Privacy Policy

Welcome to our website. Thank you for visiting Korean Skin Heaven Zürich and for your interest in our clinic. Protecting your personal data — such as name, phone number and email — is important to us.

The purpose of this Privacy Policy is to inform you about how we process the personal data we collect when you visit this site. Our practice complies with the Swiss Federal Act on Data Protection (FADP), in particular the information duties in Art. 19 ff. FADP.

1. Controller

The controller of the data within the meaning of Art. 5 lit. j FADP is:

MD Group Swiss GmbH
Graben 5
6300 Zug
Switzerland
Email: info@skinheaven.ch
Tel.: +41 79 589 71 98

2. Provision of the website and log files

Every time our website is accessed, our system automatically records data and information from the requesting device (browser version, OS, host name, IP address, date and time of access, pages accessed, referring website, success/failure of the request, volume of data transferred).

These data are stored in log files. They are not stored together with any personal data of a specific user, so individual visitors cannot be identified from them. Storage period: at most 3 months after the site was accessed.

3. Booking form and form autosave

Our site offers a booking form for the Korean Glow Facial. The data you enter (name, phone, email, preferred date and time) are processed to prepare and manage your appointment.

Form autosave — important to know: so you don't lose your details if you close the tab or lose connection, the fields you type into the booking form are saved to our database as you type, before you press the final "Book" button. This lets us contact you if a booking is left incomplete. If you do not want this, please do not type into the form.

Legal basis: Art. 6 para. 1 FADP and good faith (Art. 6 para. 2 FADP / Art. 2 CC), for the pre-contractual exchange of information necessary to prepare a possible appointment contract.

Storage period: incomplete/autosaved leads are deleted automatically once you complete the booking, and otherwise after a reasonable follow-up window. Completed appointments are deleted after 12 months, unless statutory retention obligations require longer storage.

4. Disclosure to third parties

We treat your data confidentially and keep them only as long as necessary. We do not sell your data and do not share them with third parties for their own marketing.

5. Technical service providers we rely on

• Hosting and database: our cloud infrastructure provider (Supabase / Lovable Cloud) stores form entries, bookings and technical logs securely on our behalf.
• Email: the email tools we use to confirm appointments (Resend).
• Spreadsheets: Google Sheets, used as an operational mirror of bookings and leads for the team.
• Advertising and analytics (only with consent): Meta Pixel and Microsoft Clarity, see section 6.

Some providers may process data outside Switzerland or the EU. When that happens we rely on recognised safeguards (Swiss adequacy decisions, EU Standard Contractual Clauses, or the EU–US Data Privacy Framework where applicable).

6. Cookies, ad measurement and analytics

We use a small entry in your browser's localStorage to remember a random session identifier that links your autosaved form entries together, and to remember your cookie choice. These are necessary for the site to work.

Only with your consent (cookie banner, "Accept") do we load the following services. Nothing is loaded if you decline.

Meta Pixel (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.)

Purpose: measuring how our Facebook and Instagram ads perform (page views, started bookings, completed bookings) and improving ad delivery. When you enter your details in the booking form, your email address, phone number, first and last name and a random session identifier are sent to Meta in hashed (SHA-256) form, so Meta can match your visit to your Meta account ("advanced matching"). Hashing scrambles the values but does not make them anonymous. Meta may process data in the USA; see Meta's privacy policy.

The Meta Pixel loads after you accept cookies. It also loads when you click "Continue" in the booking form, even if you did not accept or declined cookies: the notice under the form states that by continuing your details are sent to Meta for ad measurement. In that case we send the Lead event and, if you book, the Schedule event with the hashed details above. Legal basis: your consent given by submitting the form. If you do not want this, do not submit the form and book by phone at +41 79 589 71 98 instead. You can ask us to stop any time at info@skinheaven.ch.

Microsoft Clarity (Microsoft Corporation)

Purpose: understanding how visitors use this page (clicks, scrolling, anonymised session recordings) so we can improve it. See Microsoft's privacy statement.

Legal basis: your consent. We keep a record of your choice (a random identifier, the choice, the date and time and the version of the notice shown).

Withdrawing consent: you can change or withdraw your choice at any time under "Cookie settings" at the bottom of the page, or open cookie settings here. After you withdraw, no further data is sent.

7. Data security and email

Your personal data are protected by technical and organisational measures. In the case of unencrypted email communication, full data security on the transmission path cannot be guaranteed; for information with a high need for confidentiality, we recommend encrypted communication or postal mail.

8. Your rights (Art. 25 ff. FADP)

You have the right of access, rectification, erasure, restriction and data portability. Where processing is based on consent, you may withdraw it at any time. You can exercise your rights at any time by contacting:
MD Group Swiss GmbH · Graben 5 · 6300 Zug · Switzerland
Email: info@skinheaven.ch · Tel.: +41 79 589 71 98

9. Notifications to the FDPIC

Under Art. 49 FADP, affected persons may file a report with the Swiss Federal Data Protection and Information Commissioner (FDPIC) if there are sufficient indications that data processing may infringe data-protection provisions. See edoeb.admin.ch.