Privacy Policy
Last updated: May 2026
Nouveau Visage Malta is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services, in accordance with the General Data Protection Regulation (GDPR) and the Laws of Malta.
1. Who We Are
The data controller responsible for your personal data is:
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: First name, last name, date of birth.
- Contact Data: Email address, phone number, postal address.
- Health & Medical Data: Information related to your medical history and aesthetic treatments, collected only with your explicit consent and treated as special category data under GDPR Article 9.
- Appointment Data: Details of consultations, treatments booked, and appointment history.
- Technical Data: IP address, browser type, device information, pages visited, and time spent on our website.
- Marketing Data: Your preferences regarding receiving marketing communications from us.
3. How We Collect Your Data
We collect data through the following means:
- When you book a consultation or treatment through our website or booking system.
- When you contact us via phone, email, or WhatsApp.
- When you fill in forms on our website.
- When you visit our clinic and complete patient intake forms.
- Automatically through cookies and analytics tools when you browse our website.
4. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| To book and manage your appointments | Performance of a contract |
| To provide medical aesthetic treatments | Explicit consent (special category health data) |
| To send appointment confirmations and reminders | Legitimate interests / Contract |
| To respond to enquiries and provide customer support | Legitimate interests |
| To send marketing communications (if opted in) | Consent |
| To comply with legal and regulatory obligations | Legal obligation |
| To improve our website and services | Legitimate interests |
5. How We Share Your Data
We do not sell, rent, or trade your personal data. We may share it only with:
- Trusted third-party service providers who assist in operating our website and booking system (e.g., appointment scheduling platforms), who are contractually bound to keep your data secure and confidential.
- Healthcare or referral professionals where clinically necessary and with your consent.
- Regulatory or law enforcement authorities where legally required.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Medical records are retained in accordance with Maltese health regulations. Marketing data is retained until you withdraw your consent.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of Access
Request a copy of the data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your data ('right to be forgotten').
Right to Restriction
Ask us to restrict how we process your data.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for marketing.
Right to Withdraw Consent
Withdraw consent at any time where we rely on it.
Right to Lodge a Complaint
File a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.
To exercise any of these rights, please contact us at info@nouveauvisagemalta.com. We will respond within 30 days.
8. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to improve your browsing experience and analyse website traffic. These may include:
- Essential cookies: Required for the website to function correctly.
- Analytics cookies: Help us understand how visitors interact with our site (e.g., page views, time on site).
- Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness.
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.
9. Data Security
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Access to personal data is restricted to authorised personnel only and all data is handled with strict confidentiality.
10. Third-Party Links
Our website may contain links to third-party websites (e.g., Google Maps, WhatsApp, social media platforms). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page with the updated date. We encourage you to review this page periodically.
12. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:
