Privacy
This page explains what the Advance Cosmetic Skin Clinic website collects, where it goes and how long it is kept. It describes only what the website does today.
Last updated:
Appointment requests
When you send the appointment form, we receive your name, mobile number, the doctor and treatment you chose, your preferred day and time, your language, whether you are a new or existing patient, and any note you write.
If you arrived from an ad or a link with campaign tags, we also keep those tags (for example the name of the source), to see which links bring patients.
We do not store your internet (IP) address with the request. We keep only a short scrambled code made from it (a one-way hash), used to stop repeated spam requests.
The request is saved in the website's database, added to the clinic's Google Sheet of appointments, and emailed to clinic staff.
If you pick an exact time slot, your name, mobile number, doctor, time slot, treatment and note (and your age or gender if you give them) are sent to HealthSpire, the clinic's appointment system, to book that slot.
Mobile number check
The form may ask you to confirm your mobile number with a one-time code. Your number is sent to HealthSpire, which sends you the code.
To stop misuse, we keep a record of code requests for 7 days: the mobile number, the time, and a scrambled code (a one-way hash) made from your internet (IP) address, never the address itself.
Website chat
Some questions are answered from the clinic's own prepared answers. For the rest, the website sends your message and the last few messages of the conversation to Google's Gemini service, which writes the reply.
Please do not type your phone number, health records or other private details in the chat. To book, use the appointment form or WhatsApp.
We save each question (up to 500 characters) with email addresses and phone numbers removed, so the clinic can improve its answers. Saved questions are deleted after 90 days.
The conversation itself is kept only in your browser tab. It is cleared when you close the tab or press the clear button.
To limit how many messages one connection can send, the website counts messages per internet (IP) address. Each count expires after 2 minutes.
How long we keep it
Appointment requests are deleted from the website's database 90 days after they arrive, once they are in HealthSpire or staff have dealt with them. A request nobody has dealt with is deleted after 120 days.
The website's database is backed up every night to private Cloudflare storage. Nightly copies are kept for 30 days, and the copy made on the 1st of each month for 400 days. A deleted request can stay in a backup until that backup expires.
Copies in the clinic's Google Sheet, staff email and HealthSpire are not removed by the website's automatic deletion. The clinic manages them separately.
Who can see it
Clinic staff see requests on an admin page that needs a sign-in. Phone numbers are partly hidden there. Showing a full number is written to a log that keeps only its last 4 digits.
Cookies and your browser
The website sets no cookies on its public pages. It keeps a few things in your browser tab only (session storage): the campaign tags of the link you arrived by, the chat conversation, and a chat pass that expires after 30 minutes. They are gone when you close the tab.
If you sign in to the patient area, a sign-in cookie keeps you signed in for up to 30 days. That area cannot work without it.
The website saves its own pages and images on your device so they open faster and work without internet. This saved copy holds no personal information; form and chat requests are never saved.
Other services the website uses
Cloudflare hosts the website and its database. Like any web host, it handles your internet (IP) address and browser details to deliver pages, and keeps technical logs.
Cloudflare Turnstile checks that the appointment form and the chat are used by a person, not an automated program.
Videos open in YouTube's privacy-enhanced player (youtube-nocookie.com), and only when you open a video.
Some video thumbnails load from Instagram and YouTube, so those services can see that your browser asked for them. Links to Instagram, Facebook, YouTube, TikTok, Google and WhatsApp open those services, which have their own privacy rules.
Feedback
If the clinic sends you a feedback link and you use it, we keep your star rating and comment.
Your choices
To see, correct or delete your appointment request, call the clinic or send a WhatsApp message from the mobile number you booked with.
You can always book by phone or WhatsApp instead of the website form.
If the website changes what it collects, we will update this page and its date.
Contact the clinic
Advance Cosmetic Skin Clinic · Advance Medical Center, behind Saleem Complex, Patel Bagh, Quetta 87300