Privacy policy

Last updated 6 August 2026.

Who is responsible for your information

Carvalho Aesthetics, operated by Nicole Carvalho, is the responsible party for the personal information described in this policy. You can reach her on 071 553 5196 or through the contact page.

What is collected

Through this website. Enquiries collect your name, contact number, and optionally your email address, preferred branch, concern and message. Appointment requests also collect your preferred treatment, date and time, and your agreement to the use of your contact details. Nicole manages contact details, appointments and administrative notes in her private owner dashboard. Please do not submit medical history through the website forms. There is no tracking or advertising software on this site.

In the treatment room. Before any treatment, a consultation record is completed. This includes relevant medical history, medication, allergies, skin history, the treatments performed and how your skin responded. This is a clinical record and it is necessary in order to treat you safely.

Photographs. Clinical photographs may be taken to track progress across a course. These form part of your record.

Why it is collected

Website enquiries are used to respond to you, arrange an appointment and answer the question you asked. Clinical records are used to treat you safely, to plan and review your treatment, and to meet professional record-keeping obligations. Your information is not sold, rented or shared for marketing by anyone else.

Photograph consent

Clinical photographs are taken for your record only. They are never published, posted, shared or used in any marketing material unless you have given separate, specific, written consent for that use.

That consent is always separate from your consent to treatment. Declining it has no effect whatsoever on your treatment. You may withdraw it at any time in writing, after which the images will be removed from anywhere they have been published.

How long it is kept

Website enquiries and unconfirmed appointment requests that do not lead to an appointment are deleted after twelve months. Confirmed appointment and client contact records are retained while needed to administer your appointments; you may contact Nicole to request correction or deletion. Clinical records are kept separately for the period required by professional record-keeping obligations.

How it is stored

Website enquiries, appointment requests, client contact details, administrative notes and website image uploads are stored in Netlify Database. The owner dashboard is restricted to Nicole's account. Uploaded website photographs are public only while assigned to a website image slot with publication permission recorded. Clinical records are kept separately from this dashboard. Information is not transferred to third parties except where a service provider processes it on her behalf under an obligation of confidentiality, or where the law requires disclosure.

Your rights

Under POPIA you may ask what personal information is held about you, ask for a copy of it, ask for anything inaccurate to be corrected, ask for information to be deleted where there is no lawful reason to keep it, withdraw consent you have previously given, and object to the use of your information.

To exercise any of these, contact Nicole on 071 553 5196 or through the contact page. You also have the right to complain to the Information Regulator of South Africa.

Cookies

This website sets no cookies of its own and runs no analytics or advertising trackers. Map panels on the locations page are embedded from Google Maps and load only when you scroll to them; Google may set its own cookies at that point under its own privacy policy.

Changes to this policy

This policy was last updated on 6 August 2026. Any future change will be published on this page with a revised date.