Privacy Policy

1. Who is responsible for your data

The data controller is Isabella de Jesus Medici Pereira, a sole trader, tax number 326668438, operating at R. Nunes dos Santos 21 Lj 20, São Pedro do Estoril, 2765-546 Lisboa.

For any privacy question, or to exercise the rights described in section 7, contact isabellamedici@gmail.com.

2. What data we collect

It depends on what you do on the site.

• Booking request: name, mobile number, chosen services, preferred date and time, and any notes you write.
• Client account (optional): first and last name, mobile number, date of birth, an optional profile photo, and a 4-digit PIN. The PIN is never stored as you typed it — it is put through an irreversible process.
• Anamnesis form: name, email, mobile number, date of birth, occupation, answers to the clinical questions, and your signature drawn on screen. The clinical answers include health data (allergies, medication, pregnancy, diagnosed conditions, among others).
• Appointment record: whether you attended, amount paid and payment method (cash or MB WAY), filled in by the professional afterwards. The site never receives or stores bank card details.
• Internal notes: observations the professional writes about each client’s follow-up.
• Image permission: whether, and when, you allowed photographs and videos of your procedure to be published. We record the answer even when it is no, precisely so we know we may not publish.

3. Why we use it, and on what legal basis

We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you.

We also use an audience measurement tool, to understand how the site is used. It depends on your consent, it is anonymous, and it is described in section 6.

• Health data from the anamnesis form: used to assess whether a procedure is safe for you and to adapt the technique. The basis is your explicit consent (Art. 9(2)(a) GDPR), given in the checkbox at the end of the form. You may withdraw it at any time.
• Bookings and client account: used to schedule, confirm and manage your appointment. The basis is performance of the service contract (Art. 6(1)(b)).
• Payment and invoicing records: compliance with legal tax and accounting obligations (Art. 6(1)(c)).
• Internal follow-up notes: legitimate interest in service quality and continuity (Art. 6(1)(f)).
• Photographs and videos of your procedure published on social media and in the portfolio: only with your consent (Art. 6(1)(a)), given in its own checkbox, separate from the others. It is entirely optional — if you do not agree, the procedure goes ahead in exactly the same way. Images are never published with your name or any health data, and you may withdraw the permission at any time simply by telling us; from then on we stop publishing them and take down any that are online.

4. Who has access

Your data is consulted by the professional. Besides her, technical providers host or process the data on our behalf (processors), without being allowed to use it for their own purposes:

• Supabase — database and photo storage. Data is hosted in the European Union (Ireland).
• Vercel — hosting and running the site. Form processing runs on servers in the European Union (Ireland). Vercel is a US-based company and is certified under the EU-U.S. Data Privacy Framework, which covers any technical-support access from outside the EU.
• Google — if the professional has connected her calendar, your booking’s name, phone number and notes are created as an event in a private calendar in her Google account, for scheduling purposes. Google is likewise certified under the EU-U.S. Data Privacy Framework.
• Resend — the service that emails you your anamnesis form as a PDF, to the address you gave on the form itself. The PDF goes only to you, never to anyone else, and the service does not use its contents for its own purposes.
• Google Analytics — only if you accept measurement cookies. In that case Google receives data about your visit: pages viewed, time spent, country, device type, and which site or search you came from. It does not receive your name, contact details, bookings or any answer from the anamnesis form. Section 6 describes this in detail.

5. How long we keep it

• Anamnesis forms and health data: for as long as you remain a client of the studio, so the professional knows your history from one visit to the next. A form stops counting as current after two years — from then on you are asked for a new one before your next procedure. You may request erasure at any time, without having to give a reason.
• Client account and booking history: for as long as the account stays active. If you request deletion, we erase what we are not legally required to keep.
• Records with tax relevance: for the period required by Portuguese tax law.
• Audience measurement data (only if you accepted it): kept in Google Analytics for 14 months, after which it is deleted automatically. It is usage statistics, not linked to your name or your form.

6. Cookies and audience measurement

This site uses no advertising cookies. We do not build visitor profiles for marketing, we do not run personalised advertising, and we do not share your data with ad networks.

Cookies essential to operation: the one keeping you signed in (30 days), a temporary 1-hour cookie letting you download the form you have just submitted, and the admin area session cookie. These do not require your consent, because the site cannot work without them.

Measurement cookies: if you accept in the cookie notice, we load Google Analytics, which shows us how many people visit the site, which pages they view, how long they stay, which country and device type they arrive from, which site or search they came from, and how many complete a booking request. Its only purpose is to tell us what on the site is useful and what is not.

What measurement never includes: your name, mobile number, email, your booking, or any answer from the anamnesis form. Health data never reaches this tool. The anamnesis and client-area pages count only as visits — what you type there does not leave the site.

Until you accept, no Google Analytics script is loaded and no measurement cookie is placed in your browser. If you decline, or simply close the notice without choosing, the site works in exactly the same way.

The legal basis for this collection is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time under “Cookie settings”, in the footer of any page on the site: your choice is reset and nothing further is collected.

Measurement cookies are set by Google and last up to 2 years. Your IP address is used to infer the country and is not stored. In Europe, the controller for this processing is Google Ireland Limited; Google LLC is certified under the EU-U.S. Data Privacy Framework.

The Google map on the contact page is external content that sets Google cookies. It is therefore only loaded if you accept cookies, or if you ask to see it using the button shown in the map’s place — in which case it loads for that visit only and does not switch on audience measurement. Either way you can always open the address in Google Maps via the button beside it, which only acts when you click it.

7. Your rights

At any time you may request: access to the data we hold about you, correction of inaccurate data, erasure, restriction of processing, portability (receiving your data in a machine-readable format), and objection to certain processing.

Where processing is based on your consent — as with health data — you may withdraw it whenever you wish, without affecting the lawfulness of processing carried out beforehand.

To exercise any of these rights, write to isabellamedici@gmail.com. We reply within one month at most.

If you believe your data is not being handled properly, you have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.

8. Security

The connection to the site is encrypted. Client PINs are stored irreversibly, never in readable form. Access to the admin area requires authentication and is limited to the professional. Anamnesis forms can only be downloaded by someone with an admin session or, for one hour after submission, by the person who filled it in.

9. Changes to this policy

If this policy changes, the last-updated date at the top of the page is updated. Significant changes will be communicated to clients with an account.