Privacy Policy

Last updated: 3 November 2026

Vogue Clinic respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect and process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

For any data-protection matter you may contact us at info@vogueclinic.es.

2. What data we collect

• Identification and contact data you provide through our contact form, by email, telephone or WhatsApp (e.g. name, email, phone, preferred language, and the content of your message).
• Health data that you share with us in the course of a consultation or enquiry. Health data is a special category of personal data and receives reinforced protection.
• Booking data processed when you request or book an appointment through the Doctoralia calendar (Doctoralia acts as an independent provider under its own privacy policy).
• Navigation data collected through cookies and similar technologies (see our Cookies Policy).

3. Purposes and legal bases

• To respond to your enquiries and manage your request — legal basis: your consent and/or the application of pre-contractual or contractual measures.
• To provide medical and aesthetic services and manage your appointments — legal basis: the provision of healthcare by a professional subject to professional secrecy (Art. 9.2.h GDPR) and, where applicable, your explicit consent (Art. 9.2.a GDPR).
• To comply with legal obligations (healthcare, tax and accounting) — legal basis: compliance with a legal obligation.
• To improve the Website and, where you consent, send information about our services — legal basis: your consent and our legitimate interest.

4. Retention

We keep your personal data only for as long as necessary for the purposes for which it was collected. Clinical records are kept for the minimum periods required by applicable healthcare legislation; billing and accounting data for the periods required by tax law; and contact-only data until you ask us to delete it or your enquiry is closed.

5. Recipients and international transfers

We do not sell your data. We may share data only with: service providers that process data on our behalf under a data-processing agreement (e.g. IT, hosting and booking tools); and public authorities where required by law. Some providers (e.g. booking, maps or video tools) may process data outside the European Economic Area under the safeguards provided by the GDPR.

6. Your rights

You have the right to access, rectify, erase, object, restrict and port your data, and to withdraw any consent given, at any time. To exercise these rights, write to info@vogueclinic.es, indicating the right you wish to exercise and attaching a copy of an identity document. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

7. Security

We apply the technical and organisational measures required by the GDPR to protect your data against unauthorised access, alteration, loss or disclosure. Our staff and collaborating professionals are bound by professional secrecy.

8. Changes

We may update this Privacy Policy to reflect legal or operational changes. The current version is always available on this page.