Privacy Policy
Effective: 20 October 2026
This policy explains what personal data we process when you visit devinsaesthetic.com or contact us, why, and what your rights are. We follow Indonesia's Personal Data Protection Law (Law No. 27 of 2022). The Indonesian version is the reference text.
Who we are
Devins Aesthetic Spa & Beauty.
Address: Jl. Gunung Belah RT.44, RW.13, Loa Ipuh, Tenggarong, Kutai Kartanegara, East Kalimantan 75513, Indonesia.
Contact: WhatsApp +62 851-8777-7828.
Does this site collect my data?
Very little. There are no forms, accounts or payments, and no analytics or advertising cookies.
What data is processed, and why?
1. When you message us on WhatsApp
The "Book" buttons open WhatsApp with a pre-filled message. Nothing is sent until you press send. We then receive your profile name, WhatsApp number and the conversation (for example, your preferred time, the treatment you want and, if you tell us, your skin condition).
Purpose: to answer you and arrange your booking.
Basis: your request before and during our service agreement (Art. 20(2)(b) PDP Law). Any skin or health information is used only to choose a treatment that is safe for you.
WhatsApp is run by WhatsApp LLC / Meta, whose own privacy policy applies to its processing.
Retention: we keep chats while needed for the service, and no longer than 12 months after your last visit, unless you ask us to delete them sooner.
2. Google Maps
The "Location" section shows a Google map. When the map loads, Google may receive your IP address and device information and may set cookies, under Google's privacy policy (policies.google.com/privacy). We do not receive that data. If you prefer, skip the map and use the written address above.
3. Hosting logs
The site is hosted by Vercel Inc. (United States). Like any web server, Vercel logs technical data about visits (IP address, browser type, page requested, time) to deliver pages and keep the site secure. We do not use this to track or identify you, and it is kept only briefly under Vercel's policies.
Basis: legitimate interest in running and securing the site (Art. 20(2)(f) PDP Law).
4. Photos and reviews on the site
This site does not show clients' faces. A photo showing a client's face will only be published with that person's written consent. Google review excerpts are shown without the author's name. If you appear in a photo or wrote a review and want it removed, contact us and we will remove it.
Is my data sent abroad?
Partly: Vercel, Google and WhatsApp/Meta servers are outside Indonesia. We use large providers with adequate data-protection and security measures (Art. 56 PDP Law).
Do you sell my data or use it for ads?
No. We do not sell data or send promotions you did not ask for.
What are my rights?
You can ask for information, access and a copy of your data, correction, deletion, withdrawal of consent, and you can object. Send your request by WhatsApp; we reply within 3 x 24 hours.
If you believe your rights were breached, you may complain to Indonesia's competent personal data protection authority.
Changes
If this policy changes, the new version and its date will appear on this page.