CRM and Follow-Up Automation for Med Spas

Cross X Agency does not claim blanket HIPAA compliance. What is required depends on the clinic, the specific forms, the vendors in use, and the clinic's own legal and compliance review. Marketing forms are scoped to collect only the information needed to respond, and any agreement or vendor requirement the clinic identifies is handled during scope.

Not by default. The CRM layer usually owns inquiry capture, response, follow-up, and source tracking, then hands a confirmed booking to the clinic's existing system. Direct connection is scoped only where that platform supports it.

An acknowledgement goes out with a clear response window, the request is logged with a named owner, and the front desk sees it first thing. The clinic decides the wording and the window during scope.

A no-show or cancellation moves the contact to a defined stage with a rebooking path and a follow-up step, so the front desk is not relying on memory or a paper list.

Only where the consent and opt-out record supports it. Cross X Agency reviews how those contacts were collected before scoping any reactivation, and every sequence includes an opt-out path.

The clinic. The CRM is licensed in the clinic's name, the contact data belongs to the clinic, and access, workflows, and documentation are handed over at the end of the build.