Privacy policy
Effective October 31, 2026. The Med Spa Broker is an educational website led by Jason Taken, Business Advisor with HedgeStone Business Advisors.
What information is collected?
The buyer and seller inquiry form collects your name, email address, buying or selling interest, approximate timeline, location or buying geography, and any optional note you choose to provide. It does not request patient information, financial documents, or account numbers. There is no newsletter registration, customer account, advertising pixel, or on-site patient intake. Hosting providers may process technical information, including IP addresses, requested pages, browser details, and security logs, to deliver and protect the website.
What happens when you send an inquiry?
Netlify processes and stores form submissions and filters spam. Verified submissions are sent by email to Jason Taken at jason.taken@hedgestone.com so he can respond and assess your buying or selling plans. Hosting and email providers process this information on their infrastructure. Sending an inquiry does not enroll you in marketing or create a professional engagement or confidentiality agreement. Do not include sensitive information; request a suitable secure channel if documents are needed. Netlify’s privacy policy describes its practices.
What happens when you book?
The scheduling page loads a calendar from OneCal. Loading or interacting with it sends technical information to that service; booking may collect your name, email, appointment choice, and any notes you provide. OneCal’s own privacy practices and booking notices govern its service. Do not enter patient information, financial account numbers, or confidential documents into scheduling notes.
What happens if you send an email?
Information you choose to send by email may be used to respond, assess an inquiry, and maintain business records. Email and scheduling providers process information on their own infrastructure. A general inquiry does not establish a confidential professional engagement. Ask for an appropriate secure document-sharing channel before sending sensitive materials.
Analytics and tracking
No third-party analytics or advertising script is enabled in this version of the website. If analytics are added, this policy should be updated to describe the actual service before deployment.
Retention and requests
Records may be retained as needed for the inquiry, business administration, security, or legal obligations. Privacy rights and available deletion or access requests depend on applicable law and the records involved. Use Jason’s published contact email in the footer for a privacy question. We will evaluate requests under applicable requirements.
External resources and changes
Linked sources operate under their own policies. This policy may change when site practices change; the effective date will be updated when a substantive revision occurs.