Data Processing Addendum (DPA)
Effective Date: July 7, 2026
This Data Processing Addendum (“DPA”) forms part of the agreement between Aesthetix Growth Agency (“Processor,” “we,” “our,” or “us”) and the client (“Controller,” “Client,” or “you”) for the provision of digital marketing, CRM implementation, AI automation, website development, consulting, and related services.
This DPA governs the processing of Personal Data by Aesthetix Growth Agency on behalf of the Client.
1. Purpose
The purpose of this DPA is to establish each party’s responsibilities regarding the processing, security, confidentiality, and protection of Personal Data processed in connection with the services provided by Aesthetix Growth Agency.
2. Definitions
For purposes of this DPA:
Personal Data means any information relating to an identified or identifiable individual.
Processing means any operation performed on Personal Data, including collection, recording, storage, organization, use, transmission, disclosure, deletion, or destruction.
Controller means the entity that determines the purposes and means of processing Personal Data.
Processor means the entity that processes Personal Data on behalf of the Controller.
Subprocessor means a third party engaged by the Processor to assist in providing the services.
3. Scope of Processing
Aesthetix Growth Agency may process Personal Data solely as necessary to provide the contracted services, including but not limited to:
CRM implementation and management
Website development
Lead capture and contact forms
AI-powered automations
Email marketing
SMS messaging
Appointment scheduling
Customer support
Analytics and reporting
Workflow automation
Reputation management
Advertising campaign management
4. Categories of Personal Data
Depending on the services selected, Personal Data processed may include:
Name
Email address
Telephone number
Business information
Appointment information
Customer communication records
CRM records
Marketing preferences
IP address
Device information
Website usage information
Other information submitted by the Client or its customers
The Client is responsible for determining what Personal Data is collected and ensuring that it is collected lawfully.
5. Client Responsibilities
The Client agrees to:
Collect Personal Data lawfully.
Obtain all required notices and consents.
Maintain an appropriate legal basis for processing.
Comply with applicable privacy and data protection laws.
Ensure the accuracy of Personal Data provided to Aesthetix Growth Agency.
Respond to requests from individuals exercising their privacy rights.
6. Processor Responsibilities
Aesthetix Growth Agency agrees to:
Process Personal Data only as necessary to perform the agreed services or as otherwise instructed by the Client, unless required by law.
Limit access to Personal Data to authorized personnel and contractors who require access to perform the services.
Maintain reasonable administrative, technical, and organizational safeguards designed to protect Personal Data.
Require personnel and contractors with access to Personal Data to maintain confidentiality.
7. Confidentiality
Aesthetix Growth Agency will treat Personal Data as confidential and will not disclose it except:
As necessary to provide the contracted services.
To approved subprocessors performing services on our behalf.
When required by applicable law or legal process.
With the Client’s authorization.
8. Security Measures
We implement reasonable safeguards appropriate to the nature of the services, which may include:
Access controls
Authentication procedures
Password management practices
Encryption where appropriate
Secure data transmission
System monitoring
Regular software updates
Employee confidentiality obligations
Vendor management practices
While we strive to protect Personal Data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Subprocessors
The Client authorizes Aesthetix Growth Agency to engage subprocessors as reasonably necessary to provide the services.
These may include providers of:
CRM platforms
Website hosting
Cloud storage
Analytics services
AI technologies
Email delivery
SMS delivery
Appointment scheduling
Payment processing
Customer support tools
Advertising platforms
Aesthetix Growth Agency will take reasonable steps to engage reputable subprocessors and require them to protect Personal Data consistent with applicable legal and contractual obligations.
10. International Data Transfers
Depending on the services used, Personal Data may be processed or stored in jurisdictions outside the Client’s location.
Where applicable, Aesthetix Growth Agency will take reasonable steps to support lawful cross-border transfers consistent with applicable data protection laws.
11. Data Subject Requests
If Aesthetix Growth Agency receives a request from an individual seeking to access, correct, delete, or otherwise exercise rights regarding Personal Data that we process on behalf of the Client, we will, where appropriate, notify the Client and cooperate to the extent reasonably necessary for the Client to respond.
12. Data Breach Notification
If Aesthetix Growth Agency becomes aware of a confirmed security incident involving Personal Data under our control, we will notify the Client without undue delay after becoming aware of the incident, to the extent required by applicable law.
Such notification may include available information regarding:
The nature of the incident.
The categories of data involved.
The measures taken to contain or mitigate the incident.
Recommended actions, where appropriate.
13. Data Retention and Deletion
Aesthetix Growth Agency will retain Personal Data only for as long as reasonably necessary to provide the services, comply with legal obligations, resolve disputes, or enforce contractual rights. Upon termination of the services, and subject to applicable law and contractual obligations, we will, upon the Client’s written request, return or delete Personal Data that we process on the Client’s behalf, unless retention is required by law or reasonably necessary for legitimate business purposes.
14. Audit Cooperation
Upon reasonable written request and where appropriate, Aesthetix Growth Agency will provide information reasonably necessary to demonstrate compliance with this DPA, subject to confidentiality obligations, security considerations, and protection of proprietary information.
15. Limitation of Liability
The liability of each party under this DPA shall be subject to any limitations of liability contained in the applicable service agreement or Terms of Service, except where prohibited by applicable law.
16. Governing Law
This DPA shall be governed by the same governing law specified in the applicable service agreement or, if none exists, the laws of the State of Louisiana, without regard to its conflict of law principles.
17. Changes to This Addendum
Aesthetix Growth Agency may update this Data Processing Addendum from time to time to reflect changes in legal requirements, business practices, or services. Updated versions will become effective upon publication unless otherwise required by law.
18. Contact Information
Questions regarding this Data Processing Addendum may be directed to:
Aesthetix Growth Agency
Email: [email protected]
By engaging Aesthetix Growth Agency’s services, the parties acknowledge that they have read and understand this Data Processing Addendum and agree that it supplements the applicable service agreement, Terms of Service, or other written agreement between the parties.
Digital Marketing for Medspas Dermatologists & Plastic Surgeons
2024 Aesthetix Growth Agency. All Rights Reserved
This is a
Paragraph Font
SERVICES
Al & Automation
CRM & Piperlines
Poid Ads (PPC)
SEO & Local Search
Funnels & Landing Pages
Reputation Management.
This is a
Paragraph Font
STAY CONNECTED
Get growth tips and insights delivered to your inbox.
Data Processing Addendum (DPA)
Effective Date: July 7, 2026
This Data Processing Addendum (“DPA”) forms part of the agreement between Aesthetix Growth Agency (“Processor,” “we,” “our,” or “us”) and the client (“Controller,” “Client,” or “you”) for the provision of digital marketing, CRM implementation, AI automation, website development, consulting, and related services.
This DPA governs the processing of Personal Data by Aesthetix Growth Agency on behalf of the Client.
1. Purpose
The purpose of this DPA is to establish each party’s responsibilities regarding the processing, security, confidentiality, and protection of Personal Data processed in connection with the services provided by Aesthetix Growth Agency.
2. Definitions
For purposes of this DPA:
Personal Data means any information relating to an identified or identifiable individual.
Processing means any operation performed on Personal Data, including collection, recording, storage, organization, use, transmission, disclosure, deletion, or destruction.
Controller means the entity that determines the purposes and means of processing Personal Data.
Processor means the entity that processes Personal Data on behalf of the Controller.
Subprocessor means a third party engaged by the Processor to assist in providing the services.
3. Scope of Processing
Aesthetix Growth Agency may process Personal Data solely as necessary to provide the contracted services, including but not limited to:
CRM implementation and management
Website development
Lead capture and contact forms
AI-powered automations
Email marketing
SMS messaging
Appointment scheduling
Customer support
Analytics and reporting
Workflow automation
Reputation management
Advertising campaign management
4. Categories of Personal Data
Depending on the services selected, Personal Data processed may include:
Name
Email address
Telephone number
Business information
Appointment information
Customer communication records
CRM records
Marketing preferences
IP address
Device information
Website usage information
Other information submitted by the Client or its customers
The Client is responsible for determining what Personal Data is collected and ensuring that it is collected lawfully.
5. Client Responsibilities
The Client agrees to:
Collect Personal Data lawfully.
Obtain all required notices and consents.
Maintain an appropriate legal basis for processing.
Comply with applicable privacy and data protection laws.
Ensure the accuracy of Personal Data provided to Aesthetix Growth Agency.
Respond to requests from individuals exercising their privacy rights.
6. Processor Responsibilities
Aesthetix Growth Agency agrees to:
Process Personal Data only as necessary to perform the agreed services or as otherwise instructed by the Client, unless required by law.
Limit access to Personal Data to authorized personnel and contractors who require access to perform the services.
Maintain reasonable administrative, technical, and organizational safeguards designed to protect Personal Data.
Require personnel and contractors with access to Personal Data to maintain confidentiality.
7. Confidentiality
Aesthetix Growth Agency will treat Personal Data as confidential and will not disclose it except:
As necessary to provide the contracted services.
To approved subprocessors performing services on our behalf.
When required by applicable law or legal process.
With the Client’s authorization.
8. Security Measures
We implement reasonable safeguards appropriate to the nature of the services, which may include:
Access controls
Authentication procedures
Password management practices
Encryption where appropriate
Secure data transmission
System monitoring
Regular software updates
Employee confidentiality obligations
Vendor management practices
While we strive to protect Personal Data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Subprocessors
The Client authorizes Aesthetix Growth Agency to engage subprocessors as reasonably necessary to provide the services.
These may include providers of:
CRM platforms
Website hosting
Cloud storage
Analytics services
AI technologies
Email delivery
SMS delivery
Appointment scheduling
Payment processing
Customer support tools
Advertising platforms
Aesthetix Growth Agency will take reasonable steps to engage reputable subprocessors and require them to protect Personal Data consistent with applicable legal and contractual obligations.
10. International Data Transfers
Depending on the services used, Personal Data may be processed or stored in jurisdictions outside the Client’s location.
Where applicable, Aesthetix Growth Agency will take reasonable steps to support lawful cross-border transfers consistent with applicable data protection laws.
11. Data Subject Requests
If Aesthetix Growth Agency receives a request from an individual seeking to access, correct, delete, or otherwise exercise rights regarding Personal Data that we process on behalf of the Client, we will, where appropriate, notify the Client and cooperate to the extent reasonably necessary for the Client to respond.
12. Data Breach Notification
If Aesthetix Growth Agency becomes aware of a confirmed security incident involving Personal Data under our control, we will notify the Client without undue delay after becoming aware of the incident, to the extent required by applicable law.
Such notification may include available information regarding:
The nature of the incident.
The categories of data involved.
The measures taken to contain or mitigate the incident.
Recommended actions, where appropriate.
13. Data Retention and Deletion
Aesthetix Growth Agency will retain Personal Data only for as long as reasonably necessary to provide the services, comply with legal obligations, resolve disputes, or enforce contractual rights. Upon termination of the services, and subject to applicable law and contractual obligations, we will, upon the Client’s written request, return or delete Personal Data that we process on the Client’s behalf, unless retention is required by law or reasonably necessary for legitimate business purposes.
14. Audit Cooperation
Upon reasonable written request and where appropriate, Aesthetix Growth Agency will provide information reasonably necessary to demonstrate compliance with this DPA, subject to confidentiality obligations, security considerations, and protection of proprietary information.
15. Limitation of Liability
The liability of each party under this DPA shall be subject to any limitations of liability contained in the applicable service agreement or Terms of Service, except where prohibited by applicable law.
16. Governing Law
This DPA shall be governed by the same governing law specified in the applicable service agreement or, if none exists, the laws of the State of Louisiana, without regard to its conflict of law principles.
17. Changes to This Addendum
Aesthetix Growth Agency may update this Data Processing Addendum from time to time to reflect changes in legal requirements, business practices, or services. Updated versions will become effective upon publication unless otherwise required by law.
18. Contact Information
Questions regarding this Data Processing Addendum may be directed to:
Aesthetix Growth Agency
Email: [email protected]
By engaging Aesthetix Growth Agency’s services, the parties acknowledge that they have read and understand this Data Processing Addendum and agree that it supplements the applicable service agreement, Terms of Service, or other written agreement between the parties.
Digital Marketing for Medipas Dermatologhits & Plastic Surgeons
2004 Aesthetic Growth Agency. All Rights Reserved