Privacy Notice

ENL Marketing is the data controller for the personal data we process as part of our marketing services. We are a specialist digital marketing agency working exclusively with independent US medspas and aesthetic clinics.

• Contact: hello@enlmarketing.com
• Company registration number: 16990928
• Registered office: on the Companies House register under company number 16990928.

We collect three groups of information:

• Information you give us — when you submit our application form or email us, you provide your name, your practice name, your role, your contact details, and anything you choose to tell us in your message.
• Information we obtain from public sources — practice names and addresses, publicly listed contact details, and the names and professional titles of practice owners, gathered from the sources listed in section 3.
• Technical information — cookies and analytics data, described in section 9.

This section matters most.

We identify medspas and aesthetic clinics that may benefit from our services using publicly available sources. These are:

• practice websites
• state Secretary of State business filings
• the North Carolina Medical Board licensee register
• the Meta Ad Library

The categories of data we hold for this purpose are:

• practice name
• practice address
• the practice owner's name and professional title
• publicly listed practice contact details
• publicly observable advertising activity

We do not collect, hold or process patient data of any kind. ENL does not receive or process protected health information (PHI). Our work is strictly business-to-business, directed at practices and their corporate contacts, never at their patients.

We rely on legitimate interests as our lawful basis for business-to-business marketing to corporate contacts. Before relying on this basis we carried out a balancing test: we weighed our interest in reaching practices that may benefit from our services against the rights and reasonable expectations of the people we contact, and we concluded that our processing does not override those rights. Where electronic marketing requires consent, we rely on your consent, which you can withdraw at any time.

We keep records for twenty-four months from the last contact with you. We delete records sooner on request, or when you tell us you are not interested in hearing from us again.

We share personal data only with the categories of processor we need to deliver our services — for example email and hosting providers, and the platforms on which we run advertising on your behalf. Every processor is bound by a written contract that requires it to keep your data secure and to process it only on our instructions. We never sell your data.

You have the right to access your personal data, to have it corrected, to have it erased, to restrict its processing, to receive it in a portable format, and to object to its processing. You have an absolute right to object to direct marketing at any time.

A single email to hello@enlmarketing.com will stop all contact and add the practice to a permanent suppression list.

Contact us at hello@enlmarketing.com. If you remain unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or by calling its helpline on 0303 123 1113.

ENL Marketing is a UK-established company. UK GDPR applies to our processing of personal data regardless of where your practice is located, because the processing follows the company rather than the prospect.

No comprehensive North Carolina privacy statute applies to business-to-business data of the kind we process. The rights described in this notice, and the single-email opt-out described in section 7, apply to you in exactly the same way regardless of your location.

We do not receive or process protected health information (PHI) as defined under HIPAA.

Every commercial email we send carries a valid physical mailing address and a working one-click opt-out, as required by the CAN-SPAM Act.

We use the Meta pixel on this website. It is a small piece of code from Meta, the company behind Facebook and Instagram. It tells us how many people visit the site, which pages they look at, and whether a visit came from one of our ads. It sets cookies in your browser. We use it for two things: to measure whether our advertising is working, and to show our ads to people who have already visited this site. We do not sell your data. You can stop it by blocking third-party cookies in your browser settings or by using an ad blocker. Meta's own privacy policy explains what Meta does with the data it receives.

We may update this notice from time to time. The last updated date at the top of this page will always reflect the most recent version.