Privacy Policy - FacialNexus

1

Who We Are

Our website address is https://facialnexus.com, (referred to as the Website).

FacialNexus (referred to as we, us or our) operates as an exclusive consultancy and intermediary platform based in the Netherlands. We are committed to protecting and respecting your privacy. This privacy statement explains how we collect, process, and use personal information that we obtain from you when you visit, interact with, or submit data through our website to facilitate your aesthetic journey.

2

Who is Responsible for the Processing of Personal Data?

Controller

FacialNexus acts as the Data Controller for the initial information you submit. We are responsible for the processing of personal data on our platform and decide which personal data are collected, the purposes of the processing, and the technical and organizational means involved in processing such data for our consultancy services.

Processor(s) and Third-Party Partners

We engage third-party data processors (such as secure medical cloud storage providers, data management platforms, and CRM systems) who process personal data on our behalf. Most importantly, to fulfill our intermediary role, we securely process and forward your data to our exclusive 3D implant design partners and their affiliated surgical networks. All processors and partners are contractually required to ensure the absolute security and confidentiality of your data.

3

On What Legal Grounds Are My Data Processed?

In accordance with the General Data Protection Regulation (GDPR) and applicable international privacy laws, we process your personal data on the following legal grounds:

Contractual and Pre-contractual Obligations: To fulfill our consultancy services or to take necessary pre-contractual steps at your request (such as evaluating your structural intake form and preparing your file for our design partners).

Legal Compliance: To comply with legal, medical-administrative, or regulatory requirements related to managing our professional relationship, including legal bookkeeping and invoicing.

Legitimate Interest: To pursue our legitimate interests in optimizing our facilitation services, communicating effectively with you, and tracking service qualities.

Explicit Consent: To obtain your voluntary consent for specialized processing, such as securely forwarding sensitive diagnostic medical data (3D CT scans) to our specialized third-party designers and international medical network.

4

Which Personal Data Are Being Processed?

FacialNexus collects and processes only relevant personal data that is strictly necessary for the custom engineering facilitation and logistics purposes for which it is collected. The categories of personal data we process include:

Personal Identification Data: Name, first name, age, gender, date of birth, and nationality.

Contact Details: Telephone number, email address, and messaging handle (if provided for direct consultation).

Electronic Identification Data: IP address, browser type, cookies, and general location details.

Complex Anatomical and Sensitive Medical Data: 3D CT-Scans (DICOM / ZIP data records), facial photos/videos submitted for morphing, manual anatomical measurements, and specific structural facial preferences.

Financial Identification Data: Bank details or transaction information required to securely process invoices and retain our consultancy services.

5

Purposes of Data Processing

We use the information we collect from you exclusively to deliver an elite, personalized architectural facilitation experience:

Implant Architecture and Sculpting Facilitation: To collect and review your skull structure data, and securely forward this to our principal design partners so they can perform spatial and mathematical facial modeling and generate precision 3D blueprints.

Surgical Network Coordination: Upon your explicit request and authorization, to securely share your finalized 3D blueprints and anatomical data with board-certified network surgeons for professional medical cross-checking and scheduling.

Concierge Logistics and Care: To coordinate on-site hospitality, transportation, and specialized diet logistics if you choose to utilize our premium support services.

Client Communication: To respond to your initial intake submissions, conduct detailed video evaluations, and securely follow up via encrypted communication pipelines.



6

Sharing of Personal Data with Third Parties

We do not sell, trade, rent, or lease your personal information to third parties. Your data is only shared with unaffiliated third parties under the following strict conditions:

Authorized Medical Partners and Designers: With your explicit approval, we will share your initial intake data, aesthetic preferences, and related CT scans with our exclusive 3D design partner and designated surgeons within our vetted network to verify the physiological safety, design the custom PEEK matrix, and determine feasibility of your procedure.

Service Providers: We may share necessary administrative data with technical subcontractors who assist in website hosting, automated billing, or shipping logistics, provided they ensure absolute data security.

Legal Protections: We may disclose your information if legally compelled by judicial court orders, subpoenas, or applicable laws to protect the safety, rights, or property of FacialNexus, our patients, or the public.

7

Data Retention and Security

We take extensive technical, administrative, and organizational security measures to protect your sensitive data, especially medical DICOM structures and images, against unauthorized access, accidental loss, alteration, or unlawful destruction.

Identifiable personal and anatomical data are held no longer than strictly necessary to complete our consultancy and design facilitation services, fulfill contractual agreements, or meet mandatory medical-legal record retention requirements.

8

Your Rights Regarding Your Personal Data

Under the GDPR, you retain complete authority over your information. You have the right to:

Access: Request an overview or copy of all personal and diagnostic files we hold about you.

Rectification: Request immediate correction of inaccurate or incomplete biographical details.

Erasure (Right to be Forgotten): Request the total deletion of your personal records, provided they are no longer required for active contractual obligations or legal compliance.

Restriction and Objection: Object to or restrict specific processing paths, such as administrative analytics or marketing tracking.

Withdraw Consent: Revoke your given consent at any time for future processing actions (such as halting the sharing of your scans with our medical partners or deleting submitted scan histories).

9

Contact Information

If you have any questions regarding this Privacy Policy, wish to exercise any of your data protection rights, or want to update your communication preferences, please contact our privacy compliance officer directly at: info@facialnexus.com