This Privacy Policy explains how Medical Skin / MedSkin Laser & Beauty Clinic (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit medicalskin.com or contact us through the website.

Medical Skin / MedSkin Laser & Beauty Clinic is located at Christodoulou Sozou 13, 8053, Paphos, Cyprus. You may contact us at info@medicalskin.com or +357 70009950 regarding privacy matters related to this website.

We are committed to handling personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Cyprus data protection law, including Law 125(I)/2018.

What This Policy Covers

This Privacy Policy applies to personal data collected through this website, including data you submit through contact forms, email links, phone enquiries, or other website-based communications.

This policy is intended for a promotional/informational clinic website. It does not cover separate offline treatment records, medical files, or in-clinic patient records unless expressly stated elsewhere.

What Personal Data We May Collect

Depending on how you interact with the website, we may collect:

• your name,
• phone number,
• email address,
• the contents of your message or enquiry,
• appointment request details you choose to provide,
• technical information such as IP address, browser type, device type,
• referring pages, and basic website usage data,
• any other information you voluntarily submit through a contact form or email.

Please do not submit sensitive medical or health information through a general website contact form unless specifically requested and appropriate safeguards are in place.

How We Collect Your Data

We may collect your personal data when:

• you fill in a contact form,
• you send us an email,
• you call us or request contact through the website,
• you browse the website,
• you interact with embedded tools, maps, or third-party features, where applicable.

Why We Use Your Data

We may use your personal data to:

• respond to your enquiries,
• communicate with you about our services,
• process appointment requests or consultation enquiries,
• improve the website and user experience,
• maintain website security and prevent misuse,
• comply with legal or regulatory obligations.

We do not use website-submitted personal data for unrelated purposes without a lawful basis.

Legal Bases for Processing

Under the GDPR, we rely on one or more of the following legal bases, depending on the circumstances:

• consent, where you voluntarily submit information or consent to specific processing,
• pre-contractual steps, where processing is necessary to respond to your request before a potential appointment or service,
• legitimate interests, such as website administration, security, and responding to general enquiries,
• legal obligation, where processing is required by law.

Special Category Data

Because this is a beauty clinic website, some users may voluntarily disclose health-related or other sensitive information in a message. Health data is considered a special category of personal data under the GDPR and requires enhanced protection.

We request that you avoid sending detailed medical or sensitive health information through general website forms unless specifically instructed to do so through a secure and appropriate channel.

If sensitive data is submitted, we will only process it where permitted by law and where there is an appropriate legal basis and necessity.

Cookies and Analytics

This website may use essential technical cookies required for website functionality. It may also use analytics, embedded media, maps, or marketing technologies, depending on the website configuration.

If non-essential cookies or tracking tools are used, they should only be activated in accordance with applicable consent requirements through an appropriate cookie banner or consent management tool.

If you install analytics, Meta Pixel, Google Ads tracking, reCAPTCHA, or similar third-party tools, this Privacy Policy and the website’s cookie notice should be updated accordingly.

Sharing of Personal Data

We do not sell your personal data. We may share personal data only where necessary and appropriate with:

• website hosting providers,
• website developers or IT support providers acting on our instructions,
• email service providers,
• legal, regulatory, or professional advisers,
• competent authorities where required by law.

Any third-party service providers acting on our behalf are expected to process data securely and only for authorized purposes.

International Transfers

Where website tools or service providers transfer personal data outside the European Economic Area, we will take reasonable steps to ensure appropriate safeguards are in place, as required by applicable data protection law.

Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including:

• responding to and managing enquiries,
• maintaining basic business records,
• complying with legal, tax, regulatory, or security obligations,
• resolving disputes or enforcing our rights.

Data that is no longer needed will be deleted or securely anonymized where appropriate.

Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet transmission or website storage system can be guaranteed as completely secure. You submit information to the website at your own risk.

Your Rights

Subject to applicable law, you may have the right to:

• request access to your personal data,
• request correction of inaccurate or incomplete data,
• request deletion of your data,
• request restriction of processing,
• object to certain processing,
• request data portability where applicable,
• withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us using the contact details below.

Complaints

If you believe your personal data has been processed unlawfully, you may contact us first so we can try to resolve the matter.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus, which is the competent supervisory authority for GDPR matters in Cyprus.

Third-Party Websites

This website may contain links to third-party websites, including social media platforms or map services. We are not responsible for the privacy practices, security, or content of third-party websites. You should review their privacy policies separately.

Children’s Privacy

This website is not intended to knowingly collect personal data from children without appropriate parental or legal guardian involvement where required by law. If you believe a child has submitted personal data through this website, please contact us so we can review and, where appropriate, remove the information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any updated version will be published on this page with a revised “Last Updated” date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Medical Skin / MedSkin Laser & Beauty
Clinic Christodoulou Sozou 13, 8053, Paphos, Cyprus
Email: info@medicalskin.com
Phone: +357 70009950