Last updated 2026-07-26
Privacy policy
CostaAesthetic has no accounts and sets no cookies. We measure how the site is used in aggregate — how many people reach a page, where they arrived from, and how quickly pages load — and nothing here profiles you, follows you across other sites, or is shared with advertisers. Clinic and price information published on the site is compiled from public sources (Google Places, clinic websites) or declared directly by clinics; none of it is personal data about site visitors.
What we collect from clinics
If a clinic submits a claim through For clinics, we store the contact name, role, email, and phone number entered on that form, plus any prices the clinic chooses to declare. This is business contact information for the clinic, not data about a patient or site visitor.
Approving a claim also generates a long random access link (a "bearer token") tied to that clinic — the private URL shown on the claim confirmation screen and usable at /clinic-portal/[token]. Anyone holding that link can edit the clinic's listing; there's no password or account behind it, so it's the clinic's responsibility to keep it private. We don't expire or rotate it automatically.
To stop the claim form being used to send unwanted mail, each submission is counted against a one-way hashed form of the sender's IP address, never the address itself. These counters hold no contact details, are used only to enforce a submission limit, and are deleted automatically after 24 hours.
How we measure traffic
We use Vercel Web Analytics and Speed Insights, which are cookieless: nothing is stored on your device and you are not given an identifier. What we see is aggregate — page addresses, referring site, approximate country, browser and device type, and page-performance timings. We never receive your IP address or anything that identifies you personally, and there is no cross-site or cross-session tracking.
Two kinds of address are edited in your browser before any measurement is sent. A private clinic-portal link has its access token replaced with "[token]", so the secret part of that link never leaves your device. Anything typed into the clinic search box is replaced with "[redacted]", so we can see that search is used without recording what was searched for.
If your browser sends a Global Privacy Control or Do Not Track signal, no measurement is sent at all. Neither signal is legally required for cookieless aggregate analytics, but we treat an explicit instruction from your browser as one to follow.
Vercel is our hosting provider and processes this measurement data on our behalf. We do not use Google Analytics, advertising pixels, session recording, or heatmaps.
Claim and contact data is used only to verify and administer listings — reviewing claims, corresponding with the clinic, and letting the clinic manage its own page. We don't sell it, and we don't share it with anyone outside the operation of this site.
To request a copy of your clinic's data, have it corrected, or have a claim withdrawn, email hello@costaaesthetic.com.
This page is updated whenever what we collect changes. The most recent change was on 26 July 2026, when the aggregate analytics described above were added — before then, the site collected nothing at all from people browsing it.