Privacy Policy

1. Controller

Aura Clinic
129 Petre Bagrationi Str, Batumi 6010, Georgia
Email: info@auraclinicge.com
Phone: +995 557 16 88 76

2. What data we collect

• Contact & analysis forms: name, email, phone, language preference, service interest, and (for hair analysis) questionnaire answers plus generated protocol text.
• Advertising attribution: UTM parameters and click IDs (for example gclid, fbclid) stored in first-party browser storage to understand campaign performance.
• Analytics (with consent): Meta Pixel and Google Ads / optional GA4 events.
• AI hair preview: photos you upload may be transmitted to Google Gemini (or related Google AI APIs) to generate an illustrative image. Photos are processed for the request and are not intended as a medical record.
• Technical data: IP address, browser type, device information, and access time — typically in server logs.
• Cookies: see our cookie policy.

3. Purposes and legal bases

We process data to:

• respond to enquiries and send analysis or confirmation emails;
• schedule consultations and provide our services;
• measure advertising performance when you consent to analytics;
• operate and secure the website;
• comply with legal obligations in Georgia.

Processing may be based on your consent (forms, cookies, marketing), contract performance, legitimate interests (website security), or legal duty where applicable.

4. Marketing consent

Optional marketing messages are separate from the consent required to process a consultation request. You may withdraw marketing consent at any time by contacting info@auraclinicge.com.

5. Storage duration

Enquiry data is kept only as long as needed to handle your request and any follow-up care, unless longer retention is required by law. Attribution identifiers in the browser are kept for a limited period (about 90 days). Server logs are rotated regularly.

6. Recipients & international transfers

Data may be processed by hosting (e.g. Vercel), email (SMTP provider), Meta (Pixel / Conversions API), Google (Ads, optional Analytics, Gemini for AI preview) acting as processors or independent controllers according to their terms. We do not sell personal data.

7. Your rights & deletion requests

Under Georgian data-protection law you may have the right to access, rectify, erase, restrict, or object to processing, and to withdraw consent. To request deletion or a copy of your data, email info@auraclinicge.com. You may also lodge a complaint with the Personal Data Protection Service of Georgia.

8. Security

We use appropriate technical and organisational measures (HTTPS, access controls, limited retention, input validation) to protect your data.

9. Changes

We may update this policy. The current version is always published on this page.

Last updated: July 2026