Privacy policy

This privacy policy explains how Beauty Estetik (legal name LPG Estetik Studio), Pils iela 5, Tukums, processes personal data. It applies to the website beautyestetik.lv and to the communication involved in booking treatments.

The controller of personal data is the studio owner, Jeļena Samoviča. The studio is a one-person business - she is the only person with access to the data.

This policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, GDPR) and the laws of the Republic of Latvia.

For questions about the processing of personal data or to exercise your rights, get in touch: phone +371 25354998 (also WhatsApp), address Pils iela 5, Tukums.

No data protection officer has been appointed, as this is not required for processing of this scale and nature.

Data you provide yourself: name, phone number, chosen treatment, preferred appointment time and any notes you give when booking by phone, on WhatsApp, or through the form on the site.

Health information: before a treatment we discuss contraindications and your state of health, to the extent it concerns that particular treatment. I do not write this down or keep it in a database - it is used only in conversation, to judge whether the treatment is safe for you. If I do note anything, it is with your knowledge and kept only as long as necessary.

Technical data: the site is static and collects nothing about visitors itself. For technical reasons the hosting provider's server may record the IP address, browser type and time of the request in server logs.

Personal data is used only for the following purposes:

Each purpose has its own legal basis:

The booking form does not send data to a server and stores nothing on the site. When you fill it in and press the button, a WhatsApp message containing the text you entered is prepared on your own device, and you decide whether to send it.

This means the data reaches me only when you send the message. The WhatsApp privacy terms (Meta Platforms Ireland Limited) also apply to the conversation itself.

The site sets no cookies of its own and uses no analytics, advertising or profiling tools. Visitor numbers are not measured.

The Google map on the contact page does not load automatically - it loads only if you press the button yourself. Until then, no data is sent to Google.

The home page embeds a Facebook page feed. That content is loaded from Facebook's servers, and in doing so Facebook (Meta Platforms Ireland Limited) may store its own cookies and process data under its own terms. If you would rather it did not, cookies can be blocked in your browser settings or you can use a private browsing window.

Cookies can be managed and deleted in any browser, usually under "Privacy" or "Settings".

Personal data is never sold, and it is not passed to third parties for marketing purposes.

Service providers that keep the site and the communication running may have technical access to data: the hosting provider Hostinger (servers in the European Union) and WhatsApp / Facebook (Meta Platforms Ireland Limited).

Where any of these providers transfers data outside the European Union or the European Economic Area, it does so on the basis of the standard contractual clauses approved by the European Commission, or another safeguard provided for by the GDPR.

Data may also be passed to public authorities where legislation requires it.

Data is kept no longer than necessary:

In relation to your personal data you have the right to:

To exercise any of these rights, get in touch by phone on +371 25354998 or on WhatsApp. To protect your data, I may need to satisfy myself of your identity before providing information.

I will reply within one month. If a request is complex, that period may be extended, and I will tell you if so.

If you believe your data is being processed unlawfully, please contact me first - most questions can be settled straight away.

You also have the right to lodge a complaint with the supervisory authority: Data State Inspectorate, Elijas iela 17, Riga, LV-1050, pasts@dvi.gov.lv, www.dvi.gov.lv.

The site runs over an encrypted HTTPS connection. Correspondence and bookings are not held in any publicly accessible database, and only the studio owner has access to the information.

I take reasonable technical and organisational measures to protect data against loss, unauthorised access and disclosure.

The site links to WhatsApp, Facebook and Google Maps. This privacy policy does not apply to other companies' websites - the terms of their respective owners apply there.

I do not knowingly process the data of anyone under 16. Treatments for minors are carried out only with the knowledge and consent of a parent or guardian.

This policy may be amended, for example if the services or the applicable law change. The current version is always published on this page, with its effective date shown at the top.