Zenita Skin treats intake records, click telemetry, and medical consultation inquiries with verified clinical boundaries.

This privacy policy took effect on 2026-10-18. It governs every visitor interaction, inquiry submission, appointment scheduling dispatch, and network telemetry packet recorded across the clinical domain zenitaskin.click.

We do not operate legacy tracking schemes or undocumented pixel pipelines. When changes occur in federal, Texas, or cross-border privacy standards, this docket is republished with immediate binding effect.

The designated data controller responsible for personal intake information is Zenitaskin, trading as Zenita Skin, operating the clinical domain zenitaskin.click.

Physical practice location: 308 Brazos Street, Austin, Texas 78701, Austin, Texas, United States.

Direct electronic dispatch: office@zenitaskin.click. Telephone voice line: +1 (464) 595-9201. Corporate registration is held in the State of Florida, with professional cosmetic dermatology association affiliation governing clinical protocol standards under product manager Irina Petrova.

Zenita Skin records distinct categories of client and technical data across its digital infrastructure:

• Inquiry & Intake Submissions: Form payloads transmitted via nafi8ee.php containing client name, telephone number, email address, physical delivery address for home-care formulation packages, inquiry category, clinical treatment notes, requested treatment specification, and explicit consent check.
• Support Chat Logs: Conversation strings sent to dugif36.php along with the locally generated browser session token, client timestamp, and optional contact credentials.
• Automated Server Telemetry: Originating IP address, user-agent string, client screen parameters, referer header, timestamp when the consultation form was rendered, and timestamp when transmission completed.
• Advertising Ingress Identifiers: Inbound click identifiers passed via incoming query strings from paid traffic campaigns, specifically gclid, msclkid, and fbclid.
• Consent State Records: The local browser key site_consent_v2 tracking opt-in or opt-out selections for analytical and advertising processing.

We do not store passwords, bank card numbers, or payment accounts on this site. Zenita Skin maintains an inquiry-only catalogue; no financial transactions take place online.

Zenita Skin collects and processes data solely for legitimate, bounded clinical and operational reasons:

1. Pre-Procedure Diagnostic Triage: Reviewing client skin conditions (such as acneic, rosacea, melasma, or photo-damage) and checking contraindications prior to chemical peels or neurotoxin administration.
2. Consultation Coordination: Confirming appointments, notifying patients of pre-visit preparation requirements, and coordinating in-person diagnostics at 308 Brazos Street.
3. Home-Care Regimen Fulfillment: Compounding and dispatching recommended nutraceutical capsules, softgels, barrier creams, and topical powders.
4. Real-Time Technical Assistance: Maintaining continuous operator dialogue via support chat regarding active protocols.
5. Campaign Attribution & Budget Optimization: Measuring return on ad spend across Google Ads and Microsoft Advertising to refine clinical outreach in Central Texas.
6. Infrastructure Defense: Mitigating denial-of-service attempts, spam submissions, and automated crawler abuse.

We process personal information under documented lawful justifications:

Zenita Skin operates as an active advertising destination. We purchase targeted placements and direct search traffic from major digital networks to connect Austin patients with licensed skin protocols.

The advertising platforms that send traffic here are:

• google ads: Operated by Google LLC / Google Ireland Ltd. Links generated by Google Ads append the parameter gclid (Google Click Identifier) to URLs landing on this website.
• microsoft advertising: Operated by Microsoft Corporation / Microsoft Ireland Operations Ltd. Ad links append the parameter msclkid (Microsoft Click Identifier) to destination URLs.
• Meta Ads: Operated by Meta Platforms, Inc. / Meta Platforms Ireland Ltd. Sponsored links append the parameter fbclid (Facebook Click Identifier).

These click identifiers allow ad networks to attribute subsequent appointments and estimate cost-per-acquisition. No marketing platform has endorsed, verified, or approved the clinical procedures offered on this site.

Under strict privacy compliance standards, Zenita Skin implements consent mode v2 across every page of this website.

Upon initial page load for any visitor, the four core Consent Mode v2 signals are initialized in a locked, denied state:

• ad_storage: denied
• ad_user_data: denied
• ad_personalization: denied
• analytics_storage: denied

Only when a visitor actively clicks "Accept" on our banner are these four signals updated to granted. If the visitor clicks "Decline", closes the notice without selection, or later revokes permission through the footer Cookie Settings control, all four parameters are instantly reset to denied. No marketing tag executes storage writes when these flags are denied.

Zenita Skin relies on select enterprise data processors to deliver hosting, database storage, message routing, and campaign telemetry:

• Google LLC / Google Ireland Ltd: Processes analytics and Google Ads conversion events when Consent Mode permits. Privacy policy available at policies.google.com.
• Microsoft Ireland Operations Ltd / Microsoft Corporation: Delivers Microsoft Advertising search traffic and attribution tracking. Full details are governed by the Microsoft Privacy Statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms Inc: Measures campaign conversions and ad delivery optimization.
• Dedicated Hosting Provider: Maintains high-security Linux server hardware in secure domestic data centers housing the PHP backend runtime and SQL intake store.
• SMTP Routing Provider: Encrypts and delivers notification emails generated upon intake form completion to clinic reception at 308 Brazos Street.

Zenita Skin operates its physical practice inside the United States. Inbound traffic originating in the European Economic Area, the United Kingdom, or Canada may experience cross-border data transfer to servers located in North America.

Such transfers are conducted under recognized lawful mechanisms, including European Commission Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements, and participation by our ad infrastructure partners in the EU-U.S. Data Privacy Framework.

We do not retain personal information indefinitely under generic boilerplate clauses. We enforce exact, audited retention timelines:

• Enquiries and their email copies: Retained for 24 months following initial submission to maintain continuity of cosmetic treatment records and dosage histories.
• Chat transcripts: Stored on the server and in local browser storage for 12 months.
• Server and access logs: Retained for 90 days before automated deletion and disk rotation.
• Record of a consent choice: Maintained in the browser under site_consent_v2 for 12 months before prompting re-validation.
• Data Subject Access Requests: Formal DSAR inquiries and identity verification records are answered within 14 days and archived for 36 months to satisfy regulatory compliance.