1. Introduction & Absolute Commitment to Privacy

At Auralisthetics, we operate under the fundamental belief that true luxury includes the absolute protection, discretion, and safeguarding of your personal information. This comprehensive Privacy Policy meticulously outlines how we respectfully collect, securely process, utilize, and safeguard your data when you interact with our digital platform, create an account, purchase Credits, or visit our physical clinics for treatments.

We are fully committed to adhering to global data protection standards. By utilizing our services, you consent to the data practices meticulously detailed in this agreement.

2. Exhaustive Categories of Information We Collect

To consistently provide a highly tailored, safe, and luxurious aesthetic experience, we must legally and operationally collect specific categories of personal data, including but not limited to:

• Identity & Contact Data: Your full legal name, preferred alias, email address, mobile phone number, date of birth, and account login credentials.
• Financial & Transaction Data: Comprehensive records of your Treatment Credit purchases (in USD, HKD, or JPY), transaction timestamps, and your partial payment history. (Note: We do not store full credit card numbers; these are handled securely by PCI-compliant third-party processors).
• Clinical & Wellness Data: Intimate details regarding your past aesthetic treatments, known skin sensitivities, diagnosed allergies, current medications, and specific aesthetic preferences thoroughly discussed during your clinical consultations.
• Technical & Usage Data: Automatically collected background information such as your internet protocol (IP) address, browser type and version, time zone setting, operating system, and deep interaction metrics detailing how you navigate our website.

3. Purpose and Legal Basis for Processing Your Data

We do not collect data arbitrarily. We process your information exclusively to elevate and secure your Auralisthetics journey. Your data is utilized to:

• Operational Fulfillment: Securely manage your digital wallet, facilitate Credit transactions, and accurately schedule and confirm your clinical appointments.
• Health & Safety: Equip our clinical specialists with the necessary medical background and historical context to safely perform advanced treatments like deep peels or RF therapies without risking adverse reactions.
• Communication: Dispatch critical operational updates, policy changes, appointment itineraries, and, with your explicit consent, personalized wellness recommendations or promotional campaigns.
• Platform Improvement: Analyze aggregated user behavior to continuously optimize our digital interface, troubleshoot bugs, and improve our online user experience.

4. Data Sharing, Disclosures, and Third-Party Subprocessors

Discretion is the cornerstone of our brand. We operate under strict confidentiality principles and will never sell, rent, or trade your personal profile to external marketing or advertising agencies. We only share necessary, minimized data with highly vetted, trusted partners, including:

• Payment Processors: Global, PCI-DSS compliant financial institutions required to securely process your fiat-to-Credit purchases.
• IT & Cloud Security Providers: Specialized, enterprise-grade firms that host our encrypted servers and protect our digital infrastructure against cyber threats and breaches.
• Clinical Practitioners: Your specific aesthetician and nursing staff, who require strict access to your health history solely to deliver safe, effective, and highly personalized care during your physical visit.
• Legal Compliance: We may disclose your information if legally required to do so by a valid subpoena, court order, or formal request from a recognized government authority.

5. Cookies, Analytics, and Tracking Technologies

Our digital platform utilizes standard cookies, web beacons, and tracking pixels to ensure a smooth, secure browsing rhythm. These technologies help us:

• Maintain your active session architecture and keep your digital wallet securely locked while you are logged in.
• Remember your localized language and regional currency preferences across sessions.
• Analyze anonymized, aggregated site traffic via third-party analytics providers (such as Google Analytics) to understand global trends and continuously improve our digital services.

You may adjust your browser settings to decline non-essential cookies; however, please be advised that doing so may severely impact your ability to successfully book sessions, purchase Credits, or access your wallet dashboard.

6. Data Security Measures and Retention Periods

We protect your digital data with the exact same meticulous care applied to your physical treatments. We employ robust, industry-standard encryption protocols (SSL/TLS), firewalled secure servers, and strict internal access controls limited only to essential personnel.

We retain your personal data only for as long as is strictly necessary to fulfill the purposes for which it was collected. Specifically:

• Active Profiles: Profile and wellness data are kept as long as your account is active to ensure continuity of aesthetic care.
• Financial Records: Transaction logs and billing details are retained for a minimum of seven (7) years to comply with mandatory international tax and corporate accounting regulations.

7. Your Comprehensive Rights Regarding Personal Information

You maintain full agency and sovereignty over your personal information. Depending on your global jurisdiction (such as GDPR in Europe or CCPA in California), your comprehensive rights may include:

• Right to Access: The right to request a complete, easily readable copy of the exact data we hold about you.
• Right to Rectification: The right to correct, amend, or completely update any inaccurate or outdated personal details.
• Right to Erasure (Right to be Forgotten): The right to request the permanent deletion of your account and associated profile data, provided no overriding legal, tax, or medical retention mandates apply.
• Right to Restrict Processing: The right to request that we temporarily halt the processing of your data under specific circumstances.

To exercise any of these fundamental rights, or if you have concerns about a potential data breach, please contact our administrative team directly. We are committed to addressing all requests within 30 calendar days.