Privacy policy
What we collect when you use this site, why we collect it, and what we never do with it.
Last updated: 2026-10-10
Privacy policy
Who we are
This site belongs to Pao Boscán — Aesthetics & Wellness Center, with studios in Katy and Baytown, Texas. This policy explains what personal information the website collects, why, who it is shared with and what you can ask us to do with it. Information you give us in person at the studio (for example your health history or consent forms) is part of your client record and is handled under the rules that apply to those records, not under this website policy.
What we collect
Contact form: your name, email address, phone number (optional) and your message. Booking request: your name, email address, phone number, the treatment you are interested in, your preferred date and time, anything you write in the notes field, and, where present, the campaign parameters in the link you arrived on. Online booking: your name, email address, phone number, the treatment, the studio, the date and time you choose and any notes. Please do not include detailed health information in a notes field — we ask for your health history at your consultation, not through the website.
Why we use it
Only to answer you, to arrange, confirm and remind you of your appointment, and to look after you as a client. We do not sell your personal information — including any sensitive information — we do not trade it, and we do not use it for advertising profiles.
Who it is shared with
Online bookings are created in Square Appointments: your name, email, phone and appointment details are sent to Square, which keeps the appointment and sends you confirmations and reminders under its own privacy terms. Form submissions are stored in a secure database hosted by Supabase, and the website is hosted by Vercel. These providers act on our behalf and may not use your information for their own purposes. If you message us on WhatsApp, that conversation is also subject to WhatsApp's terms. We may disclose information if the law requires it.
Payments
When you pay a deposit or the full price while booking, the card details are entered into a secure form provided by Square and go directly to Square. This website never sees, receives or stores your card number. We keep only a record of the payment (Square's payment reference, the amount and the date) and that you accepted the cancellation policy. Payments and refunds are handled by Square, instalments by Afterpay (if you choose it, Afterpay receives your details to approve and run the plan), and financing by Cherry, each under their own terms.
Calls, texts and WhatsApp
When you tick the consent box on a form, you agree that we may contact you by phone, text message, WhatsApp or email about that enquiry or appointment. We do not send promotional text messages unless you have separately agreed to receive them. You can reply STOP to any text message, or ask us at any time, to stop being contacted that way. Message and data rates may apply.
Analytics and cookies
We use Vercel Web Analytics and Speed Insights to understand which pages are useful and how fast they load. They report aggregated figures, do not use advertising cookies and do not track you across other websites. The site may store a small cookie or browser setting to remember your language and simple preferences. You can block cookies in your browser and the site will still work.
Photographs
Before-and-after photographs of clients are published only with written permission covering publication on this website and in marketing. Permission can be withdrawn at any time by contacting the studio, and the image is removed.
AI Beauty Studio
AI Beauty Studio asks for your consent before it analyses a photo. The photo is then processed entirely in your browser by a face-detection model that runs on your device: the points it finds on your face exist only in your browser's memory for the simulation. Neither the photo nor those facial measurements are uploaded to our servers, sent to any third party, stored, used for analytics or used to train models, so we never receive or keep any biometric information about you. Everything disappears when you close or reload the page, unless you choose to download or share the result yourself. Simulations and estimates are illustrative only and are not a diagnosis, medical advice or a guarantee of results.
How long we keep it and how we protect it
We keep enquiries and booking records only for as long as we need them to look after your appointments and to meet our legal and record-keeping obligations, and then delete them. Access is limited to the studio and protected with encryption and access controls. No system is perfectly secure, so please contact us right away if you think something is wrong.
Your choices and rights
You can ask us whether we hold information about you, for a copy of it, to correct it or to delete it, and you can withdraw any consent you have given. Contact the studio by phone, WhatsApp or the contact form and we will respond within 45 days. We will not treat you differently for making a request. Withdrawing marketing consent does not affect your appointments.
Children
This website is not directed to children under 13 and we do not knowingly collect their information. Appointments for clients under 18 are arranged with a parent or guardian.
Changes to this policy
If the way the website handles information changes, we will update this page and the date at the top.