenance, AI automation)
- Send project updates, invoices, and support communications
- Improve our website and service offerings
- Comply with legal obligations
- Protect against fraud or misuse of our services
We do not use your information for unsolicited marketing unless you have explicitly opted in. We do not sell, rent, or trade your personal information to any third party.
Legal Basis for Processing (GDPR)
For visitors and clients in the United Kingdom, European Union, and UAE, we process personal data under the following legal bases:
- Contract performance: Processing necessary to deliver our services under an agreed project scope
- Legitimate interests: Responding to enquiries and improving our services
- Legal obligation: Compliance with applicable laws and regulations
- Consent: Where you have explicitly agreed (e.g. email marketing opt-in)
Data Sharing & Third Parties
We share personal data only with:
- Payment processors (e.g. Stripe, Wise) — to process invoices and payments
- Project management tools (e.g. Notion, Linear) — for internal project tracking
- Communication platforms (e.g. Google Workspace, WhatsApp Business) — for client correspondence
- Analytics providers (e.g. Google Analytics, Vercel Analytics) — to understand website usage
- Hosting providers (e.g. Vercel, AWS) — to deliver and maintain the website
All third-party processors are contractually bound to protect your data and are prohibited from using it for their own purposes.
Cookies
Our website uses cookies and similar technologies to:
- Remember your preferences and session state
- Analyse traffic and usage patterns (via Google Analytics or Vercel Analytics)
- Improve site performance and user experience
You can control or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. We do not use cookies for targeted advertising.
Data Retention
We retain personal data for as long as necessary to:
- Deliver and support contracted services
- Comply with legal and financial record-keeping requirements (typically 7 years for financial records under applicable law)
- Resolve disputes or enforce agreements
Upon written request, we will delete or anonymise your personal data unless we are legally required to retain it.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”)
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time (where processing is consent-based)
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email us at aestivedigital@gmail.com. We will respond within 30 days.
California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, disclose, or sell
- Request deletion of your personal information
- Opt out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising your privacy rights
To submit a request, contact us at aestivedigital@gmail.com with the subject line “CCPA Privacy Request.”
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include encrypted communications (HTTPS/TLS), access controls, and secure cloud infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
International Transfers
Aestive Digital operates from Pakistan and serves clients primarily in the United States, United Kingdom, and UAE. By using our website or services, you acknowledge that your data may be transferred to and processed in Pakistan or other countries where our service providers operate. We ensure appropriate safeguards are in place for all international data transfers.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. We encourage you to review this page periodically. Continued use of the website following any changes constitutes your acceptance of the updated policy.
Contact
For any questions, requests, or concerns regarding this Privacy Policy, please contact:
Sharjeel Faiq — Founder, Aestive Digital
Email: aestivedigital@gmail.com
WhatsApp: +1 213-582-7919
Website: https://aestive.digital
Questions about our policies?
Contact us directly — we reply within a few hours.