Privacy Policy

No mobile information, mobile phone number, or SMS consent will be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never shared with any third party for their own purposes. Phone numbers are shared only with the business you enquired with and with the messaging service providers (such as Twilio) strictly required to deliver the messages you asked to receive. Text-message consent is optional, is never pre-selected, and is not a condition of any purchase or booking. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out and HELP for help. Opt-outs are honoured automatically and immediately.

This website and messaging programme are operated by Trent Palacio, sole proprietor d/b/a Atlas Acquire, a sole proprietorship established in the State of Florida, United States. Atlas Acquire ("Atlas Acquire", "we", "us") provides marketing, lead-capture and consultation-scheduling software to service businesses, including aesthetic clinics and med spas. Each business that uses Atlas Acquire (an "Operator") is the controller of the enquiry data captured through its own booking pages; Atlas Acquire processes that data on the Operator's behalf as a service provider. Contact: hello@atlasacquire.io.

Mailing address: 1416 Lake Bass Drive, West Palm Beach, FL 33411.

From visitors who submit a booking or enquiry form: first name, optional last name, email address, phone number, the service interest and timing selected, any free-text note provided, the appointment time booked, and the marketing consent choices made. We also record technical and attribution data: page URL, referring URL, UTM campaign parameters, timestamp, coarse device/browser information and a non-identifying request fingerprint used for spam and abuse prevention. From Operators: account name, work email, business details and billing information needed to administer a subscription.

Atlas Acquire is a marketing and scheduling layer. It is not designed for clinical intake and must not be used for it. Visitors and Operators must not submit diagnoses, medications, medical history, treatment eligibility assessments, clinical photographs, insurance information or emergency medical information through Atlas forms or fields. Clinical intake belongs in the Operator's own clinical systems.

The contact details, service interest and appointment information Atlas does handle can, depending on the context and the Operator, be regulated health information under applicable law. Atlas makes no claim that this product satisfies any particular healthcare privacy regime. Each Operator is responsible for determining and meeting its own legal obligations, including whether a business associate agreement or equivalent is required before using Atlas with real enquiries.

To deliver the requested enquiry or appointment to the Operator; to send transactional confirmations and reminders about a requested or booked appointment; to send marketing messages only where consent was given; to produce attribution and performance reporting for the Operator; to prevent spam, fraud and abuse; to provide support; and to meet legal obligations.

Marketing SMS and email consent are optional, never pre-selected, and are recorded with a timestamp, the exact consent wording displayed, and the page the visitor submitted from. Transactional messages relating to a requested or booked appointment are handled separately from marketing consent. Message frequency varies. Message and data rates may apply. Reply STOP to any SMS to opt out and HELP for help; opt-outs are honoured automatically and immediately. Email recipients can unsubscribe using the link in any marketing email.

No mobile information, phone number or SMS consent is sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. Phone numbers are shared only with the Operator you enquired with and with the messaging carriers and subprocessors strictly required to deliver the message you consented to receive.

An Operator may upload its own existing contact list so we can email those contacts on its behalf. The Operator is the controller of that list and must attest, on the record, that the contacts have an existing relationship with its business; Atlas Acquire does not create or infer consent for an imported contact. Imported contacts are emailed only — never texted. Every such email carries a one-click unsubscribe header and a visible unsubscribe link, and an unsubscribe suppresses that person across the entire Operator workspace immediately and permanently. Suppression records are kept so a later import cannot re-add someone who opted out.

Enquiry data is visible only to the Operator it was submitted to and to Atlas Acquire staff performing support and maintenance. It is never sold, and it is never shared with other Operators on the platform. We use subprocessors to run the service: Supabase (application database and authentication hosting), Twilio (SMS delivery), our managed email delivery provider (transactional and marketing email), Cloudflare (hosting, CDN and bot protection) and Stripe (Operator subscription billing). We may disclose information where required by law or to protect our rights or the safety of others.

Enquiry and appointment records are retained for as long as the Operator maintains an active account, unless the Operator deletes them sooner. Operators can delete individual enquiries and appointments at any time. After an Operator account is closed, its data is deleted or irreversibly anonymised within 90 days, except where a longer period is required by law. Consent and opt-out records are retained for as long as necessary to evidence compliance with messaging regulations.

Data is transmitted over TLS and stored with encryption at rest. Access is restricted by per-tenant row-level isolation, so one Operator's records are not reachable by another. Administrative access is limited to personnel who need it for support and maintenance. No system can be guaranteed perfectly secure; we will notify affected Operators without undue delay if a breach affecting their data occurs.

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your personal information, to withdraw consent, and to opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined under US state privacy laws. To exercise a right, contact the Operator you enquired with, or write to hello@atlasacquire.io and we will route the request to the relevant Operator and assist them in fulfilling it. We do not discriminate against anyone for exercising these rights.

Atlas Acquire is not directed to children and we do not knowingly collect personal information from anyone under 16. If you believe a child has submitted information, contact us and we will delete it.

Atlas Acquire is operated from the United States and information is processed there. If you access the service from outside the United States, you understand that your information will be transferred to and processed in the United States.

We may update this policy as the product develops. Material changes will be posted on this page with a new effective date and communicated to Operator administrators before they take effect.