DHAX agency
PharmaMedical deviceServicesAbout
Book a call
Privacy policyTerms of useCookie policy

Privacy policy

Effective May 29, 2026

DHAX is a senior-led BD firm. We collect very little data, we don't sell any of it, and we're specific about what happens to the data we do collect.

The short version

If you fill in our contact form, book a call, or subscribe to insights, we keep your name, email, and what you told us. We also run our own first-party analytics to see how the site is used. We don't sell, rent, or share with marketing partners, and we don't use third-party analytics, advertising pixels, or session-replay tools. Analytics cookies are only set after you accept them. You can ask us to delete your data at any time and we will, within 14 days.

Who we are

DHAX Agency LLC is a Florida limited liability company. The data controller is DHAX Agency LLC. For any privacy question (access, correction, export, or deletion requests), contact us at info@dhaxagency.com.

What we collect

  • Contact form submissions. Name, email, optional company and role, and the message you wrote. Stored in our help inbox at info@dhaxagency.com and in our internal engagement records.
  • Booking submissions. Name, email, time slot, and any context you add when scheduling a call. Stored in our own scheduling system.
  • Insights subscriptions. Email address only. Stored in our own subscriber list. Every email includes a one-click unsubscribe.
  • Engagement data, if we work together. The account list, signal dossiers, copy, replies, and pipeline notes scoped to the engagement. Covered by the Master Services Agreement we sign at the start.
  • Site analytics. When you accept analytics cookies, we record how the site is used: page views, scroll depth, clicks on calls-to-action, time on page, and form starts, along with device type, browser, operating system, screen size, referrer, and any campaign (UTM) tags. We assign a random visitor and session identifier so we can group activity into visits. We also record your IP address and derive an approximate location (city, region, country) and network or organization, using a geolocation database hosted on our own infrastructure. Before you accept, analytics run in a tab-only mode with no persistent identifier; declining keeps you in that mode. None of this is shared with third parties or used for advertising.

What we don't collect

  • We don't run third-party advertising pixels, retargeting tags, or analytics scripts. No Google Analytics, no Meta pixel, no LinkedIn Insight Tag, no Hotjar, no FullStory.
  • We don't use third-party CRM, outreach, scheduling, or email-marketing platforms. Our internal tools are built and hosted by us.
  • We don't append personal or firmographic data on visitors from data brokers. The only enrichment we do is approximate location and network, derived from your IP on our own infrastructure.
  • We don't track which insights articles a specific subscriber opens.
  • We don't sell, rent, or share personal data with marketing partners.

How we use it

To reply to you. To send the field notes you asked for. To run a paid engagement if we sign one. To keep our small operating record straight. We don't use your data to train any model, ours or anyone else's, and we don't share it with marketing partners.

How long we keep it

  • Contact form messages and booking notes: 24 months from last interaction, then deleted.
  • Insights subscriber email: until you unsubscribe (which deletes it).
  • Analytics data: kept at the visitor and session level for up to 14 months, then aggregated or deleted.
  • Engagement data: per the Master Services Agreement, typically 36 months after the engagement closes, then deleted or returned to you.

Your rights

You can ask us to access, correct, export, or delete your data at any time. Email info@dhaxagency.com with the request and we action it within 14 days. If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we have collected, the right to request deletion, and the right to opt out of any sale or share of personal information. We do not sell or share personal information for advertising in any state.

Security

We use a small, reputable hosting stack. Data is encrypted at rest, multi-factor authentication is required for partner access, no shared credentials, and no offshored data processing. If a breach affecting your data occurs, we will notify affected individuals within 72 hours of becoming aware.

Subprocessors

Our infrastructure is hosted on a US-based cloud platform (Railway) that provides compute and storage. We do not use third-party analytics providers, CRM platforms, outreach platforms, scheduling tools, or email-marketing services, and our geolocation lookup runs against a database on our own infrastructure, so visitor data is not sent to any third party. Those tools are built and operated by us. If we add a subprocessor that touches client data, we will update this page and notify active engagement clients in writing before the change takes effect.

Children's privacy

DHAX is a business-to-business service for senior commercial leaders. We do not knowingly collect data from individuals under 18 and do not direct any of our content or outreach to minors.

Changes to this policy

If we make a material change we will email subscribers and post a dated note here. The effective date at the top of this page reflects the latest version.

Contact

For privacy questions, deletion requests, or anything else covered above: info@dhaxagency.com.

DHAX agency
Services
  • Commercial Opportunity Sprint
  • Managed Commercial Engine
  • Fractional BD Support
  • All services
Industries
  • Pharma, CDMOs, CROs
  • Medical device, CMs, component suppliers
Company
  • About
  • Contact
  • LinkedIn
© 2026 DHAX Agency LLCPrivacy PolicyTerms & ConditionsCookie Policy