Privacy Policy
Last updated: 2 November 2026
Eliorah Medical Aesthetics ("Eliorah", "we", "us") respects your privacy. This policy explains what personal information we collect through this website and at our clinic, why we collect it, and how we protect it, in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).
1. Who we are
Eliorah Medical Aesthetics is a doctor-led aesthetic clinic at Malakas Street, Diliman, Quezon City, Metro Manila. For any privacy question or request, contact our Data Protection Officer at eliorahaesthetics@gmail.com or 0935 871 0054.
2. Information we collect
Through this website. This website has no forms and does not use analytics or advertising cookies. We only receive personal information when you choose to:
- Book an appointment through our online booking calendar: typically your name, contact number, email address, preferred schedule and the concern or treatment you're interested in.
- Contact us by phone, text, email or Instagram message: whatever you choose to share with us.
At the clinic. When you consult or receive treatment, we collect information needed for your care, which may include your medical history, skin assessment results, clinical photos (including before-and-after photos), treatment records, consent forms and payment records. Health information is sensitive personal information under the law, and we treat it with extra care.
3. How we use your information
- To schedule, confirm and manage your appointments and send reminders.
- To assess your concerns, plan and provide treatment, and follow up on your progress.
- To keep accurate medical records, as required for safe medical practice.
- To process payments and issue receipts.
- To answer your questions and requests.
- To meet our legal and regulatory obligations.
We will never use your photos, testimonials or name in our marketing or on social media without your separate, written consent, and you may withdraw that consent at any time.
4. Legal basis
We process your information based on your consent, to fulfil our service to you (your consultation and treatment), to comply with legal obligations, and, for sensitive personal information, as needed for medical treatment by our licensed physician, as allowed under Sections 12 and 13 of the Data Privacy Act.
5. Who we share it with
We do not sell your personal information. We share it only when needed, with:
- Our online booking provider (the calendar linked from our "Book Now" buttons) and, where you book through them, booking platforms such as Fresha, which process your booking details on our behalf.
- Service providers who help us run the clinic and this website, such as our website host and email provider, under appropriate confidentiality obligations.
- Laboratories or other healthcare providers, only when needed for your care and with your knowledge.
- Government authorities, when required by law.
6. Third-party content on this website
This website loads fonts from Google Fonts, embeds our booking calendar, and links to our Instagram page. These services may receive technical information such as your IP address and browser details when the page loads, and are governed by their own privacy policies. Information you enter in the booking calendar is collected by our booking provider for us.
7. How we protect your information
We use reasonable organizational, physical and technical measures to protect your information against loss, misuse and unauthorized access. These include limiting access to authorized clinic staff, keeping records secure, and requiring service providers to protect your data. No method of transmission over the internet is completely secure, but we work to protect your information at every step.
8. How long we keep it
We keep your information only as long as needed for the purposes above. Medical records are kept for the period required by Philippine laws and medical record-keeping standards; other information is deleted or anonymized once it is no longer needed.
9. Your rights
Under the Data Privacy Act, you have the right to:
- Be informed about how your information is collected and used.
- Access your personal information.
- Correct inaccurate or outdated information.
- Object to processing, and withdraw consent where processing is based on consent.
- Erasure or blocking of your information, where legally allowed.
- Data portability: receive a copy of your information in a commonly used format.
- Damages, if you are harmed by inaccurate, incomplete or unlawfully obtained information.
- File a complaint with the National Privacy Commission (privacy.gov.ph).
To exercise any of these rights, email eliorahaesthetics@gmail.com. We may need to verify your identity before acting on your request.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.