Who is responsible for your data
The beautytreatments.com service is run by its administrator, who decides how and why personal information is processed on the site. You can reach the administrator at [email protected] for any question or request about your data.
Information we collect
We collect only what each step needs. We never ask for health details, medical history or photos, and every form reminds you not to share medical information.
- Your email address, when you request an appointment, claim a profile or ask for a correction.
- Preferred dates and an optional short note, when you request an appointment.
- The treatment, city and clinic profile the request relates to.
- For clinics, the business name and the link to the profile being claimed, and later the details the clinic enters, such as hours, treatment menu, photos and prices.
- Confirmation code attempts, including when a code was sent, whether it was entered correctly and how many attempts were made.
- Technical data, such as IP address, browser type, device type, pages visited and the time of each visit.
- The source of your visit, such as the referring page and campaign tags (UTM source, medium and campaign) in the link you followed.
- Billing details for clinic subscriptions, which you enter on the payment processor's secure page. We receive confirmation of payment and the plan, never the full card number.
Why we use it
- To send your appointment request to the clinic you chose and to email you the next steps.
- To confirm that an email address belongs to the person using it, through a six-digit code.
- To let clinics claim, edit and manage their profiles, teams and subscriptions.
- To handle corrections and removal requests for directory profiles.
- To keep the service secure, limit abuse and repeated code attempts, and fix errors.
- To understand which pages and campaigns bring visitors, in aggregate.
- To meet legal, tax and accounting duties and to handle disputes.
We do not sell personal information, and we do not use it for targeted advertising.
Legal bases for processing
Where laws such as the EU General Data Protection Regulation (GDPR) apply, we rely on these bases. Performance of a contract or steps you ask for, when we send your request or run a clinic account. Legitimate interests, when we secure the service, prevent abuse and measure site use in aggregate, balanced against your rights. Legal obligation, when we keep billing records. Consent, where a law requires it, which you may withdraw at any time without affecting earlier processing.
When a clinic receives your request
A clinic receives your appointment request only after you confirm your email with the code. It then sees your email address, your preferred dates, your note and the treatment you asked about. If the clinic has not claimed its profile, we keep the request and email you when the clinic confirms availability on BeautyTreatments. The clinic handles your data under its own privacy practices from that point, and it is responsible for any treatment it provides.
Service providers who help us run the site
We share personal information only with service providers who process it on our behalf and under our instructions, and only as far as their task requires.
- A hosting provider that stores the site and its data.
- A payment processor that handles clinic subscription payments.
- An email delivery provider that sends confirmation codes and notifications.
- A map tile provider that displays maps in the directory.
We may also disclose information when the law requires it, to protect the rights and safety of users, or as part of a transfer of the service, in which case this policy continues to apply.
Cookies and similar technologies
We use only cookies that are strictly necessary for the site to work, such as a session cookie and a security token that protects forms. We do not use advertising pixels or cross-site tracking cookies. Site statistics are measured without advertising cookies. Because we use only necessary cookies, there is no cookie banner. You can block cookies in your browser, though some forms may then stop working.
How long we keep data
- Unconfirmed requests and unused codes are deleted after a short period.
- Confirmed appointment requests are kept for up to 24 months, so you and the clinic can refer back to them.
- Clinic account data is kept while the subscription runs and for up to 24 months after it ends.
- Billing records are kept for as long as tax and accounting law requires.
- Technical logs are kept for a limited period for security and then deleted.
- Suppression entries for removed directory profiles are kept so that removed profiles stay removed.
Your rights in the United States
Residents of several US states, including California, Colorado, Virginia, Connecticut, Utah, Texas, Oregon and others, have rights under their state privacy laws. Depending on where you live, you may ask to know what personal information we hold about you, get a copy, correct it, delete it, and opt out of sale, sharing for targeted advertising or profiling. We do not sell or share personal information for targeted advertising. We do not discriminate against anyone for using these rights. You may use an authorized agent, and we may need to confirm your identity and the agent's authority before acting. If we decline a request, you may appeal by replying to our answer.
Your rights in the European Union and United Kingdom
If you are in the European Economic Area or the United Kingdom, you have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format and withdraw consent at any time. You may also lodge a complaint with your local data protection authority. Data may be processed outside your country, and where it is, we rely on safeguards recognized by law, such as standard contractual clauses.
Not for people under 18
BeautyTreatments is meant for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has sent us information, write to [email protected] and we will delete it.
Business information in the directory
Profiles in the directory are built from open data about businesses, as described on where our directory data comes from. A business can claim its profile, ask for corrections or ask for removal at any time, and removed profiles stay removed.
How we protect data
We use encrypted connections, limit access to the people who run the service and confirm accounts with one-time codes. More detail is on security and data protection.
How to access or delete your data
Write to [email protected] from the email address you used and tell us what you would like us to do. We confirm the request and answer within the time the law sets, usually much faster. You can also read the terms of service, the refund policy and the medical disclaimer.
Changes to this policy
We may update this policy when the service or the law changes. The date at the top shows the latest version. If a change is significant, we tell clinic account holders by email before it takes effect.