1. Introduction
Ceylon Aesthetic & Beauty (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our website or services. By using our website, booking appointments, or engaging with our services, you agree to the terms outlined in this policy.
2. Information We Collect
We may collect and process the following types of personal information:
- Personal Identifiable Information (PII): Name, phone number, email address, date of birth.
- Medical Information: Relevant details required for certain treatments (e.g., allergies, skin conditions, medical history).
- Payment Information: Billing details, transaction records (we do not store credit card details; payments are processed securely via third-party providers).
- Technical Data: IP address, browser type, device information, and website usage analytics.
- Communication Records: Emails, messages, and customer service inquiries.
We collect this information through our website, online forms, phone calls, and in-person interactions.
3. How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: To schedule appointments, process payments, and provide personalized treatments.
- Customer Support: To respond to inquiries, resolve issues, and provide follow-up care.
- Marketing & Promotions: To inform you about offers, promotions, and new services (you can opt out anytime).
- Legal & Security: To comply with legal obligations, prevent fraud, and ensure the safety of our clients and business.
- Website Improvement: To analyze website traffic, improve user experience, and optimize our services.
4. Data Security
We take the security of your personal information seriously and implement industry-standard measures to prevent unauthorized access, alteration, disclosure, or destruction of your data. Security measures include:
- Encrypted data transmission via SSL technology.
- Restricted access to sensitive data, available only to authorized personnel.
- Secure storage and processing of payment information by third-party providers compliant with PCI DSS standards.
- Regular security audits and data protection training for our staff.
5. Sharing of Information
We do not sell, rent, or trade your personal information. However, we may share data in the following cases:
- Service Providers: We may work with third-party service providers (e.g., payment processors, booking platforms, marketing agencies) who assist in delivering our services. These providers must adhere to strict confidentiality agreements.
- Legal Requirements: If required by law, court order, or regulatory authority, we may disclose your data to comply with legal obligations.
- Business Transfers: In the event of a business merger, sale, or restructuring, your data may be transferred to the new entity under the same privacy protections.
6. Cookies and Tracking Technologies
Our website may use cookies and similar tracking technologies to improve user experience, analyze website performance, and personalize content.
- What Are Cookies? Cookies are small data files stored on your device when you visit a website. They help us remember preferences and enhance navigation.
- Types of Cookies We Use:
- Essential Cookies: Necessary for website functionality (e.g., booking appointments).
- Analytical Cookies: Help us track website traffic and user behavior.
- Marketing Cookies: Used for personalized advertisements and promotional campaigns.
- Your Choices: You can adjust your cookie preferences through your browser settings. However, disabling cookies may affect website functionality.
7. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.
- Medical records related to treatments are kept for legal compliance and reference.
- Transaction records are stored for accounting and tax purposes.
- Marketing preferences remain active until you opt out.
- After retention periods expire, data is securely deleted or anonymized.
8. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of these third-party websites. We recommend reviewing their privacy policies before providing any personal information.
9. Children’s Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that a child has provided us with personal information, we will take immediate steps to delete it.
10. Your Rights
Depending on your location, you may have certain rights regarding your personal data:
- Access & Portability: Request a copy of your personal data.
- Correction: Update inaccurate or incomplete information.
- Erasure: Request the deletion of your data under certain circumstances.
- Restriction & Objection: Limit how we process your data or object to certain uses.
- Withdraw Consent: Opt out of marketing communications or data processing where consent was previously given.
To exercise these rights, please contact us at info@ceylonspaandbeauty.com.
11. Legal Compliance (GDPR & CCPA)
If you are a resident of the European Economic Area (EEA), we process your data in accordance with the General Data Protection Regulation (GDPR). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA).
For GDPR or CCPA-related inquiries, please email us with your request.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in legal requirements or business practices. The latest version will always be available on our website, and we encourage you to review it regularly.
13. Contact Information
If you have any questions about this Privacy Policy or your personal data, please contact us at:
📧 Email: info@ceylonaesthetic.co.uk
📍 Address: Ceylon Aesthetics and Beauty 127, Fulham Road, SW3 6RL
📞 Phone: 0044 7570254280 | 0044 7928546958
By using our services, you acknowledge and agree to this Privacy Policy.
