Privacy Policy

VELÈ Aesthetics Clinic ("VELÈ", "we", "our") is the data controller responsible for your personal data. Contact us at info@vele.ge or +995 510 00 42 46, Tbilisi, Georgia.

We collect only what is necessary to provide our services: • Booking requests: full name, phone number, selected procedure, preferred date and time, and any optional notes you provide. • OTP verification: phone number, used solely to deliver and verify a one-time code. The code is never stored. • Reviews: display name, treatment name, star rating, and written review text. • Analytics: Vercel Analytics and Speed Insights collect anonymous page-view and performance data. No cookies are set and no personally identifiable information is transmitted.

We process your data under Article 5 of the Law of Georgia on Personal Data Protection (No. 5142-IIს): • Booking data — processed on the basis of your consent (submitting the form) and our legitimate interest in scheduling consultations. • OTP data — processed with your consent to verify your phone number before a booking is submitted. • Review data — processed with your consent when you voluntarily submit a review. • Analytics data — processed on the basis of our legitimate interest in understanding site performance; it is fully anonymised.

• To process appointment requests and contact you to confirm your booking. • To verify your identity via a one-time SMS code. • To publish approved reviews on our website (your display name and review text only). • To monitor and improve website performance.

We do not sell or trade your personal data. We share it only as needed to operate: • Telegram (Meta Platforms Inc.): booking notifications are forwarded to an internal Telegram bot so clinic staff can respond promptly. Telegram's privacy policy applies to data in transit. • Vercel Inc.: hosts our website and processes anonymised analytics. No PII is shared. • Neon (database host): stores booking and review records in an encrypted PostgreSQL database within the EU (eu-central-1). • ubill.ge (SMS provider): your phone number is transmitted to deliver the OTP code. ubill's privacy policy applies to this transmission.

• Booking records: retained for 3 years from the date of the appointment to support follow-up care and legal compliance, then deleted. • Review records: retained until you request deletion or the review is declined by our moderators. • OTP data: the one-time code expires after 5 minutes and is never persisted to a database. • Analytics data: anonymised and aggregated; no retention limit applies because no PII is stored.

Under Georgian data protection law you have the right to: • Access — request a copy of the data we hold about you. • Rectification — ask us to correct inaccurate data. • Erasure — ask us to delete your data, subject to any legal retention obligations. • Objection — object to processing based on legitimate interest. • Restriction — ask us to pause processing while a dispute is resolved. To exercise any right, email info@vele.ge. We will respond within 10 business days. If you believe we have violated your rights, you may lodge a complaint with the Personal Data Protection Service of Georgia (pdps.ge).

We use industry-standard measures including TLS encryption in transit, encrypted database storage, and limited staff access controls. No system is perfectly secure; if a breach occurs we will notify affected individuals as required by law.

Our services are intended for individuals aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has submitted data to us, please contact info@vele.ge and we will delete it promptly.

We may update this policy when our practices change. Material changes will be posted on this page with an updated date. Continued use of the site after changes are posted constitutes acceptance.