Legal

Privacy Policy

A complete overview of the collection, use, and protection of your personal data.

Last updated: August 14, 2026

1. What data do we collect?

When filling out a consultation questionnaire: Name, surname, phone number, email (optional) and a message in free text.
Along with the questionnaire, information about the surgery you are interested in and the doctor you have chosen.
Technical data when using the site: browser type, IP address, pages viewed, date of application.
Marketing source data (utm parameters) and what search or artificial intelligence service you're going through.

The type of aesthetic surgery you are interested in, the doctor you choose, and the information you write in your message are considered to be relevant to your health.
According to Article 2.1.6 of the Law on Personal Data, health-related data is a special category of personal data.
According to Article 9.7 of this Law, the processing of such data is not permitted - it is possible only with your written consent (Article 9.7.1-1).
In other words, there is also a requirement for consent in the form of a request. It is not sent to you without marking it.
We will only ask you for the amount of information necessary to correctly address your application (Article 11.1). We don't require you to submit a diagnosis, test result, medical document, or photo - don't include such information in the inquiry form.
You can withdraw your consent at any time - see section 8.

For ordinary contact information: your consent (Law on Personal Data, Article 9.6.1).
For health-related information: your written consent (Article 9.7.1-1).
To transfer your data to a clinic or doctor: your consent to this (Article 13.1).
We state our purpose in advance and process the data only for that purpose (Article 9.1).

To direct your request to the appropriate clinic and doctor.
Contact us via WhatsApp, phone, or email.
Statistics to understand how the site is being used.
Maintaining information in accordance with legal obligations.
We don't just make decisions about you in an automated way. If this is the case, you have the right to object to it (Article 7.3).

With your consent - with the clinic and/or doctor chosen according to your request. We do not pass without consent (Article 13.1).
With our technical service providers, in a limited amount of: Supabase (database and file storage), Vercel (hosting), Microsoft Azure (translation, content security and artificial intelligence assistant), Resend (email notifications), WhatsApp Cloud API - Meta (delivery of request notifications).
With Vercel Analytics and Vercel Speed Insights, it measures how fast our pages open and always works.
With Microsoft Clarity, Google Analytics, Meta Pixel, and TikTok Pixel - to understand site usage and measure ad effectiveness. These will only be downloaded after you have consented to the cookie.
It is never sold to third parties for marketing purposes.

The servers of the above-mentioned technical providers are located outside of Azerbaijan. This is a cross-border transfer within the meaning of Article 2.1.16 of the Law on Personal Data.
According to Article 14.3 of the Law, if the subject consents, cross-border transfers may be carried out regardless of the level of legal protection of data.
Consent in the form of a request is also applicable to this transfer. Since the service does not work without these providers, it is not possible to send a request without consent.
The security of the transmitted data is our responsibility (Article 14.4).

Inquiry Data: Once the process for your application has been completed and the need for retention has been eliminated, it will be destroyed without delay (Article 9.4).
Health-related information: If you withdraw your consent or if the basis for processing is removed, it will be immediately banned; It shall be destroyed without delay unless you have consented to its preservation or archive (Article 9.8).
Technical Logs: Maximum 12 months.
Marketing Permission: Until you get it back.

Your agreement is valid until you withdraw it.
You can withdraw the consent at any time, without giving a reason: write to [email protected] or call +994 55 946 18 35.
If the consent is withdrawn, we will immediately stop collecting and processing your data (Article 7.2).
It is our duty to prove that consent has been obtained (Article 8.4), so the fact and time of the consent is noted.

Know what information is about you, who is collecting it, and its contents (Article 7.1.1, 7.1.3).
Require legal justification for the collection and transfer to a third party (Article 7.1.2).
Know the purpose, duration, methods, and scope of access to your data (Article 7.1.4).
Require the clarification of incorrect or outdated information, as well as its destruction (Article 7.1.5).
7.1.6 And they shall be gathered together, and they shall be gathered together.
Knowing the source of the data (Article 7.1.7).
To object without giving a reason - Upon receipt of your objection, we will immediately stop processing (Article 7.2).
Refusing to engage with marketing.
To exercise these rights, send an application to [email protected]. The law provides for a written application in paper format and an identity document, or an electronic inquiry form with an enhanced electronic signature (Article 7.5).
We will respond to your request free of charge and within 7 working days at the latest (Articles 12.1, 12.4).
If you believe that your rights have been violated, you can lodge a complaint with the relevant executive authority or court (Article 7.4).

The site is intended for those who have reached the age of 18.
Consent to the processing of data about a minor may only be given by a parent or legal representative (Article 8.3).
If we find that a person under the age of 18 has submitted information without such consent, we will destroy that information.

All data transmissions are protected by TLS encryption.
Access to the server and database is only for authorized team members.
We take technical and organizational measures to prevent accidental or unauthorized destruction, loss and alteration of data (Article 5.8).
Regular security audits and inspections.