Privacy Policy

• Visitors browsing the public ranking, business profiles and comparison pages. No account is needed and we do not ask visitors for personal data.
• Business owners and authorised representatives who create an account, claim a business, and optionally pay to compete.

Most information published on business profiles — business name, description, treatments, neighbourhood, address, website and social links — is business information rather than personal data, although for sole practitioners it may relate to an identifiable individual.

• Account data: email address, an encrypted password credential, account creation and sign-in timestamps, and the authentication session held in your browser.
• Claim data: the business claimed, the claimant name and contact details you submit, the statement of authority you make, and the status and timing of the claim.
• Business data: the listing information and media associated with a business, including anything an owner edits or adds.
• Competition data: entries, competitive amounts, overtakes, pauses, re-entries, positions and position history. Competitive amounts and positions are published publicly by design.
• Payment data: the amount, currency, status, timestamps and Stripe identifiers for each payment. Card numbers are entered in Stripe's payment interface and are never received or stored by AestheticBid.
• Technical data: information necessarily processed to serve the site, such as IP address, request data, browser and device information contained in requests and server or security logs.
• Correspondence: the content of messages you send us, and the address you send them from.

We do not run advertising or analytics trackers, we do not build advertising profiles, and we do not knowingly collect health data about individuals or data from children.

• To operate the public ranking, business profiles, search and comparison features.
• To create and secure owner accounts and authenticate sign-ins.
• To process claims and determine who may manage a business profile.
• To take payment through Stripe, confirm it, and grant or update a competitive position.
• To keep an accurate, auditable record of competitive events, amounts and position changes, which is a core transparency feature of the platform.
• To respond to support, correction, dispute and removal requests.
• To detect, investigate and prevent fraud, abuse and unauthorised access, and to keep the service secure and available.
• To comply with legal, accounting and tax obligations that apply to us.

• Supabase — database, authentication and backend hosting for account, claim, listing, competition and payment-record data.
• Stripe — card payment processing and payment confirmation. Stripe acts as an independent controller of the payment data it collects and applies its own privacy notice.
• Lovable — the development and hosting platform on which AestheticBid is built and served.

These providers process data to deliver their service to us. We do not sell personal data and we do not share it for third-party advertising.

The operator is in Spain, the businesses listed are in the United States, and our providers operate infrastructure in multiple countries, including the United States. Personal data may therefore be processed outside your own country.

We keep account and claim data while the account exists and while it is needed to establish who manages a business. Payment records and competition events, amounts and position history are retained as part of the platform’s permanent transparency and audit record, and to meet accounting obligations. Technical logs are kept only for short operational and security periods.

Depending on where you live, you may have rights over your personal data, such as access, correction, deletion, restriction, objection or portability. Regardless of whether such rights apply to you, you can ask us to:

• tell you what data we hold about you or your business;
• correct inaccurate account, claim or listing information;
• close your owner account;
• remove or correct a business profile, as described in the Listing Policy.

Some records cannot simply be erased: published competition events, amounts and position history form the audit record of a paid public ranking, and payment records are needed for accounting and dispute handling. Where that applies we will tell you.

Access to accounts requires authentication, data access is restricted at database level to the account it belongs to, and competitive and payment operations are executed only on the server. No system is completely secure; if we become aware of an incident affecting your data we will act on it and inform you where appropriate.

The site uses a small number of first-party technologies and no third-party trackers. See the Cookie & Tracking Policy for the full list.

We will update this policy as the platform develops; the date at the top shows the last change.

Privacy contact: contact@aestheticbid.com. Postal address: Francisco Serralvo, C/ La Unión Mercantil 33, 29004 Málaga, Spain.