Privacy policy

Applies to the page of Aurora Studio.

This page explains what we collect, why, on what legal basis, and who receives it.

Czytaj po polsku

Written from the service's actual data flows and the requirements of the GDPR. A lawyer should review it before commercial launch.

Who processes your data

The controller of client data is the specialist you are booking with. She decides why she needs it and how long she keeps it.

12Looks ([operator details not filled in yet], [operator details not filled in yet], tax ID [operator details not filled in yet]) is a processor: it provides the tool and stores the data on the specialist's behalf and on her instructions. Contact: [operator details not filled in yet].

What a booking collects

Your name, phone number, the treatment you chose, your preferred day and time, and, if you write them, practical notes and where you heard about us.

The form does not ask about health, and we ask you not to put health conditions, allergies or medication in the notes. This is an appointment diary, not a medical record.

Why, and on what basis

To arrange and confirm the appointment and to contact you about it, Article 6(1)(b) GDPR, steps before and performance of a contract.

To send a reminder before the visit, legitimate interest in reducing missed appointments, Article 6(1)(f) GDPR.

To ask for a review afterwards, only with your consent, Article 6(1)(a) GDPR.

Who receives it

Supabase, hosts the service's database (servers in the European Union).

Amazon SES, sends the specialist an email about a new booking request.

OpenAI, the content assistant receives the name from the diary along with the treatment and time when it plans a week. Phone numbers and notes are not sent there.

Confirmations and reminders are sent by the specialist herself over WhatsApp. The service only writes the message and opens the chat.

How long

Booking data is kept for as long as the specialist needs it for her diary and visit history, and is deleted with her account when she closes it.

A declined booking request is deleted immediately, no record of it remains.

Your rights

You have the right of access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interest.

Consent to a review request can be withdrawn at any time; this does not affect what was lawful beforehand.

Ask the specialist you booked with first. You can also write to us: [operator details not filled in yet].

You may lodge a complaint with your national data protection authority.

Cookies

A specialist's page uses no analytics or advertising cookies. In the specialist's own panel we use only the cookies needed to keep her signed in.

Last updated: 2026-09-04