Privacy policy
Updated: 17.10.2026
1. Who processes your data
SKINSTINCT, Jēkabpils, Latvia. For data enquiries, contact the official Instagram account @vr_skinstinct. Specialist: Valērija Razujeva, healthcare practitioner registration number 65120058811.
2. What we collect and why
When you request an appointment or send a message, we store your name, phone and/or email, chosen service, date and time, appointment status and any message you add. We need this information to handle your request, arrange your visit and contact you. Do not send medical documents or sensitive health information through this website.
3. Legal basis
We process data to take steps at your request before providing a service and to arrange appointments (GDPR Article 6(1)(b)). Website security and request rate limits rely on our legitimate interest in keeping the website secure (Article 6(1)(f)). These forms are not used for advertising messages.
4. How long we keep data
Appointment data is kept for up to 12 months after the appointment date. Contact form messages are kept for up to 6 months. Expired data is automatically deleted when the website next handles a request. Administrator sessions last 12 hours. A temporary hash of the network address is kept for up to 30 minutes to prevent abuse. Data legally required for providing services or accounting is handled separately from this website where necessary.
5. Who can access data
An authorised SKINSTINCT administrator can access appointments and messages. Railway provides technical hosting. Images and fonts are hosted on this website. Google Calendar, automatic email and SMS delivery are not connected yet. We do not share data with advertising platforms. This policy will be updated if other processors are added.
6. Hosting and data transfers
This website uses Railway infrastructure. Technical processing and hosting support may involve suppliers outside the EEA and are subject to the provider's contractual terms and applicable data protection safeguards. External links to Instagram or B41 are covered by those websites' own policies.
7. Your rights
You can request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. Use the contact above. To protect your privacy, we may ask you to verify that an appointment belongs to you. You can lodge a complaint with Latvia's Data State Inspectorate (dvi.gov.lv). This website does not use profiling or automated decisions with legal effects.
8. Cookies and local storage
The sk_client cookie provides access to your appointments in this browser for up to 12 months. The sk_admin cookie is only used for administrator sign-in and lasts 12 hours. Both use HttpOnly and SameSite protection, plus Secure over HTTPS. Your cookie notice choice is stored locally for 12 months. Your light or dark theme preference is stored locally until you change it or clear browser data. We do not use analytics or advertising cookies. Deleting cookies removes access to appointments in this browser; you can recover an individual appointment with its code and your contact details.
9. Updates and contact
The current policy is published on this page. We will update it when processing, integrations or contacts change. For questions about appointments or personal data, use the studio's official Instagram or the contact above.