Privacy Policy
Rejuva Cell Medical Group
Website: https://rejuvacellmedicalgroup.com
Effective date: September 9, 2025
1. What this application does
This application connects our Facebook and Instagram assets to our CRM. We receive Meta webhooks (e.g., Messenger/Instagram messages, referrals from ads, comments on posts/reels) and use them to create or update contacts in our CRM (GoHighLevel) and to set a field called “contact source” so we can understand how you reached us (for example: “FB Messenger (Ad) ad_id=…”, “Facebook Comment post_id=…”, “Instagram DM”, etc.).
We use this information solely to respond to inquiries, provide services, and measure channel performance.
2. Personal data we process
Depending on Meta’s event, we may receive and process:
Meta identifiers: Page-scoped IDs (PSID) or Instagram sender IDs, ad_id/campaign identifiers for ad-originated conversations, post_id/comment_id (feed), media_id (reel/photo/video), ref and source (e.g., m.me link, chat plugin, story, ad).
Interaction metadata: timestamps, event types, delivery status, the Page/IG account involved.
Message content (minimal): text and any attachments you voluntarily send to us; processed only to provide support or fulfill your request.
CRM data (if a contact already exists): name, phone, email, tags, pipeline/status.
We do not intentionally collect sensitive categories through this integration and we do not perform facial recognition.
3. Purposes of processing
Register/update a contact in our CRM and assign a contact source.
Respond to messages and maintain an interaction history.
Aggregate reporting on the performance of our marketing channels and campaigns.
Security, fraud prevention, and legal compliance.
4. Legal bases (where applicable, e.g., GDPR/UK GDPR)
Contract/Pre-contract: handling your inquiry or service request.
Legitimate interests: organizing support operations, attributing the source of a contact, improving processes, and preventing abuse—balanced against your rights.
Consent: when required by law (e.g., certain marketing communications).
Legal obligation: responding to lawful requests.
5. Sharing and processors
We share personal data only with service providers acting on our behalf, under data-processing agreements:
CRM: HighLevel, LLC (GoHighLevel) to manage contacts, workflows, and the “contact source” field.
Infrastructure & networking: hosting providers and (when used) secure tunneling services to receive webhooks.
Error logging/analytics (technical): to diagnose service issues.
Authorities: when required by law.
We do not sell personal information and we do not share it for cross-context behavioral advertising.
6. Retention
Interaction metadata & contact source: retained for up to 24 months from the last interaction, unless a different period is required by law or you request deletion sooner.
Message content: retained only as long as necessary to resolve your inquiry or provide the requested service.
Data no longer needed is deleted or anonymized.
7. Security
We implement reasonable technical and organizational measures (access controls, encryption in transit, audit logging, least-privilege access). No method is completely secure, but we work to reduce risks of unauthorized access, alteration, or disclosure.
8. Your rights
Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict or object to processing, and receive a portable copy of your data, as well as to withdraw consent where applicable.
EEA/UK (GDPR): you can lodge a complaint with your supervisory authority.
California (CCPA/CPRA): we do not sell or share your personal information; you may request access or deletion.
Other regions (e.g., Colombia and similar habeas data regimes): you may submit inquiries and claims as provided by local law.
To exercise rights, please contact us using the details in Section 12 and include enough information to identify your interaction (e.g., date/time and the channel you used so we can locate your Page-scoped or Instagram sender ID).
9. International transfers
Our providers may operate in countries other than yours. Where required, we use appropriate safeguards (e.g., standard contractual clauses) to protect your data.
10. Third-party services (Meta)
This application is not sponsored or administered by Meta. Your use of Facebook and Instagram is also governed by Meta’s own terms and privacy policies. We process only the data we receive via Meta’s approved interfaces to fulfill the purposes described above.
11. Children
Our services are not directed to children under 13 (or the minimum age in your country). If you believe a child has provided us data, please contact us so we can delete it.
12. How to contact us
Rejuva Cell Medical Group
Website: https://rejuvacellmedicalgroup.com
Privacy requests: please use the contact options listed on our website (Contact/Privacy) or write to our office and indicate that your request concerns privacy/webhooks.
(If you would like us to add a dedicated email and postal address here, share them and we will insert them.)
13. Changes to this policy
We may update this policy to reflect operational or legal changes. We will post the updated version on our website with the effective date shown at the top and, when appropriate, provide additional notice.