Protecting your personal data matters to us. This policy explains what information Leline Esthetics collects through our website, appointment bookings and communication channels, why we use it, and how to contact us.
1. Who processes your data
Leline Esthetics, a facial care and esthetics studio in Tbilisi, Georgia.
For privacy questions or requests, email leline.esthetics@gmail.com. You can find our other contact details and address on our contact page.
2. Information we process
Appointments: first and last name, phone number, optional email, selected service, specialist, date and time. When delivering services, we may also process visit records, treatment details and payment records.
Gift campaigns: name, phone number, optional email, assigned discount, promo code, its validity and redemption status. We may record anonymous visits and form starts to assess campaign performance. We do not automatically collect your Facebook profile name or ID. To prevent fraudulent registrations, we temporarily store a cryptographic fingerprint of a network address. Marketing consent is separate and optional.
Referral rewards: if you use a referral link, we store a random referral token, campaign entries for the referrer and invitee, the first completed visit, and any resulting reward or bonus code. We use the visit record to calculate the reward. Referral links do not contain a phone number or personal Facebook/Instagram profile. Only authorized staff may access the invitee's name and phone number.
Messages: information you send us through Facebook Messenger, Instagram, WhatsApp, email or other channels so that we can respond or arrange a visit. Those services also have their own privacy policies.
During treatments: where you provide it or it is needed for a service, we may process information about your skin and photos taken with your consent. This is not required simply to browse our website.
Website use: technical and analytics information such as page views, general browser/device characteristics, booking steps and campaign source. Network identifiers may be processed temporarily for security.
3. Why we use this information
We use information to create and confirm appointments, contact clients, provide treatments, maintain legally required records, protect our systems, and analyze the performance of our website and advertising.
The applicable legal basis depends on the purpose and may include fulfilling your request, providing services, complying with a legal obligation, legitimate interests or consent where required.
4. Cookies and analytics
We use Google Analytics 4 and Meta Pixel to analyze visits, booking steps and advertising performance. These services may use cookies or similar technologies and process information under their own policies.
You can manage or block cookies through your browser settings. For details, see the Google Privacy Policy and Meta Privacy Policy.
5. Who may process your data
Our technical service providers may process data for hosting and storage, email, analytics and communications, including providers such as Vercel, Supabase, Google and Meta. These services may process information outside Georgia.
Access should be limited to staff and providers that need it for the relevant purpose. We may disclose information to competent authorities where required by law.
6. How long we keep information
We retain booking and service records for as long as necessary for the client relationship, service accounting or legal obligations. Our internal booking-funnel analytics are intended to be retained for 30 days. Retention periods for third-party services depend on their settings and policies.
7. Your rights
Subject to applicable law, you may request information about the processing of your data, access to it, correction of inaccuracies, deletion, or restriction or cessation of processing. You may withdraw consent where processing is based on consent.
Email requests to leline.esthetics@gmail.com. We may need to verify your identity to protect your information. Some records may still need to be retained where the law requires it.
8. Security and external websites
We use organizational and technical measures to protect data, although no internet transmission or storage method guarantees absolute security. External links are subject to the privacy policies of their respective platforms.
9. Changes to this policy
If our data processing practices or technologies change, we will update this page and its last-updated date.