Privacy policy

Data controller

Noura Skin Secrets AB, reg. no. 559588-8925, Kungsängsgatan 5B, 753 22 Uppsala, Sweden, is the controller for the processing of your personal data. Contact: info@nouraskinsecrets.se, +46 79-333 34 76.

Booking requests

The details you enter in the booking form (name, email, phone, requested treatment, date and any message) are sent to us via the form service Formspree and are used only to handle your booking. Legal basis: performance of a contract. Data is kept as long as needed for the booking and our bookkeeping obligations.

AI skin analysis (photo)

• The photo is downscaled in your browser before sending — metadata such as location (GPS/EXIF) is removed automatically.
• The photo is sent encrypted (HTTPS) via our server to the AI provider Anthropic for analysis.
• We never store your photo — it is processed in memory only.
• Anthropic does not use the photo to train AI models and deletes API data according to its policy (currently max 30 days).
• The analysis is cosmetic guidance and does not replace medical advice.
• The service requires your explicit consent each time and is intended for adults (18+).

AI chat

Free-text questions you type in the skin assistant are sent encrypted via our server to the AI provider Anthropic to generate an answer. The messages are never stored by us, are not used to train AI, and are deleted by the provider according to their policy. Please don't enter sensitive personal data in the chat.

Live chat & WhatsApp

If you want to talk to a real person you can use our live chat or WhatsApp. The live chat is provided by Tawk.to and is loaded only when you click the chat button — no cookies from the service are set before that. Once open, Tawk.to processes what you write and technical data (e.g. IP address) and sets functional cookies required for the chat, according to the Tawk.to privacy policy. If you choose WhatsApp, WhatsApp (Meta) opens and their terms apply.

Availability check

When you pick a date in the booking form, a request may be sent to Google Calendar to show free and busy times. The request contains only the selected date — no personal data — but your IP address is transferred to Google when the call is made.

Cookies and local storage

This website uses no tracking or marketing cookies. We only store your language choice locally in your browser (localStorage) — this is necessary for the site to function and is not shared with anyone. Fonts are loaded from Google Fonts, which means your IP address is transferred to Google when the files are fetched.

Your rights (GDPR)

You may request access to, correction of, or deletion of your personal data, and object to or restrict processing, at info@nouraskinsecrets.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.