Privacy Policy

Effective Date: [Insert Date]

At Noura Aesthetics Ltd (“we”, “us”, “our”), we are committed to protecting your privacy and safeguarding the personal data you provide to us. This privacy policy outlines how we collect, use, and protect your information in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

1. Information We Collect

We may collect and process the following personal data about you:

Personal Identification Information: Name, address, email address, phone number.
Appointment and Service Information: Treatment history, preferences, consultation notes, and feedback.
Payment Information: Credit/debit card details, billing addresses, transaction details.
Technical Data: IP address, browser type, time zone settings, device information, and browsing behavior through cookies or similar technologies.

2. How We Use Your Information

We may use your personal data for the following purposes:

To provide you with services, including booking appointments and delivering treatments.
To communicate with you regarding your appointments, inquiries, and follow-up care.
To process payments and manage billing.
To personalize your experience and recommend treatments or products based on your preferences.
To comply with legal obligations (e.g., record-keeping, fraud prevention).
To improve our services, including conducting surveys and analyzing customer feedback.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: Where you have given us explicit permission to process your personal data.
Contract: Where processing is necessary to perform a contract (e.g., booking and providing treatments).
Legitimate Interest: To improve our services and maintain the safety of our operations.
Legal Obligations: Compliance with applicable laws and regulations.

4. How We Protect Your Information

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. This includes:

Encryption of sensitive data.
Regular security assessments.
Limiting access to personal data to authorized personnel only.

5. Sharing Your Information

We may share your personal data with the following third parties:

Service Providers: To assist us with payment processing, IT services, or marketing.
Legal Authorities: If required by law, we may disclose your personal data to comply with legal obligations.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to a third party.

We will never sell or rent your personal data to third parties.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request the correction of inaccurate or incomplete data.
Right to Erasure: You can request the deletion of your data under certain circumstances.
Right to Restrict Processing: You can request that we limit the processing of your data.
Right to Data Portability: You can request to receive your data in a structured, commonly used format.
Right to Object: You can object to the processing of your personal data under certain conditions.

To exercise any of these rights, please contact us using the information provided below.

7. Data Retention

We will retain your personal data for as long as necessary to provide you with services, fulfill our legal obligations, resolve disputes, and enforce our agreements. When your data is no longer required, we will securely delete or anonymize it.

8. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies help us analyze traffic, personalize content, and improve functionality. You can control cookie preferences through your browser settings.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will notify you by revising the “Effective Date” at the top of this page. We encourage you to review this policy regularly to stay informed about how we protect your personal data.