Legal

Privacy Notice

Slim Body & Face Aesthetics ("we", "us"), located in Playa del Carmen, Quintana Roo, Mexico, is responsible for the processing of your personal data under Mexican data protection law.

1. Data we collect

When booking an appointment, messaging us on WhatsApp, or contacting us through the site, we may collect: name, phone number, email, preferred location, treatment of interest, appointment history, and the messages you send us. If you share before/after photos for follow-up or promotional purposes, we treat them as sensitive data and only use them publicly with your express authorization.

2. Purpose

• Schedule, confirm, reschedule and follow up on your appointments (Google Calendar) and maintain your client record (internal database).
• Contact you via WhatsApp, email or phone regarding your appointment — including automated reminders.
• Respond to inquiries sent through our contact form or WhatsApp.
• Send you promotions, only if you opted in to receive them.
• Measure site usage (Google Analytics) and the performance of our Meta (Facebook/Instagram) advertising, and show you ads for our treatments, if you browse the site with cookies or pixels active.

3. WhatsApp and Meta

We use WhatsApp Business (Meta Platforms, Inc.) to communicate with you about your appointments. Messages you send via WhatsApp are processed through Meta's infrastructure under Meta's own privacy policy. We only use that conversation's content to serve you — not for purposes unrelated to your appointment, and we never sell it.

4. Cookies and advertising

Our site uses third-party cookies and similar technologies. With Google Analytics we measure, in aggregate, how the site is used (pages visited, time on site, traffic source). With the Meta Pixel, Meta receives information about your browsing, such as the pages and treatments you view, to measure the effectiveness of our ads, show you ads for our treatments on Facebook and Instagram (remarketing) and build lookalike audiences. We do not use this data to identify you by name.

You can refuse or limit these technologies: block or delete cookies in your browser settings; adjust your ad preferences on Facebook and Instagram (Settings → Ad preferences); or install the Google Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout). If you do, the site will keep working normally.

5. Third parties that process your data

To run the spa we use service providers that process data on our behalf: Supabase (client and appointment database), Google Calendar (scheduling for both locations), Google Analytics (site statistics), Mercado Pago (online payments) and Meta/WhatsApp Business (messaging and advertising). We do not sell or share your personal data with third parties outside these purposes, except as required by law.

6. Sensitive data and clinical record

For some treatments, before applying them, we ask you to fill in a record with health data: age, sex, blood type and whether you have relevant conditions (for example current medical treatment, thyroid problems, pacemaker, pregnancy or varicose veins), plus the areas to treat, notes from each session and your signed informed consent. This is sensitive personal data. We use it only to assess whether the treatment is safe for you, follow up, and meet legal obligations. Only authorized staff can access it. By signing your record you give us your express consent to this processing of sensitive data.

7. Online payments

If you pay a deposit or treatment online, the payment is processed by Mercado Pago. We do not receive or store your card details; we only keep the amount, status and payment identifier linked to your appointment.

8. Browsing and source data

When you contact us or book through the site, we may store where you came from (for example the campaign, ad or link you used, and your landing page) to learn which channels work. This does not replace your cookie choice: analytics and advertising cookies only run if you accept them in the site notice, and you can change that decision at any time from "Cookie preferences" in the footer.

9. Data transfers

Some of our providers (Supabase, Google, Meta and Mercado Pago) may process data on servers outside Mexico. We use them only for the purposes of this notice. By providing your data you accept these transfers needed to serve you; if you disagree with any of them, you can object by writing to us.

10. Purposes you can refuse

Sending promotions, cookie-based measurement and personalized ads are not necessary to give you your appointment. You can refuse them at any time without affecting the service: by not ticking the promotions box when booking, by rejecting cookies, or by writing to the email in the rights section.

11. Retention

We keep your data for as long as you maintain an active relationship with the spa (appointments, inquiries), plus any additional period required by applicable law. You may request deletion of your data at any time, per the rights section below.

12. Your rights

You have the right to access, rectify, cancel or object to the processing of your personal data, as well as to request its deletion. To exercise these rights, email us at slimspaplaya@gmail.com.

13. Changes to this notice

We may update this privacy notice. Any changes will be posted on this same page.

Last updated: October 2026.