This policy explains what personal information The Pepper Agency LLC collects, why we collect it, and what we do with it. It covers this website and the services we provide to our clients.
We are a web design and digital growth agency. We are not a healthcare provider and we do not provide medical services. See Client sites and patient data below, which is the part most relevant to our clients.
01What we collect
When you contact us. Your name, email address, phone number if you give it, your business name, and whatever you tell us about your project. This comes from our enquiry form or from emailing us directly.
When you buy from us. Your name, business name, email address, billing address and the details of your order. Payments are handled by our payment processor, Stripe. We never see or store your full card or bank account number.
When you complete a project brief or onboarding form. Information about your business, your brand, your website requirements and any files you upload, such as logos and imagery.
When you use this website. Standard technical information including IP address, browser type and the pages you visit. We use this to keep the site secure and to understand which pages are useful.
02Why we collect it
- To reply to your enquiry and prepare a proposal
- To deliver the services you have purchased
- To take payment and keep accurate financial records
- To provide hosting, maintenance and support under your plan
- To meet our legal and tax obligations
- To keep this website and our client sites secure
We do not sell your information, and we do not share it for advertising purposes.
03Who we share it with
We use third-party services to run our business, and they process data on our behalf:
- Hosting providers, to run this website and the client sites we manage
- Payment processors, to take payment securely
- Email and productivity providers, for correspondence and file sharing
- Software and AI-assisted tools we use to build, maintain and support websites and to run our business
- Analytics providers, to understand site usage
- Our accountant, for bookkeeping and tax
We may also disclose information where we are legally required to. We may use subcontractors to deliver parts of a project, and we require them to protect your information to the same standard we do.
04Client sites and patient data
This section matters if you are one of our clients.
Telehealth consultations on client sites run on the Qualiphy platform, and we do not build forms on client sites that collect health information. However, a client’s website stores its order records, and the Qualiphy plugin may store consultation and prescription status and related information sent back from Qualiphy. The client controls this data and decides how it is used.
Where we host and maintain a client site, we may have technical access to that site’s data in the course of supporting it. We access it only to deliver the service. We do not sign Business Associate Agreements as standard. Clients must not send us patient health information by email or any other channel.
The clinical service, the patient relationship and the medical records themselves are matters between the client, their patients and Qualiphy. They are not ours.
On client sites we process information only on our client’s instructions. Where state consumer health data laws apply, such as Washington’s My Health My Data Act, we act as our client’s processor.
05Where we operate
The Pepper Agency LLC is registered in Delaware, United States. Our team works remotely from Spain and Mexico, so information you give us may be accessed from those countries. Our website and client sites are hosted in the United States, and some of our service providers process information in other countries. The safeguards in this policy apply wherever it is accessed.
06Cookies and tracking
This site uses cookies that are necessary for it to function, including for the shopping cart and checkout. We may also use analytics cookies to understand how the site is used. You can control cookies through your browser settings, though disabling necessary cookies will stop parts of the site working.
On client sites, we deliberately exclude advertising and analytics tracking from consultation, treatment and checkout pages, so that browsing behaviour on those pages is not shared with advertising platforms.
07How long we keep it
We keep enquiry correspondence for as long as needed to follow it up, and client records for as long as we provide services plus the period required for tax and legal purposes. Where a client leaves, we retain a backup of their site for 30 days after their plan ends, as set out in our Terms of Service, and then delete it.
08Security
We use reasonable technical and organisational measures to protect information, including encrypted connections, access controls and regular backups. We never accept passwords by email and ask clients to share credentials through a password manager or by creating us a user account. No system can be guaranteed completely secure, and we will tell affected clients promptly if a breach occurs that affects them.
09Your rights
You can ask us to provide a copy of the information we hold about you, correct it if it is wrong, delete it where we are not required to keep it, or stop using it for a particular purpose. These rights apply wherever you live. We do not sell personal information.
To make a request, email us at the address below. We will respond within the period required by law.
10Children
Our services are for businesses. We do not knowingly collect information from anyone under 18 through this website.
11Changes to this policy
If we change this policy we will update this page and change the date below. Where a change materially affects our clients, we will tell them directly.
12Contact
The Pepper Agency LLC, Delaware, United States.
Questions, or to make a request about your information: hello@thepepper.agency
Last updated: 28 October 2026