Privacy policy

The data controller is MB „Miofunkcinės terapijos centras“ (Myofunctional Therapy Centre; company code 305028914, VAT number LT100014724314), which runs the FaceMyo clinics in Kaunas, Vilnius and Klaipėda and the website facemyo.lt.

For any question about your data, email info@facemyo.lt – we will reply within 30 days, usually much sooner.

• Contact details: first name, surname, email address and phone number.
• Visit details: the service, specialist, clinic and time you choose, your visit history and cancellations.
• Health information that you give us yourself or that your specialist records during treatment (symptoms, examination and treatment notes).
• Order and payment details: products, delivery address or parcel locker, amounts and invoices. We never see or store your card details or online banking login.
• Academy participant details: profession, workplace and company details for invoicing.
• Technical data needed for the website to work (for example, security logs and your session when signed in to “My FaceMyo”).

• To schedule your visit, remind you of it and provide the service – performance of a contract and the provision of healthcare services.
• Health information is processed only for treatment purposes and only to the extent necessary (GDPR Article 9(2)(h)).
• To fulfil product orders, issue invoices and keep accounts – performance of a contract and a legal obligation.
• To send SMS and email reminders about your visit – performance of a contract (this is not marketing).
• For newsletters and offers – only with your consent, which you can withdraw at any time with a single click.
• To collect feedback about your visit – our legitimate interest in improving our services; a review is published only with your consent.

We share data only with partners without whom we could not provide the service, and only under data processing agreements:

• our payment service provider (bank links and card payments);
• SMS and email delivery providers (reminders and confirmations);
• courier services – Omniva, LP Express and DPD (only the data needed for delivery);
• our server and database hosting provider in the European Union;
• public authorities – only where the law requires it.

We do not sell data or pass it to advertising networks.

• Patient health records – for as long as healthcare legislation requires.
• Visit and contact details – while you are our patient and for 5 years after your last visit.
• Invoices and accounting records – 10 years, as accounting law requires.
• Consent to receive news – until you withdraw it.
• Unfinished booking or basket data – up to 30 days.

We use only strictly necessary cookies and browser storage: so that your basket works, an unfinished booking is kept, your chosen language is remembered and you can sign in to “My FaceMyo” securely.

We do not use analytics, advertising or third-party tracking cookies, so we do not show a consent banner. If we ever introduce them, we will ask for your consent first.

• To find out what data we hold about you and receive a copy of it.
• To have inaccurate data corrected (you can change some of it yourself in your “My FaceMyo” account).
• To ask us to delete your data when it is no longer needed and the law does not prevent it.
• To restrict processing or object to processing based on legitimate interest.
• To receive your data in a portable format.
• To withdraw your consent to receive news at any time.

If you believe your rights have been infringed, you may contact the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt), but please write to us first – we will do our best to resolve it straight away.

Your connection to the website is encrypted (HTTPS), staff sign in with personal accounts whose permissions match their role, and every access to a patient record is logged. Backups are made daily and stored in the European Union.