Privacy Policy for Superb Aesthetic Clinic
Introduction
This privacy policy describes how Superb Aesthetic Clinic (“we,” “us,” or “our”) collects, uses, and shares personal data of individuals who visit our website (superbskinandhair.com), use our services, or otherwise interact with us, both online and offline. We are committed to protecting your privacy and ensuring compliance with all applicable data protection laws.
Who We Are
Superb Aesthetic Clinic
Website: https://superbskinandhair.com
Address: 2nd Floor, Eon Square, LP Savani Rd, beside Shell Petrol Pump, Adajan Gam, Adajan, Surat, Gujarat 395009
Customer Care Number: +91 9727679003
Email: customer@superbskinandhair.com
What Personal Data We Collect and Why We Collect It
We collect various types of personal data from users and site visitors, including:
- Personal Data: Name, address, email address, phone number, date of birth, and other contact information. We collect this data to identify you, communicate with you, and provide our services.
- Medical and Treatment Information: Medical history, skin type, hair type, treatment preferences, and any other information relevant to providing cosmetic treatments. We collect this data to provide appropriate and personalized treatments.
- Payment Information: Credit card details, bank account information, or other payment information necessary to process payments for our services. We collect this data to process payments for our services.
- Website Usage Information: IP address, browser type, operating system, referring URLs, pages visited, and the dates/times of your visits. We collect this data to improve our website and user experience.
- Social Media Information: Information from your social media profile (e.g., name, profile picture) if you interact with us on social media platforms. We collect this data to engage with you on social media and personalize your experience.
- Offline Information: Consultation details, treatment records, and any forms you fill out when you visit our clinic. We collect this data to provide our services and maintain accurate records.
- WhatsApp Communication: Phone number and message content when you communicate with us via WhatsApp for appointment reminders, treatment updates, and customer support. We collect this data to provide efficient communication and support.
We collect and retain sensitive personal data, such as data concerning health, only with your explicit consent and in compliance with applicable laws.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact Forms
If you use a contact form plugin, note what personal data is captured when someone submits a contact form, and how long you keep it. For example, you may note that you keep contact form submissions for six months for customer service purposes, but you do not use the information submitted through them for marketing purposes.
Cookies
Our website uses cookies to enhance user experience. Here is a list of cookies we use:
- WordPress Cookies (Default):
wordpress_[hash]
: Used to store your authentication details.wordpress_logged_in_[hash]
: Indicates when you’re logged in.wp-settings-{time}-[UID]
: Customizes your view of the admin interface, and possibly also the main site interface.
- Analytics Cookies: (If applicable, e.g., Google Analytics)
_ga
,_gid
: Used to distinguish users.
- Third-Party Cookies: (e.g., Social Media Plugins)
- Cookies set by social media platforms if you interact with social media buttons or content on our site.
Analytics
We use Google Analytics to collect anonymous data about website usage. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. Google’s privacy policy is available here: https://policies.google.com/privacy.
Who We Share Your Data With
We share your data with the following third-party providers:
- Payment Processors: To process payments for our services.
- Marketing Agencies: To assist us in marketing and advertising efforts.
- IT Service Providers: To maintain and support our IT infrastructure.
- WhatsApp: To facilitate communication via WhatsApp Business API.
- Google Analytics: To analyze website traffic and user behavior.
We only share data necessary for these providers to perform their services. We link to their privacy policies where possible:
- [Payment Processor Privacy Policy]
- [Marketing Agency Privacy Policy]
- [IT Service Provider Privacy Policy]
- WhatsApp Privacy Policy
- Google Privacy Policy
How Long We Retain Your Data
We retain personal data for the following periods:
- Contact Form Entries: Six months for customer service purposes.
- Analytics Records: One year for website improvement.
- Customer Purchase Records: Ten years for legal and accounting purposes.
- Medical and Treatment Information: As required by law and for ongoing treatment purposes.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What Rights You Have Over Your Data
You have the following rights over your data:
- Access: You can request access to the personal data we hold about you.
- Correction: You can request that we correct any inaccurate or incomplete personal data.
- Deletion: You can request that we delete your personal data, subject to certain exceptions.
- Objection: You can object to the processing of your personal data for marketing purposes.
- Restriction: You can request that we restrict the processing of your personal data in certain circumstances.
- Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
To exercise these rights, please contact us using the contact information provided below.
Where Your Data Is Sent
Your data may be transferred and stored outside the European Union. We ensure that such transfers are safeguarded to European data protection standards through:
- Web Hosting: Namecheap – We use namecheap for web hosting, which may involve data storage outside the EU. We ensure that [Hosting Provider] complies with GDPR standards.
- Cloud Storage: Namcheap – We use namecheap for storing certain data, which may involve data storage outside the EU. We ensure that [Cloud Storage Provider] complies with GDPR standards.
Contact Information
For privacy-specific concerns, please contact:
Superb Aesthetic Clinic
[Your Clinic Address in Surat, Gujarat, India]
Customer Care Number: +91 9727679003
Email: customer@superbskinandhair.com
If you are required to have a Data Protection Officer, list their name and full contact details here as well.
Additional Information
How We Protect Your Data
We take the following measures to protect your data:
- Encryption: We use encryption to protect sensitive data, such as payment information.
- Security Measures: We implement security measures such as two-factor authentication and regular security audits.
- Staff Training: We provide staff training in data protection to ensure compliance with privacy policies.
What Data Breach Procedures We Have in Place
We have procedures in place to deal with data breaches, including:
- Internal reporting systems.
- Contact mechanisms for affected users.
- Bug bounties for identifying vulnerabilities.
What Third Parties We Receive Data From
We may receive data about users from third parties, including advertisers and referral partners. This information is used to improve our services and personalize your experience.
What Automated Decision Making and/or Profiling We Do With User Data
We do not engage in automated decision-making or profiling with user data.
Industry Regulatory Disclosure Requirements
As a provider of cosmetic treatments, we comply with all applicable industry regulations and privacy laws.
Last Updated: 2025-06-03