Privacy notice
What this website collects, why, and how to ask us to delete it. Effective date and last updated: September 29, 2026.
Who we are
This site is operated by Skin by Dr. Kerri, 53 N San Mateo Drive, San Mateo, CA 94401. You can reach us at kereshmehlashkari@yahoo.com or (650) 889-8005.
Summary
We do not use Google Analytics, Meta pixels, advertising trackers or third-party cookies. There is no cookie banner on this site because there is nothing to consent to. We count visits ourselves, in a way that cannot identify you, and we keep the messages you choose to send us.
What we record when you visit
Every page view is recorded by our own server, on our own machine. For each view we store: the time, the page, the page you arrived from, your approximate location (city, region and country only), your browser, operating system and device type, your screen and window size, your language setting, how long you stayed on the page and how far you scrolled.
We never store your IP address. It is used in memory to work out an approximate location and to generate a one-way visitor code, and is then discarded. That visitor code is a hash mixed with a secret value that we rotate every day and do not keep, which means yesterday's visits cannot be linked to today's, and none of it can be traced back to you.To turn an IP address into a city name we send it — and nothing else about you — to ip-api.com, a geolocation service, and cache the result. If that lookup fails, no location is recorded.
If your browser sends a Do Not Track or Global Privacy Control signal, we honor it: the page view is still counted, but it is not linked to any visitor code, so it cannot be joined to your other visits.
Cookies
The public pages of this site set no cookies at all. A single short-lived value is kept in your browser's session storage so that several page views in one visit can be counted as one visit; it is erased when you close the tab and it never leaves your browser except as an opaque random string.
The private admin area used by Dr. Kerri sets one strictly necessary cookie to keep her signed in. It is not used on the public site.
When you send a message
The contact form stores what you type — your name, email, phone number if you give one, the service you asked about and your message — together with the page you sent it from and your approximate city, so we can answer you.
We use it to reply to you and to keep a record of the inquiry. We do not add you to a mailing list, and we never sell, rent or share your details with anyone.
Please do not send detailed health information through this form. It is a general inquiry form, not a medical intake form, and it is not covered by HIPAA.How long information is kept
Visit records are kept for as long as they are useful for understanding how the site is used, and can be purged at any time from the admin area. Messages are kept while the inquiry is live and for a reasonable period afterwards as a business record.
Photographs of clients
Any photograph of a client that appears on this site is published only with that client's written permission, and never with their name unless they have asked for it. If you are pictured and would like a photograph removed, email us and it will be taken down promptly.
Your rights and choices
Email us at kereshmehlashkari@yahoo.com and we will tell you what we hold about you, correct it, or delete it. We respond to every such request and will confirm what was done. We will not treat you differently for exercising these rights.
California residents. The California Consumer Privacy Act (CCPA, as amended by the CPRA) gives California residents the right to know what personal information a business collects, to request its deletion or correction, and to opt out of its sale or sharing. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for any purpose other than replying to you. We honor the Global Privacy Control signal as a valid opt-out request. California's “Shine the Light” law (Civil Code §1798.83) lets residents ask which third parties received their personal information for direct marketing: the answer is none, because we disclose it to no one for that purpose.You can also block the measurement entirely with any content blocker, or by turning on Do Not Track or Global Privacy Control in your browser — the site works identically either way.
Children
This site is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information through the contact form, email us and it will be deleted.
Third-party services
The map on the contact page is embedded from OpenStreetMap, which will see that your browser requested the map. Links to Instagram, Facebook and Yelp take you to sites with their own privacy policies. Nothing else on these pages is loaded from anywhere but this server — the fonts, scripts and images are all hosted here.
No third party collects personally identifiable information about your online activities over time and across different websites through this site, and this site does not participate in any advertising network.
Changes to this notice
If this notice changes materially, the date at the top will be updated and the revised notice will be published on this page. Continued use of the site after a change means the revised notice applies.