Privacy and cookie policy

Effective date: 11 November 2026.

Applies to: psi-lb.com, in English, Arabic and French.

The short version

This website collects very little: what you choose to send us through the contact form, and statistics about how the site is used. We do not sell your data, we do not run ads or advertising trackers, and we do not use your data to train AI. You can ask us for a copy of your data, or ask us to delete it, at any time.

1. Who we are

The Plastic Surgery Institute (“PSI”, “we”, “us”, “our”) is the plastic surgery practice of Dr. Imad Shehadi in Beirut, Lebanon. We run psi-lb.com.

We decide how the personal data described in this policy is used.

This policy covers this website only. If you become our patient, your medical records are kept under Lebanese law and medical confidentiality, and are not covered here.

The before-and-after photos on this site are published only with each patient’s written consent.

2. What we collect

Our contact form: your name, your email address and your message.
Technical information: your browser and device type, the pages you visit, roughly where you are (country or city, worked out from your connection), and how you reached us. See section 6 for how this is collected.
WhatsApp button: if analytics are on, we count that the button was tapped. We do not see your number or your messages through the website. What you then send on WhatsApp reaches us through WhatsApp, not through this site.

Our hosting provider and our security measures record IP addresses for a short time to keep the site safe.

Please do not send medical details or photos through the contact form. We will ask for what we need, in the right way, when you book a consultation.

We do not ask for payment details on this site, and comments are switched off.

3. Why we use it

To answer your message.
To understand which pages people read, so we can make the site better.
To protect our form against spam and abuse.

4. What we do not do

We do not sell, rent or trade your personal data.
We do not run advertising or retargeting on this site, and we do not build advertising profiles about you.
We do not use your personal data or your messages to train artificial intelligence models, and we do not give them to anyone else to do so.
We do not make automated decisions about you.

5. Who we share it with

Only with the services that run the site for us, each acting on our instructions:

Google, which provides the analytics described in section 6, and the map on our Contact page (Google receives your connection details when the map loads);
Cloudflare, which delivers and protects the site, and whose Turnstile check protects our contact form from spam. Turnstile looks at your IP address, your browser and its connection details only to tell people from bots;
Crisalix, whose 3D consultation banner appears on our pages. Crisalix receives your connection details when the banner loads, and anything you enter if you choose to open it;
WhatsApp (Meta), only if you choose to contact us on WhatsApp;
GoDaddy, which hosts the website and provides our email;
our web developer, AstarteCore, which looks after the site and keeps a monthly backup copy of it in a private Google Drive;
a government authority or court, where the law requires it.

Some of these providers are outside Lebanon, including in the European Union and the United States.

6. Cookies and analytics

Cookies we always use. A few small cookies keep the site working: remembering your language, remembering your cookie choice, and making pages load quickly. They do not identify you and are set whatever you choose in the cookie banner.

Google Analytics. We use Google Analytics to count visits and see which pages are read. It tells us things like how many people visited, from which countries, and which pages they read. We see these as totals, not as a record of you. Google says it does not log or store the IP addresses of visitors to Google Analytics 4.

How it works depends on where you are, based on your device’s time zone:

If you are in the European Union, Iceland, Liechtenstein, Norway or the United Kingdom, analytics are off until you choose Accept All, or switch analytics on under Customize.
Everywhere else, analytics are on from your first visit, and you can switch them off at any time with Reject All, or under Customize.

You can change your choice at any time from the Cookie settings link at the bottom of every page.

No advertising cookies. We do not use advertising, retargeting or profiling cookies.

You can also block or delete cookies in your browser settings.

7. How long we keep it

Messages from the contact form: as long as we need them to answer you, and no longer than 2 years. If you become our patient, what is needed for your care moves into your medical record (see section 1).
Analytics: no longer than 14 months, the period set in our Google Analytics account.
Backup copies: our host keeps daily copies, and our web developer keeps one copy a month. When we delete your data from the site, it is gone from every new copy straight away, and from the older copies as they expire. We do not restore deleted personal data from a backup.

8. Your rights

Wherever you live, you can ask us to: give you a copy of the personal data we hold about you; correct it; delete it; or stop using it. Write to us at psi@psi-lb.com or through the contact form. We will answer within 30 days. It is free, and we will never treat you differently for asking.

If you are in the EU, Iceland, Liechtenstein, Norway or the UK, these rights come from the GDPR or UK GDPR, and you may also complain to the data protection authority in your country.

If you are in Lebanon, Law No. 81 of 2018 on Electronic Transactions and Personal Data also protects your data.

9. Children

This site is not directed to children, and we do not knowingly collect personal data from anyone under 18 through it. If you believe a child has sent us their data, write to us and we will delete it.

10. Changes

If we change this policy, the new version is published on this page with a new effective date.

11. Language

This policy is published in English, Arabic and French. If the versions differ, the English version governs.

12. Contact

Email: psi@psi-lb.com. Contact form: on psi-lb.com/contact/.