Privacy policy
Last updated 16 October 2026 · NailChecker is operated by Swedish Standards by Scandinavia Ltd · Contact: info@penelopegomes.com
This policy explains what happens to your information when you use NailChecker to send a nail photo and a consultation request to a clinic. Your nail photo and your answers about your nails are health information, which the law protects specially. We only use them with your explicit consent.
Who is responsible
- The clinic whose page you use (for example Penelope Gomes Beauty) decides how your consultation request is used and contacts you about it. For that request the clinic is the controller.
- Swedish Standards by Scandinavia Ltd operates NailChecker, hosts it for clinics and processes consultation requests on their behalf. We are the controller for the website itself and for visit statistics.
For any privacy question or request, write to info@penelopegomes.com. We pass requests about a consultation to the clinic when needed.
What we collect and why
| Information | Why | Legal basis |
|---|---|---|
| Your nail photo and your answers about your nails (which nails, how long, spreading, thickness, skin, injury), only after you tick the consent box | To send them to the clinic with your consultation request, so its team can prepare your consultation. The photo is also checked and described automatically (see below). | Your explicit consent (GDPR Article 9(2)(a)), which you can withdraw at any time |
| Name, email, phone number | So the clinic can contact you about a consultation | Steps you ask for before a possible booking |
| Whether you tapped Book | So the clinic knows who asked to book | Steps you ask for before a possible booking |
| Marketing opt-in, only if you tick it | So the clinic can send offers and nail care tips | Your consent |
| Visit statistics, only if you choose Accept in the cookie window: device type, operating system, browser, screen size, language, time zone, the page you came from, approximate area (town level, from your internet connection) and which steps you use, with times | To understand and improve the service. If you send a request, the clinic sees these details with it. | Your consent |
| A scrambled code made from your internet address (not the address itself) | To stop abuse, such as too many requests from one connection | Our legitimate interest in keeping the service safe |
The photo check and description
Your photo is sent to an AI service, Google's Gemini, twice: first to check that it is usable (a nail is visible, sharp and well lit), and after you send your details, to write a short description of what is visible on the nail, such as its colour, thickness or surface, which is shown to you on your consultation pass. The description never names a condition or cause and is not a diagnosis; it is not used to make any decision about you, and a specialist looks at your nail in person at the consultation. Google receives the photo only, not your name or contact details, and processes it on our behalf. This is a description of what is visible in your photo, not a diagnosis. Many nail changes look alike, so only a specialist who sees your nail in person can tell what is behind it.
Who else processes your information
- Vercel hosts the website and derives the approximate area from your connection.
- Google (Gemini API) checks and describes your nail photo, as described above. Under Google's terms for the paid Gemini API, it does not use your photo to train its models. This processing can take place outside the European Union.
- Supabase stores requests, photos and answers, in the European Union (Ireland).
- Resend sends email alerts about new requests to the clinic, and follow-up emails about your consultation request, from the European Union (Ireland). These emails do not contain your nail photo or your answers.
- Fresha or another booking provider, only if you tap Book. Their own privacy policy applies on their site.
Where information leaves the European Economic Area, these providers use the safeguards required by law, such as the European Commission's standard contractual clauses. We never sell your information and never use it for advertising.
How long it is kept
Your request, nail photo and answers are kept until the clinic deletes them or you ask us to, for example when they are no longer needed for your consultation or treatment. Visit statistics are kept to show trends over time and are deleted when no longer needed. You can ask for deletion at any time.
Your rights
You can ask to see, correct or delete your information, to limit or object to how it is used, and to receive a copy in a common format. Where we rely on your consent you can withdraw it at any time, by writing to us; we then delete your photo and answers unless the clinic must keep them for your treatment record. Withdrawing does not affect what was done before. Write to info@penelopegomes.com. You can also complain to the data protection authority in your country (in Malta: the Information and Data Protection Commissioner, idpc.org.mt).
Age
NailChecker is for people aged 18 or older. Please do not upload photos of anyone under 18, or of another person's nails without their permission.
Changes
If we change this policy we update the date at the top. Important changes are shown on the website.