Privacy Policy

Last updated: 23 July 2026

1. Who we are (Data Controller)

Marilux Aesthetics — Mariola Kotynska, Aesthetic Nurse
19 Fairgreen Square, Ballysadare, Co. Sligo, F91 R7W6, Ireland
E-mail: marilux.aesthetics@gmail.com · Phone: +353 87 602 0805

2. What personal data we process

This website contains no contact forms, accounts or online payments. We process personal data only when you contact us yourself:

via WhatsApp, Instagram, Facebook, phone or e-mail — we receive the data you choose to share (e.g. name, phone number, username, message content),
when booking and attending an appointment — contact details and information necessary to provide the treatment safely (collected and stored at the clinic, not through this website).

3. Purposes and legal bases

Responding to enquiries and arranging appointments — Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) (legitimate interest in communicating with clients),
Displaying third-party content you have consented to (Instagram reels, Google map) — Art. 6(1)(a) GDPR (consent, given via the cookie banner and revocable at any time),
Health-related information required for treatments is processed at the clinic on the basis of Art. 9(2)(h) GDPR (provision of health care) with appropriate confidentiality obligations.

4. Third-party services

When you use the contact channels or accept third-party content, data may be processed by:

Meta Platforms Ireland Ltd (Instagram, Facebook, WhatsApp),
Google Ireland Ltd (Google Maps embed),

each acting under its own privacy policy (Meta, Google). These providers may transfer data outside the EEA; such transfers rely on the EU Standard Contractual Clauses and/or an adequacy decision (EU–US Data Privacy Framework).

5. Cookies & similar technologies

This website does not set any tracking or analytics cookies of its own. We use minimal browser storage for functionality, and third-party cookies can be set only after you click “Accept all” in the cookie banner (or “Allow & load” on a blocked embed):

Name / source	Type	Purpose	Duration
`mariluxIntro`	sessionStorage (first-party)	Remembers that the intro animation has already been shown. Strictly functional, no personal data.	Until the browser tab/session is closed
`mariluxConsent`	localStorage (first-party)	Stores your cookie-banner choice. Strictly functional.	Until deleted by you
Instagram embed cookies (Meta)	Third-party cookies	Set by Instagram when the embedded reels are loaded. May be used by Meta for its own purposes, including tracking.	Set by Meta — see Meta’s policy
Google Maps embed cookies	Third-party cookies	Set by Google when the embedded map is loaded. May be used by Google for its own purposes.	Set by Google — see Google’s policy

You can change or withdraw your choice at any time via “Cookie settings” in the website footer. Withdrawing consent takes effect from the next page load; cookies already set by third parties can be removed in your browser settings.

6. How long we keep data

Enquiry messages are kept as long as needed to handle your enquiry and maintain our client relationship. Clinical records are retained in line with Irish healthcare record-keeping requirements.

7. Your rights

Under the GDPR you have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time (without affecting prior processing). To exercise your rights, contact us at marilux.aesthetics@gmail.com.

You also have the right to lodge a complaint with the supervisory authority: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland — dataprotection.ie.

8. Changes to this policy

We may update this policy from time to time. The current version, with its date, is always available on this page.