01Who is responsible for your data

The Face Clinic is operated in Lebanon. We are the data controller for everything described here.

For any question about your data, or to ask us to delete it, email hello@thefaceclinic.net.

This policy is written for clients in Lebanon and the MENA region, under Lebanese Law No. 81/2018 on Electronic Transactions and Personal Data. We do not currently market in any other region; if that changes, this policy will be extended before it does.

02What we collect, and when

Nothing is collected passively. Each item below is something you type or upload, at the moment you do it.

When you start an eligibility check — your first name, last name, email address and phone number. This is sent to our database when you press Continue, which is why the consent line sits above that button.

When you submit photographs — three facial photographs, your full name, your age, and what you have told us you would like to understand or improve.

After a specialist approves you and you pay — three further photographs, your ethnic background, and any relevant medical or aesthetic history you choose to give. We ask for these only at this point, deliberately: an unapproved stranger should not be handing over six photographs of their face, and we should not be holding them.

If you message your specialist — the content of those messages.

Technical — your browser stores a small amount of data on your own device so the site works (an order in progress, whether you have visited before, and your login session). None of it is sent anywhere except to log you in. We do not use cookies for advertising or analytics.

03What we do not do

This is the shortest section and the one worth reading.

• No analytics. There is no Google Analytics, no Meta pixel, no tracking script of any kind on this site. The only third-party code we load is the database client we use to talk to our own database.
• No advertising platforms. Your photographs, your answers and your results are never sent to an advertising or analytics platform. Not in aggregate, not anonymised, not ever.
• No selling or sharing. We do not sell your data and we do not share it with anyone for their own purposes.
• No training. Your photographs are not used to train models.
• No public gallery. Your photographs are never published, shown as an example, or used in marketing.
• No silent camera. If you use the in-page camera with the oval guide, your browser asks you first, the live preview never leaves your phone, and nothing is sent anywhere until you press the button that takes the photograph and then choose to submit it. Close the page and the camera is released.

What we do do is send marketing email to people who have asked for it. That is the next section, and it is opt-in only.

Two third parties do see limited data as a consequence of the site working: our hosting provider serves the pages and therefore sees your IP address, and we load the site typeface from Google Fonts, which also sees your IP address. Neither receives your photographs or your answers.

04Who can see your photographs

Your photographs live in a private storage bucket. They are not on a public URL and cannot be reached by guessing an address.

Access is restricted in the database itself, not just in the interface: you can read your own, and a specialist can read those belonging to cases they review. Someone who obtained the site’s public code could not use it to read anyone else’s photographs, because the rule that stops them is enforced by the database, not by the page.

Emails we send you about your case may contain links to your own photographs. Those links expire after twenty-four hours.

05How long we keep it

These are not aspirations. Each one runs on a schedule.

• An abandoned eligibility check — if you upload photographs and never confirm your email address, the account and the photographs are deleted automatically within the hour.
• Photographs that belong to nobody — files left behind by an interrupted upload are swept hourly.
• An active client — we keep your photographs and your analysis for as long as your subscription is active. This is what lets a specialist compare this year against last year, which is the point of an annual assessment.
• After you cancel — twelve months, then automatic deletion. That window exists so that resubscribing within a year does not mean starting from nothing.
• If you ask us to delete sooner — see the next section. That always takes priority.

06Marketing email

We send occasional email about the clinic — new findings, what we have learned, sometimes an offer. Only if you ticked the box asking for it. The tick is separate from agreeing to the terms, it is never pre-ticked, and nothing about the service depends on it.

If you never ticked it, you are not on the list. Everyone who signed up before this page existed was told we ran no marketing lists, so they were not added to one. The only way onto the list is to ask.

Stopping it takes one click. Every marketing email carries an unsubscribe link that works without logging in, and it takes effect immediately. Clients can also turn it off in their account. Once you are off, you stay off — filling in a form again later does not quietly put you back.

This is separate from email about your own case. Your eligibility answer, your analysis and replies from your specialist are the service you bought, not promotion, and they are not affected by unsubscribing.

07Using your analysis to personalise that email

This is the one worth reading twice, because it is the most sensitive thing on this page.

If you allow it, we may use what your analysis found — the measurements taken and what your specialist recommended — to decide what we send you, so that an email about skin is not sent to someone whose protocol was about proportion.

It is off unless you turn it on, and it is a separate switch from marketing email itself, in your account. We do not ask for it at signup, because at that point you have no analysis and there would be nothing to agree to. We ask once there is.

Turning off marketing email turns this off with it. Your photographs are never used this way — only the written findings, and only inside our own system: nothing about your analysis is ever sent to an advertising platform, an analytics tool, or any other company. That does not change whatever you decide here.

08Deleting your data

You can ask us to delete everything we hold about you, at any time, whether or not you have paid us, and whether or not your subscription is active. Email hello@thefaceclinic.net from the address on your account.

We will remove your account, your photographs, your questionnaire answers, your messages and your analysis. We aim to complete this within thirty days and usually much sooner.

One thing we keep: where you have paid us, Lebanese tax and accounting law requires us to retain a record of the transaction — the amount, the date and the name it was billed to. That record contains no photographs, no answers and no analysis. We keep it for as long as the law requires and no longer.

Deleting your data ends the service. We cannot analyse photographs we no longer have.

09Your rights

You can ask us to show you everything we hold about you, correct anything that is wrong, delete it, or stop using it. Email hello@thefaceclinic.net and we will answer.

You do not need a reason and we will not ask you for one.

10Where your data is stored

Our database, file storage and authentication run on a secure database in Ireland.

This means your data is processed outside Lebanon through a secure foreign provider. Running our own servers and processing data locally would be less safe.

11Security

Photographs are stored privately, access is enforced at the database level, and every connection to this site is encrypted. Staff access is limited to the specialists who review cases.

What we will not tell you is that this makes it impossible for anything to go wrong. No one can promise that. If a breach ever affects your data, we will tell you what happened and what we are doing about it, in plain language, without waiting to be asked.

12Changes to this policy

If we change how we handle your data in a way that matters, we will email clients before the change takes effect rather than quietly updating this page. The date at the top always reflects the current version.