Privacy

Who we are

Ayahs Beauty (sole trader, operated by Ayah) is the data controller for personal information collected through this website and in the studio at 112 Ruislip Road, Greenford, UB6 9QH.

Contact: hello@ayahsbeauty.co.uk · 07398 235081

What we collect

• Booking & contact details - name, phone number, email (when you contact us by call, WhatsApp, Instagram DM or email).
• Consultation & treatment data - skin type, medical history, allergies, treatment notes. Collected verbally before your first laser or facial appointment and recorded on a private intake form to keep you safe across a course of treatment.
• Photographs - before/after photos may be taken for treatment records and, where you have given explicit consent, for marketing on our Instagram. We will always ask first, and you can withdraw consent at any time.
• Payment records - amount, date and method. Card details are handled by our card terminal provider and never stored by us. Klarna payments are processed by Klarna directly under their own privacy policy.
• Website analytics - this site does not run third-party tracking or advertising cookies. Only essential cookies for site functionality.

Why we collect it (lawful basis)

• Contract - to provide the treatments you've booked.
• Legal obligation - to keep treatment records as required for cosmetic procedures.
• Legitimate interest - to respond to enquiries and keep clients safe across a course of treatment.
• Consent - for any use of your photographs in marketing material.

How long we keep it

Treatment records are retained for seven years from your last appointment, in line with industry guidance for cosmetic and aesthetic treatments. Marketing photographs are removed promptly if you withdraw consent. Enquiry messages with no booking are deleted within 12 months.

Who we share it with

We do not sell or share your data with third parties for marketing. Limited sharing happens with:

• Our card payment provider (for processing payments only)
• Klarna (only if you choose Klarna at checkout, under their privacy policy)
• Our accountant (for invoicing and tax purposes)
• WhatsApp, Instagram and Google (the platforms you use to contact us, under their own privacy policies)

Your rights under UK GDPR

You have the right to:

• Request a copy of the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted (where we have no overriding legal obligation to keep it)
• Withdraw consent for marketing photography at any time
• Object to or restrict how we process your data
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email hello@ayahsbeauty.co.uk.

Cookies

This site uses only essential cookies needed for the site to function (your cookie consent choice is stored locally). We do not use analytics, advertising or social-media tracking cookies. You can clear your stored consent through your browser settings at any time.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect when changes were made. Significant changes will be flagged on Instagram and in-studio.