Privacy Policy

RENUE Hair, Scalp & Aesthetic Center ("Renue", "we", "us") is a boutique center located at 4F SM CDO Downtown Premier, Cagayan de Oro City, Philippines. Our website is renue.ph and our contact email is hello@renue.ph.

For privacy-related questions, please contact us using the details at the bottom of this page.

We may collect the following types of information:

• Contact details — name, email address, phone number and mailing address when you book an appointment, fill out a contact form or sign up for our newsletter.
• Account information — login credentials and profile details when you create a patient dashboard account.
• Health and treatment information — details you share during consultations, assessments and treatments, including photos taken before and after procedures, treatment history and progress notes.
• Appointment and billing information — service bookings, invoices, payments, package purchases and related records.
• Technical information — browser type, device information, IP address and cookies when you use our website.

We use your information to:

• Provide, schedule and manage appointments and treatments.
• Maintain secure treatment records and track your care progress.
• Communicate with you about appointments, reminders and follow-ups.
• Process payments and manage invoices.
• Send marketing communications only where you have opted in.
• Improve our website, services and patient experience.
• Comply with legal and regulatory obligations.

We process personal information based on one or more of the following grounds:

• Consent — where you have given clear permission, for example to receive marketing emails or to use before/after photos.
• Contract — when processing is necessary to provide the services you have requested.
• Legitimate interests — for center operations, patient safety and fraud prevention.
• Legal obligation — to comply with applicable laws, regulations or lawful requests.

Your information is stored in our cloud database and file storage provided through Lovable Cloud. We rely on the technical and organisational safeguards built into that platform, including encrypted connections, role-based access controls and secure authentication.

Access to patient records is restricted to authorised Renue staff and administrators. Staff accounts require individual login credentials and permissions are limited by role.

No system is completely secure. We continuously review our access controls and encourage you to use a strong, unique password for your patient account.

We do not sell or rent your personal information. We may share data with the following categories of service providers:

• Cloud hosting and database services — Lovable Cloud, which powers our backend infrastructure and storage.
• SMS and messaging services — Zender API, used to send appointment reminders and center notifications.
• Payment processors — the secure payment provider we use to process cards and other payment methods.
• Analytics providers — where used, these help us understand website traffic and improve user experience.

We only share what is necessary for each provider to perform its function, and we expect them to handle data responsibly.

Our website may use cookies and similar technologies to remember your preferences, keep you signed in and understand how visitors use the site. You can control cookies through your browser settings. Disabling cookies may affect some features of the site.

Where analytics tools are enabled, they collect aggregated, non-identifying information such as pages visited and time on site.

We keep personal information for as long as necessary to provide our services, maintain treatment records, comply with legal requirements and resolve disputes. When information is no longer needed, we delete or anonymise it.

Health and treatment records are generally retained in accordance with applicable healthcare record-keeping requirements.

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to or restrict certain processing activities.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a data protection authority.

To exercise any of these rights, please contact us using the details below. We will respond within a reasonable timeframe and may need to verify your identity.

With your explicit consent, we may take clinical photographs to document your treatment progress. These images are stored securely and are only accessible to authorised staff.

Any before/after images displayed publicly in our gallery or marketing materials are used only with your written consent. You may withdraw that consent at any time.

Our services are intended for adults and minors accompanied by a parent or guardian. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected such information, please contact us so we can delete it.

Your information is stored and processed in the Philippines and may be handled by service providers in other countries. We take steps to ensure appropriate safeguards are in place when data crosses borders.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. We encourage you to review this page periodically.

If you have questions, concerns or requests about this Privacy Policy or your personal information, please reach out to us: