Privacy policy

Notice: this policy describes exactly what the Total Definer Beauty Longevity Clinic platform does today. It is pending review by legal counsel, and will be updated with the identifying details of the responsible company as soon as the clinic provides them.

Who processes your data

Total Definer Beauty Longevity Clinic, an aesthetic medicine and dermatology clinic in Bogotá (Colombia), is the controller of the personal data collected on this site. For anything concerning your data, write to info@totaldefinerbeauty.com.

What we collect, and only when

This site collects nothing simply because you visit it. There are only two moments when personal data is stored:

1. When you book an assessment

The booking form asks for your name, email address, phone number and, optionally, a note for the clinic. Alongside them we store the date and time you accepted this policy, the language you booked in, and the appointment details themselves.

The note is a free, optional field. Please do not write health information in it: if you need to tell us something clinical, the consultation is the place for it.

2. When clinic staff sign in

Only then do we record the IP address and browser used, so that improper access to the calendar and to patient records can be detected. This never happens when someone browses or books.

3. When you pay in advance and send us the receipt

If you choose to pay before your appointment, the payment happens on your bank's portal, not here: this site does not process payments and does not collect card details or passwords. We will never ask you for your username, your password, your dynamic key or a one-time code.

What we do keep is the receipt you send us — an image or a PDF — and, if you write them, the transaction number, the payment date and a short comment. We use them for one thing only: to find your payment and confirm your appointment.

The receipt is reviewed by a person on our authorised team, who checks the movement in the clinic's account. No system reads it automatically.

Receipts are stored privately: they are not on the public part of the site, they have no guessable address, and they cannot be opened without permission. Only authorised staff and you, through your private appointment link, can reach them.

What we use it for

• Managing your appointment: booking it, confirming it, reminding you, and rescheduling or cancelling it if needed.
• Contacting you for that same reason, by email, phone or WhatsApp.
• Recording your consent, which is what allows us to process the data above.

We do not use your data for advertising, we do not build profiles from it, and we make no automated decisions about you.

Cookies

The public site sets no cookies or equivalent technologies. There is no analytics, no social media pixels, no embedded maps, no third-party video. Typefaces are served from our own domain, so loading a page requests nothing from an outside server either.

The only cookie in the whole platform is the clinic staff session cookie, which exists only after signing in to the private area and serves solely to keep that session open.

Who else sees your data

Your booking data is seen by the clinic staff who manage the calendar and by the professional who attends you. Beyond that:

• Email: appointment notices go out through whichever email provider the clinic has configured.
• Hosting: the site and the database run on a server contracted by the clinic. The data is not copied to any other system.

We do not sell or share personal data with anyone. We would hand it over to an authority only where a law required it.

Links that leave the site: the WhatsApp, Instagram and Facebook buttons take you to third-party services. What happens there is governed by their own policies, not by this one.

How long we keep it

Appointment data is kept for as long as the care relationship lasts and, afterwards, for the period required by the rules applying to medical records and invoicing. The clinic is settling those periods with its legal adviser; until they are published here, you may at any time ask us to delete data we are not obliged to keep.

Your rights

Under Colombian Law 1581 of 2012 and Decree 1074 of 2015, you may at any time:

• access, update and correct your data;
• request proof of the consent you gave;
• be told how your data has been used;
• withdraw consent or request deletion, where no legal or contractual duty requires us to keep it;
• lodge a complaint with the Superintendency of Industry and Commerce.

To exercise them, write to info@totaldefinerbeauty.com stating what you are asking for. We will reply within the periods set by law.

Minors

Online booking is intended for adults. A minor must attend with their legal guardian, and it is that person who provides and authorises the processing of their data.

Security

The site is always served encrypted. Staff passwords are stored using key derivation functions, never in the clear, and access to the calendar and to clinical information is separated by role: front-desk staff cannot see clinical notes.

Changes

If this policy changes, the new version is published here with its date. If the change affects what we use your data for, we will tell you.