| Policies

Privacy Policy

| Privacy

Privacy Policy

This Privacy Policy explains how the Skin & Soul website handles information when you read the pages or use a contact or appointment form. Skin & Soul is presented as an independent beauty salon and skincare studio. The website is a set of static pages. It is not an online shop, a patient portal, or a booking system that stores an account.

The policy was last updated on 16 October 2026. Please read it with the Terms & Conditions and the Cookie Policy. Those pages describe the same website. If a sentence here and a sentence there ever seem to differ, the more specific description of what the page actually does is the one to rely on, and we will correct the conflict.

Skin & Soul operates from Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile. For privacy requests, email [email protected], call +56 9 0318 3771, or write to that postal address. A company registration number and a data-protection officer have not been designated on this website, so this policy does not invent them.

| Collection

Information we collect

The website is built to be read without an account. You can open Home, Beauty Services, the gallery, guides, policies, and the other pages without giving your name. We do not ask you to create a login, and we do not run a newsletter signup.

If you choose to use a form, you may type a name, an email address, an optional phone number, an optional service topic, an optional preferred date, an optional preferred time, and a message. Those fields are the only personal details the forms are designed to accept. Please do not add medical records, identity document numbers, or payment card numbers. The forms are not built for that information, and the studio does not want it sent through this site.

We do not buy marketing lists, and we do not ask other beauty businesses for their client files. We do not collect reviews, star ratings, or photographs of clients through this website.

| Forms

Information submitted through contact and appointment forms

The contact form and the appointment form use the same browser-side check. When you press the button, a script on the page looks at the required fields: name, email, message, and the privacy acknowledgement. Optional fields are included in the summary only if you filled them.

If a required field is empty, or the email does not look like an email address, the page asks you to complete the form. In that case it states that nothing was sent. If the fields pass the check, the page writes a short summary under the button, using the words you typed. It then opens your email application with the summary addressed to [email protected]. The studio receives the message only when you send that email. You can also call +56 9 0318 3771. Opening the draft does not create an appointment and does not take a payment.

The form does not post the message to a database on this website and does not place it in a cookie or in local storage. Delivery is the email you choose to send to [email protected], or a telephone call to +56 9 0318 3771. The studio keeps that email in its mailbox so it can reply and, if you both agree, arrange a visit. If you close the draft without sending it, Skin & Soul does not receive it.

Skin & Soul uses the email to reply to the question you asked. It is not added to a mailing list from this website, and it is not sold. The privacy checkbox is your confirmation that you have read this policy and agree that the studio may use the details to answer you.

The status message after a valid form says that your email app should open and that the inquiry is a request, not a confirmed appointment. That sentence matches these pages. If a later change alters how messages are delivered, this policy will be updated to match it.

| Technical

Technical data

Viewing a page requires your browser to request files: the HTML, the stylesheets, the scripts, and the images that belong to this website. Whoever hosts the files may keep ordinary server logs, such as an IP address, the date and time, the address of the page, and a user agent string. This policy cannot name the host, the log format, or the retention period, because those operational facts have not been published by the business. If you need them, they have to come from the owner once a privacy contact exists.

The pages also request files from other organisations so the design can load. Google Fonts are requested from fonts.googleapis.com and fonts.gstatic.com for the typefaces Cormorant Garamond and Nunito Sans. The Swiper stylesheet and script, which run the image sliders, are requested from cdn.jsdelivr.net. The accordion icon is requested from api.iconify.design. Those providers receive the technical data that is part of a normal file request, which can include an IP address. Their own privacy notices describe what they do with it. Skin & Soul does not combine those requests with a beauty inquiry, because the inquiry is not sent anywhere.

The search box, gallery filters, accordions, sliders, and image viewer run after the page has loaded. Their state lives in the page for that visit. Reloading the gallery returns the filters to the full set. The site script does not write that state into a cookie.

| Cookies

Cookies and similar technologies

A cookie is a small text file a site can store in the browser. Similar tools include local storage, session storage, and pixels. This website's own JavaScript does not set a cookie for a login, a cart, a saved form, or a consent choice. There is no customer account and no checkout.

We do not show a cookie banner. A banner with Accept and Reject buttons would be misleading if those buttons did not control a non-essential cookie. No such cookie is set by these pages. The Cookie Policy describes the font and script requests in more detail and explains the browser settings you can use.

If you reached the site by clicking an advertisement, the advertising platform may have used its own cookies before you arrived. Those cookies are controlled by that platform. This website does not read them and does not set a matching advertising cookie of its own.

| Purposes

Purposes of processing

The pages are processed so they can be displayed: text, layout, photographs, menus, and the image viewer. That is the purpose of the file requests.

Form text is checked in your browser and then placed in an email you can send to [email protected]. The purpose is to answer your question and, if you ask for one, to discuss a possible visit. It is not used to profile you, to sell a product, or to score a lead.

We do not use the site to make automated decisions that produce a legal or similarly significant effect. Checking that an email field contains an @ sign is a format check, not a decision about you.

| Legal bases

Legal bases

The studio is in Santiago, Chile. Personal information in inquiries is handled with regard to Chilean Law No. 19.628 on the protection of private life. Law No. 21.719 on personal data protection has been published and, at the date of this policy, is moving into force on its own timetable. This page does not claim a compliance certificate, and it does not appoint a data-protection officer or an EU representative, because none has been designated.

Showing the website is necessary to provide the pages you asked to open. Using the details in an email you send is done to answer that email, which is the purpose you started by writing to the studio and by ticking the privacy box. We do not build marketing profiles from this site.

If a later version of the site begins to store inquiries or to use optional analytics, the legal basis for that new processing will be described here before it starts, and a consent step will be added where the law requires consent before non-essential tracking.

Nothing in this section removes a right that a mandatory privacy law gives you. If you write from another country, you may also have rights under the law of that country. You can exercise them by contacting [email protected] or the postal address above. The studio will not ask you to waive those rights in order to read this website.

| Sharing

Service providers and data sharing

Skin & Soul does not sell personal information and does not share inquiry emails with data brokers or with an advertising audience. An email you send is received by the studio mailbox and may pass through your email provider and the studio's email provider, which handle the message so it can be delivered.

The organisations that may process technical request data are the ones that deliver files you need in order to see the site: the unidentified web host, Google for the fonts, jsDelivr for Swiper, and Iconify for the accordion icon. Unsplash is contacted only if you choose a source link or the licence link. Viewing a photograph that is already saved in this project does not require a call to Unsplash.

We do not share information with payment processors, because the site does not take payment. We do not share information with a booking platform, because none is connected. We would disclose information if a binding law required it, or if you asked us to pass a message to someone else. We do not use inquiry emails for a purpose that is unrelated to answering you.

| Retention

Data retention

Emails sent to [email protected] are kept in the studio mailbox for as long as they are needed to reply and to keep a record of the conversation about a possible visit. There is no separate customer database on this website. The on-page summary disappears when you leave or reload the page.

We do not publish a fixed number of months, because the right period depends on whether the conversation led to a visit and on any record Chilean law requires a business to keep. You may ask us to delete an inquiry email when we no longer need it to answer you or to meet a legal duty. Hosting logs, if the host keeps them, follow the host's own period, which is not stated on this page.

Copies you make yourself, for example by copying the summary into a note on your device, are outside the website's control. Deleting them is up to you.

| Security

Data security

An email is only as private as the devices and mail services that carry it. Use a current browser, and do not send the message from a shared computer you cannot lock. The website itself does not store the form in a database. That limit is not a security certificate.

The pages do not include a customer password. Please do not type payment card numbers, identity document numbers, or medical records into the message. If you do, they will be inside the email you send, and we would rather not receive them. We cannot erase a copy that remains in your own sent folder.

No security seal, audit, or certification is claimed. None has been provided for publication.

| Rights

Your rights and choices

Depending on where you live and where the operator is established, you may have rights to be informed, to access personal information, to correct it, to delete it, to restrict or object to certain uses, or to complain to a privacy regulator. This policy does not pretend to be a complete statement of every statute.

If you have emailed the studio, you may ask for a copy of the personal information in that correspondence, ask us to correct it, or ask us to delete it when we are not required to keep it. Send the request to [email protected] or by post to Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile. We will reply within a reasonable time.

You may also object to a use that is not needed to answer you. If you believe the studio has not respected Chilean privacy rules, you can complain to the authority that Chilean law designates for personal-data matters, after or instead of writing to us. This policy does not name a case number or a certificate, because none is claimed.

You can also control your browser: block third-party cookies, use a private window, or block scripts. Blocking scripts will stop sliders, parts of the mobile menu, the image viewer, and the form check. The written pages remain readable.

| Transfers

International transfers

Requests for fonts, the slider library, and the icon can be handled on servers outside Chile. Google, jsDelivr, and Iconify describe their own infrastructure. An email you send to [email protected] travels through the mail services you and the studio use, which may route a message outside Chile in order to deliver it.

We do not use standard contractual clauses, a transfer impact assessment, or a named destination country as a claim on this page. Those documents would belong to a processing arrangement the business has not published. If such an arrangement is created later, the policy should name it in ordinary language.

Choosing an Unsplash link takes you to Unsplash, which is a separate site with its own privacy practices.

| Children

Children's privacy

The website is a general beauty-salon site. It is not directed at children, and it is not a service for minors to book. We do not knowingly collect personal information from children.

If you believe a child has emailed the studio, write to [email protected] and ask us to delete that message. The website is not directed at children, and it does not create an account.

We do not ask for a date of birth. Please do not send a child's name, photograph, or health information through the form.

| Updates

Updates

We will update this policy if the way inquiries are handled changes, if analytics or advertising cookies are added, or if a company registration number is published. The date at the top will change with a meaningful edit. The current contact details are [email protected], +56 9 0318 3771, and Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile.

The current version is the one on this page. We do not run a mailing list to announce policy edits. If you return to the site after a long gap, read the date and the form status message again before you type personal details.

| Contact

Privacy contact

Privacy requests go to the same studio that runs this website. Email [email protected], call +56 9 0318 3771, or write to Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile. Please put "Privacy request" in the subject so the message is easy to find.

You can also use the contact form, which opens an email to the same address. Questions about a photograph's licence can follow the Unsplash link in the footer.

Please monitor the reply, including the spam folder. This contact is for the operator of Skin & Soul at the Santiago address above. It is not a general mailbox for other businesses.

| Identity

Who is responsible for your information

The business responsible for inquiries sent through this website is Skin & Soul, the beauty salon and skincare studio at Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile. You can email [email protected], call +56 9 0318 3771, or post a letter to that address. Those are the contact details for ordinary questions and for privacy requests. A company registration number and a data-protection officer are not published. This policy does not invent either one, and it does not claim a government certificate of compliance.

This website is a set of pages about that studio. It is not an online shop, a clinic portal, or a booking engine with accounts. Personal information reaches the studio when you choose to email [email protected], when you call, when you write a letter, or when you complete a form and then send the email your browser opens. If you do not send the email, the studio does not receive the form. The on-page summary is shown to you and is not written into a database on the site.

The details a form is built to carry are your name, your email address, an optional phone number, an optional service topic, an optional preferred date, an optional preferred time, and your message, together with the fact that you ticked the privacy acknowledgement. Please do not add identity document numbers, payment card numbers, or medical records. If you add them, they travel inside the email you send, and the studio would rather you did not. You can ask us to delete material that should not have been included.

Technical requests also occur when your browser loads the pages. The host that serves the files may log an IP address and a request for a page, under the host's own practices, which are not restated here as if we operated that log. Loading fonts from Google, the slider files from jsDelivr, and an icon from Iconify sends a request to those providers. Their policies describe that processing. It is separate from the content of your inquiry email.

We use inquiry information to identify you, to reply, to discuss a possible visit, and to keep a record of that conversation for as long as we need it for those purposes or for a legal duty. We do not sell personal information. We do not upload inquiry lists to an advertising audience. We do not use the information to make automated decisions that produce a legal or similarly significant effect on you. Checking that an email field contains an @ sign is a format check in your browser, not a decision about you.

The studio looks to Chilean law for this activity, in particular Law No. 19.628 on the protection of private life. Law No. 21.719 on personal data protection has been enacted and comes into operation on the timetable stated in that law. This policy does not claim that every future obligation is already being certified. It does state the practical commitments below, which you can enforce by writing to us, and it does not ask you to waive mandatory rights.

If you contact us from outside Chile, your information will still be handled for the purpose of answering a studio in Santiago. Your local law may give you additional rights. You can raise them at the same email address. We do not appoint an EU representative on this page, because none has been designated. The absence of that appointment is stated openly rather than implied.

| Rights

How to use your privacy rights

You may ask whether the studio holds personal information about you in its inquiry correspondence, and you may ask for a copy of it. Write to [email protected] with the subject privacy request, or post the request to Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile, or call +56 9 0318 3771 and follow up in writing if we ask you to so that the request is clear. Tell us the email address or phone number you used before, so we can find the right thread and so we do not disclose one person's messages to another.

You may ask us to correct information that is inaccurate. A mistyped phone number or a day you no longer want considered is a correction. Say what should replace it. You may ask us to delete inquiry information when we no longer need it to answer you or to meet a legal obligation. If we must keep a record, we will tell you why, in ordinary language, rather than ignoring the request. We do not publish a single retention number of months, because the right period depends on whether a visit happened and on any duty to keep a business record. That is a real limit, not a refusal to delete anything.

You may object to a use that is not required to answer the message you sent. This website does not run a mailing list, so there is no newsletter preference to untick. If you receive a message you did not expect, forward it to [email protected] and say so. We do not ask you to accept marketing as a condition of reading the site or of requesting a visit.

You may complain to the authority Chilean law designates for personal-data matters, whether or not you have written to us first. We ask that you write to us as well when you are willing, because many issues are a mistyped address or a message that was never sent, and those are faster to resolve at the studio. A complaint to an authority does not require you to accept our description of the facts.

We will respond within a reasonable time. If we need to confirm that you are the person the information is about, we will ask only for what is needed to avoid sending your thread to someone else. We will not ask for a copy of a payment card. If a request is unclear, we will say what is missing. If we refuse a request, we will say why and how you can complain.

Children are not the audience of this site. We do not knowingly seek personal information from children. If you believe a child has emailed the studio, contact [email protected] and ask for that message to be deleted. Do not send a child's photograph or health information in order to make the point. An adult's description of what happened is enough.

The rights above apply to information the studio actually received. They do not let us reach into your browser and delete a draft you have not sent, or delete a copy in your own sent folder. Those copies are yours to remove. They also do not require a third party such as Google Fonts or your email provider to act on our instruction beyond what their own relationship with you requires. We will tell you when a request has to be made to that other party.

| Advertising

Advertising, cookies, and this policy

Skin & Soul may promote this website. An advertisement should match the pages: the business name, the Santiago address, the phone number, the email, the description of beauty topics, and the statement that a form is a request rather than a confirmed booking or a payment. An ad should not promise a medical result, a price that is not on the site, a review score the site does not publish, or an instant reservation the site cannot make.

The pages themselves do not include an advertising tag, a remarketing pixel, or a conversion script. Submitting a form does not send your name or email to an advertising platform. We do not build audiences from inquiry emails. If that ever changes, this policy and the cookie policy will be updated before the change, and a consent step will be added where the law requires consent for non-essential tracking. Until that edit is published, the absence of those tags is the accurate description.

Third-party services that help the pages display, namely Google Fonts, jsDelivr, and Iconify, receive the technical request your browser makes for a file. They do not receive the body of your appointment email from us. Your own email provider receives the email because you send it. That provider's privacy notice applies to its service. We do not control its logs.

We do not use standard contractual clauses or a transfer impact assessment as a document we claim to have published. Font and script requests may be handled on servers outside Chile, and email may be routed outside Chile by the mail services involved. We name that possibility plainly. We do not dress it up as a certification we have not obtained.

If you saw an advertisement that does not match this policy or the rest of the site, email [email protected] with the subject website or advertising, and describe what the ad said. Please do not include screenshots that show someone else's personal information. We will use your message to compare the ad with the pages and to correct a mismatch we are responsible for. We cannot promise that an advertising platform will approve or reinstate an account. That decision is the platform's.

Security is proportionate to a small studio mailbox and a static website. Use a current browser. Do not send the form from a shared computer you cannot lock. Do not forward the studio's reply to people who should not see your question. We have no security seal to display, and we do not claim one. If you believe an email pretending to be Skin & Soul asked you for a payment or a password, do not reply to it. Contact us on +56 9 0318 3771 or at [email protected] using the details printed here, not the details in the suspicious message.

This policy was prepared so that a visitor can see, before sending anything, who will receive it, why, how to object, and how to ask for deletion. The date at the top of the policy changes when the handling changes. Continuing to read the site does not by itself send personal information. Sending an email does. If you do not agree with this description, do not send the form. You can still read the guides.

| Categories

Categories of information, stated one by one

Identity and contact details are the core of an inquiry. That means the name you type, the email address you type, and the phone number if you choose to add one. We use them to know who is writing and how to answer. We do not ask for a national identity number, a date of birth, a photograph of a document, or a copy of a passport. Please do not send those. If a message arrives with them, you may ask us to delete the attachment or the extra lines, and we will do so unless a legal duty requires a narrow record that the message existed.

The content of your message is the second category. It includes the beauty topic you select, any preferred date or time, and the words you write. We read that content to understand the question and to decide whether we can reply with a possible time, a clarification, or a statement that the studio cannot help. We do not score the message, sell it, or combine it with data bought from a broker. We do not ask you to disclose health information. If you volunteer that your skin is sensitive, we treat that sentence as context for a beauty conversation, not as a medical file.

Technical data is the third category, and it is thinner. The computer that hosts the website may record a request for a page, which can include an IP address, the time, and the address of the page. We do not use that log to identify the author of an inquiry, and we do not publish the host's retention period because it is not ours to invent. Font and script providers receive their own technical requests, described in the cookie policy. Those requests are not the text of your email.

Correspondence after the first email is the same information continued: your replies, our replies, and any time that was suggested or agreed. We keep that thread so both sides can see what was said. There is no separate customer-relationship database sitting behind this website. If you telephone, the person who answers may note a name and a number in order to call you back or to match you to an email. That note is held for the same purpose and is covered by the same request rights.

Information we do not collect through the site includes account passwords, payment card numbers, loyalty balances, precise location from your phone, contacts from your address book, and advertising identifiers. There is no app. There is no checkout. If someone claiming to be the studio asks you for a card number or a one-time password, that request does not come from the process described here. Hang up or ignore it, and reach us on +56 9 0318 3771 or at [email protected] using the details printed on this page.

Special categories of data, in the sense of health, biometrics, or similar sensitive information, are not required for a beauty inquiry and should not be sent. A sentence that you prefer a gentle approach is ordinary context. A diagnosis, a prescription, or a clinical photograph is not. We would rather refuse the extra information than store it. You help that outcome by leaving it out. If it has already been sent, ask for deletion and we will remove it from the inquiry mailbox when the law allows.

We also do not knowingly collect information about children. The site is written for adults arranging their own beauty questions or, where appropriate, writing with another adult's agreement. A parent who discovers that a child has written should email [email protected]. We will delete what we can identify from the description, without asking the parent to forward the child's photograph or medical details as proof.

| Keeping

How correspondence is kept and protected

Inquiry emails live in the studio mailbox at [email protected] and in whatever sent folder you keep on your side. Postal letters, if you send them, are kept at Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile with the studio's other correspondence. Telephone notes, if any are made, stay with the studio. The website does not make an extra copy in a form database, because the form does not post to a database. That design reduces one place your words could sit, and it means a privacy request is aimed at the mailbox and the studio's notes, not at a hidden account page.

We keep a thread while we need it to answer you, to remember a time that was agreed, or to meet a duty to keep a business record. We do not assign a public number of months, because a question that never became a visit is not the same as correspondence about a visit that happened, and because Chilean law, not a marketing preference, sets some minimums we will not pretend to override. When you ask for deletion and we can delete, we delete the message from the mailbox we control. We cannot delete the copy in your sent mail, and we cannot promise that a mail provider's backup disappears on the same day.

Access to the mailbox is limited to people at the studio who need it to reply. We do not publish a staff list, so this policy does not name those people. Sharing is not a licence for everyone in a workplace to browse out of curiosity. Messages are not posted to a social network and not pasted into an advertising account. If we must disclose information because a binding legal process requires it, we disclose what the process requires and not a whole mailbox for convenience.

You can reduce risk on your side without any special software. Use an email address you control. Avoid shared devices. Do not forward a thread that contains your phone number to a group chat. Read the draft the form opens before you send it, so you can delete a sentence you typed by mistake. The draft is still yours at that moment. Sending is the step that brings us a copy.

If we discover that inquiry mail has been exposed, for example because a mailbox was accessed without authorisation, we will tell the people affected when we can identify them and when a notice is required or obviously useful, and we will say what happened in plain language. We will not describe that notice as a certification we do not hold. We will also tell you what we are doing to stop a repeat, at the level of detail that does not make the mailbox easier to attack.

Links in our replies, if we send any, should match the business you already know. We will not ask you to log into a payment portal this website does not operate. We will not ask you to install an app. If a message with our name does those things, treat it as untrustworthy and contact +56 9 0318 3771 using the number on the site, not the number in the suspicious message. That check is part of how a small studio keeps a simple contact path safe.

The same care applies to paper. If you write to Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile, do not include card details or identity numbers in the envelope. A letter that says you want a copy of your emails, or that you want them deleted, is enough. Put a return address or an email on the letter so we can respond. We will not publish your letter on the website.

| Scope

What this policy covers and what it does not

This policy covers the Skin & Soul website and the inquiries that reach the studio from it, by direct email to [email protected], by the form, by phone at +56 9 0318 3771, or by post to Av. Vicuña Mackenna 269, 8320000 Santiago, Región Metropolitana, Chile. It covers reference photographs only to the extent of saying they are not client images and that Unsplash has its own rules. It does not cover a different website that copies our wording. It does not cover an advertiser's dashboard, except that we do not send your form contents there.

It does not cover treatment you receive in person, beyond the fact that notes of how the visit was arranged may sit in the same correspondence. What happens in the chair is a beauty service, not a product of the webpage. Questions about that service can still be sent to the same contacts. Your mandatory rights as a consumer in Chile are not created by this policy and are not cut down by it. Law No. 19.496 remains relevant to agreed services where it applies. Law No. 19.628 remains the privacy statute we look to for personal information, alongside Law No. 21.719 as that law's own start date requires.

It does not make the studio your clinician. Nothing in the way we store an email turns a beauty question into a health record we are qualified to keep. Please keep clinical information with a clinician. If clinical information arrives anyway, we will treat the deletion request seriously and we will not add it to any marketing use, because there is no marketing list to add it to.

It does not promise a particular response time for appointment requests. Privacy requests are answered within a reasonable time, as the rights section says. A request for a brow appointment on a busy week is a different queue. If you need to know whether a day is free, call. The policy's silence on a service-level hour is intentional. Inventing a guaranteed reply within a fixed number of minutes would be a service claim the studio has not published.

It does not authorise anyone else to write to you in our name. Contractors who might one day help with the website would be named in an update if they received inquiry content. At the date of this policy, the inquiry content is for the studio mailbox. Font and script providers do not get that content from us. Your email provider gets it because you are their customer as well as, for that message, a person writing to us.

If part of this policy is held not to apply because a mandatory rule says otherwise, the rest of the policy stays in place. A sentence that cannot be enforced is not an invitation to ignore the contact details or the statement that we do not sell data. You can always ask for the practical version: what do you hold, please correct it, please delete it. Those sentences work even if a legal citation on this page is later updated.

The current version is the page you are reading. We do not keep a public archive of older privacy policies inside a client account. If you need to know what the form did on the day you wrote, the status text you saw and the email you sent are the best record. If those ever disagree with a later edit of this page, tell us. We would rather correct the page than leave two stories in circulation. Contact [email protected] with the subject privacy policy, or write to the Santiago address, or call +56 9 0318 3771.

Related policies

Privacy PolicyTerms & ConditionsCookie Policy