Privacy Policy
Blue Star Marketing Firm · Sparks, Nevada, USA
Last updated: 2026-10-13
1. Who we are
Blue Star Marketing Firm ("Blue Star Marketing Firm," "we," "us," or "our") operates the website bluestarmarketingfirm.com and provides digital marketing, websites, AI consulting, and business systems for local business owners. The separate medspa revenue-recovery audit has its own scope and fit checks. For any privacy question or to exercise your rights, contact us at [email protected].
2. Information we collect
Information you give us. When you use our revenue-leak calculator, request a recovery report, or otherwise contact us, we collect the information you submit, which may include:
- Your email address.
- Your phone number when you submit it for audit updates, calls, texts, or AI-assisted outreach consent.
- Business details you enter into the calculator: monthly ad spend, average consult or job value, estimated leads or patients lost per month, current response time, and business type.
- The inferred modeled revenue-leak figures calculated from those inputs; they are not verified revenue or gross profit.
- Any other information you choose to include in a message to us.
If you provide a phone number, see Section 7 (communications) regarding calls and texts.
Information collected automatically. When you visit the site, our analytics and advertising tools may collect standard usage data such as your IP address, device and browser type, pages viewed, referring page, and interaction events, using cookies and similar technologies.
2A. Client engagement data
When a business enters an audit, pilot, or implementation engagement, the accepted scope defines the operational data and system access needed for that work. Client engagement data may include business records such as inquiry timestamps, call or message events, booking outcomes, sales or payment records, workflow documentation, and other evidence specifically approved for the accepted scope.
The client retains ownership of client engagement data. Blue Star Marketing Firm uses that data to perform the accepted scope, applies the engagement-specific access, retention, return, and deletion terms, and does not use private client records as public marketing, testimonials, case studies, or public proof without separate written permission.
We prefer client-provided exports, least-privilege delegated access, or guided screen share and request the minimum operational evidence needed. If an engagement requires handling PHI or ePHI on behalf of a HIPAA-covered entity or business associate, the required written terms, including a Business Associate Agreement where applicable, must be in place before that processing begins. See Data & Security for the public operating summary.
3. How we use your information
- To generate and send the revenue recovery report or information you requested.
- To respond to your inquiry and, where permitted, follow up about our services.
- To perform an accepted audit, pilot, implementation, or other client scope.
- To operate, measure, and improve the website and our marketing.
- To comply with law and protect against fraud, abuse, and security incidents.
4. Legal bases (EEA/UK visitors)
Where the GDPR or UK GDPR applies, we rely on: your consent (e.g., to send you marketing emails); our legitimate interests in responding to your request and promoting our services in a proportionate way; performance of an accepted business engagement where applicable; and compliance with legal obligations. You may withdraw consent at any time where consent is the applicable basis.
5. Who we share it with (service providers)
We do not sell your personal information. We share information with vendors that process data on our behalf for the approved purpose, including:
- CRM and email delivery providers: used to store and manage lead records, audit communication, and follow-up.
- Supabase: secured database hosting for lead records (access restricted to our server).
- Stripe: payment processing and receipts.
- Google Analytics 4 and Meta (Facebook) Pixel: website analytics and advertising measurement.
- Hostinger: website and application hosting.
- Cal.com: scheduling when you use the booking calendar. The calendar processes the contact and booking details you choose to provide.
Client engagement data is shared with a service provider only when the approved task and engagement terms allow it. Where required for PHI/ePHI, appropriate written business-associate or subcontractor terms must be in place before that processing. We may also disclose information if required by law or to protect our rights and users.
6. Cookies, analytics & advertising
We use cookies and similar technologies for site functionality, analytics (Google Analytics 4), and advertising measurement (Meta Pixel). You can control cookies through your browser settings, opt out of Google Analytics via the Google opt-out add-on, and manage ad personalization in your Google and Meta account settings.
7. Marketing communications
If you opt in, we may email you about your report and our services. Every marketing email includes an unsubscribe link, and we honor opt-outs promptly, consistent with the CAN-SPAM Act. We do not use purchased or rented lists. If you provide a phone number and consent to calls or texts, message and data rates may apply and you can opt out at any time by replying STOP; consent to such contact is not a condition of purchase.
8. Data retention
We keep website and lead information for as long as needed to provide services and for legitimate business or legal purposes, after which we delete or de-identify it. Client engagement data follows the retention, return, or deletion terms in the accepted engagement where those terms are more specific. You may request deletion where applicable (see Section 10).
9. Security
We use reasonable technical and organizational safeguards, including encryption in transit and database access controls that restrict lead data to our server-side systems. Engagement access is intended to use the minimum permissions needed for the approved task. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. California residents (CCPA/CPRA) have the right to know, delete, and correct personal information and to opt out of "sale" or "sharing"; we do not sell personal information. To exercise any right, email [email protected]; we will not discriminate against you for exercising your rights.
11. International transfers
We are based in the United States and our vendors may process data in the U.S. and elsewhere. Where required, we use appropriate safeguards for cross-border transfers.
12. Children's privacy
The site is intended for business owners and is not directed to children. We do not knowingly collect personal information from children under 16.
13. Changes to this policy
We may update this policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice. Material changes do not silently rewrite a signed client agreement.
14. Contact
Blue Star Marketing Firm
Sparks, Nevada, USA
[email protected]
+1 (775) 525-1257