Privacy Policy (Privacy Policy)

This Privacy Policy describes how Derma Lab collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and Latvian data protection laws.

1. Data We Collect

  • When booking an appointment: Name, phone number or email, date, and requested procedure.
  • Loyalty Program: Anonymous pseudonym (username) and encrypted PIN code. We have minimized the use of PII (personally identifiable information) to protect your privacy.
  • Analytics: Anonymized website usage data (without tracking cookies by default).

2. Data Usage and Sharing

  • Organizing and confirming your appointments: Data is sent to the clinic administrator via internal employee notification channels strictly for operational booking purposes.
  • Loyalty program: Awarding points and discounts. The database uses secure cryptographic password hashing.
  • We do not sell or share your personal data with third parties without your explicit consent, except as required by EU law.

3. AI Skin Diagnostics

  • Your photos uploaded for AI diagnostics are NOT saved on our servers.
  • The photo is analyzed "on the fly" (in RAM), after which it is immediately deleted. We only save the text results of the recommendations to provide you with a care plan.

4. Data Storage and Protection

  • All data is stored on our secure servers.
  • Internal employee notifications are used only by a limited circle of employees to contact you regarding your visit.
  • Modern protection methods are used: loyalty system passwords are stored exclusively as hashes (Argon2), inaccessible even to administrators.

5. Use of Cookies

  • Our website uses only strictly necessary functional cookies (e.g., for the loyalty program session). We do not use tracking or advertising cookies.

6. Your Rights (GDPR)

  • You have the right to request a copy of your personal data.
  • You have the right to request correction of inaccurate data.
  • You have the right to deletion ("right to be forgotten"). You can delete your loyalty profile in your account. Visit history will be anonymized.
  • To exercise your rights, contact our person responsible for personal data matters.

To submit a data deletion request, please contact us: privacy@dermalab.lv or via clinic phones.