Privacy Policy

This Privacy Policy explains how MedMagic (“MedMagic,” “we,” “us,” or “our”) collects, accesses, uses, stores, shares, and protects information through medmagicagency.com, our services, and MedMagic Google Ads Connect, our internal tool for managing Google Ads accounts authorized by MedMagic or our clients.

1. Scope

This policy applies to information submitted through our website and services and to information accessed through connected services, including Google Ads. It does not replace a healthcare provider's Notice of Privacy Practices or govern information controlled solely by a client.

2. Information we collect

• Business and contact information: names, business names, email addresses, telephone numbers, websites, service interests, and communications.
• Lead and appointment information: form responses, appointment selections, campaign attribution, and information submitted through approved booking or CRM workflows.
• Technical information: IP address, browser and device information, timestamps, requested pages, cookies, and security or diagnostic logs.
• Connected-account information: authorization credentials and data made available by services that a user or client expressly connects.

3. Google Ads API and Google user data

When an authorized user connects a Google account, MedMagic Google Ads Connect requests permission to access and manage Google Ads accounts available to that user. Depending on the authorized account and requested work, this may include:

• Google Ads customer and manager-account identifiers, account names, currency, time zone, and account status.
• Campaigns, budgets, bidding settings, geographic and audience targeting, conversion-goal configuration, and delivery settings.
• Ad groups, ads, keywords, negative keywords, search terms, assets, sitelinks, images, and policy or approval statuses.
• Advertising performance data, including impressions, clicks, cost, conversions, and related reporting dimensions.
• OAuth authorization information, including access and refresh credentials required to maintain the connection.

We use Google Ads data only to provide requested account management, reporting, research, auditing, troubleshooting, campaign creation, and optimization services for accounts that MedMagic is authorized to manage. We do not use Google Ads data for consumer profiling, unrelated advertising, or sale to data brokers.

4. How we use information

• Provide, operate, secure, and support our marketing and account-management services.
• Create, review, manage, and report on authorized advertising campaigns.
• Respond to requests, schedule calls, and communicate about services.
• Maintain change records, investigate errors, prevent misuse, and comply with legal obligations.
• Improve our services using aggregated or de-identified information where reasonably possible.

5. How information is shared

We do not sell Google user data, advertising-account data, lead information, or personal information. We may share information only with the authorizing client and its authorized personnel; service providers that host, secure, transmit, or process information for us; when legally required or needed to protect users and systems; or in a business transaction subject to applicable confidentiality and notice requirements.

Google user data is not transferred for serving advertisements, credit-worthiness or lending decisions, or sale to third parties.

6. Google API Services User Data Policy

MedMagic's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Storage, security, and human access

OAuth credentials and operational data may be stored in access-controlled systems used to provide the requested service. We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure.

Human access to Google user data is limited to situations in which the user has consented, access is needed to provide or support a requested feature, access is necessary for security or legal compliance, or the data has been aggregated and anonymized for internal operations.

8. Retention and deletion

We retain information only as long as reasonably necessary to provide services, maintain legitimate business and security records, resolve disputes, and satisfy legal obligations. OAuth credentials are retained while the applicable connection remains active and are deleted or rendered unusable after disconnection or a verified deletion request, subject to limited backups and legally required records. Operational reports and audit records may be retained for a reasonable period for accountability and support.

To request access, correction, export, or deletion of information associated with you or your connected Google Ads account, email privacy@medmagicagency.com. We may verify your identity and authority over the relevant account.

9. Disconnecting Google access

You may ask MedMagic to disconnect an account at any time. You may also revoke MedMagic Google Ads Connect through your Google Account third-party connections. Revocation stops future API access but does not automatically delete records we are legally permitted or required to retain; contact us to request deletion.

10. Cookies and analytics

We may use cookies and similar technologies necessary for site operation, security, preferences, attribution, and measurement. Browser settings can limit cookies, although some functionality may be affected.

11. Healthcare information

Where MedMagic receives protected health information while acting as a business associate, that information is handled under the applicable business associate agreement and law. Please do not submit medical records or sensitive clinical information through a general contact form unless an approved secure process is provided.

12. Children's privacy

Our website and services are intended for businesses and adults and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through the website.

13. Policy changes

We may update this policy as our services, integrations, or legal obligations change. We will post the revised policy here and update the date above. Material changes affecting connected Google data will be communicated when required.

14. Contact us