Policies
General data protection regulation (GDPR) compliance policy
AIMIE LIMITED
HE 451668
Private Limited Company
25/09/2023
Spyrou Kyprianou,68, Germasogeia, 4042 Limassol, Cyprus
info@aimie.com
1. Introduction
Aimie Limited respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, make an enquiry, book a service, purchase a gift card, or otherwise interact with us.
This Privacy Policy is prepared in accordance with the General Data Protection Regulation (EU) 2016/679, applicable Cyprus data protection laws, and other relevant privacy requirements.
2. Who we are
Aimie Limited respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, make an enquiry, book a service, purchase a gift card, or otherwise interact with us.
This Privacy Policy is prepared in accordance with the General Data Protection Regulation (EU) 2016/679, applicable Cyprus data protection laws, and other relevant privacy requirements.
3. Categories of personal data collected
We may collect and process the following personal data:
Client Data
– Name, date of birth gender;
– Contact details, including email address and telephone number;
– Appointment, booking, and enquiry details;
– IP addresses, cookies, browsing history on our website;
– Information you provide when communicating with us;
– Details relating to services requested or received such as health-related information (e.g., allergies, skin conditions, medical history relevant to treatments) required to provide our services safely and professionally;
– Payment or transaction details, where applicable;
– Gift cards purchase information, where applicable;
– Photographs and videos (for treatment records with client consent);
– Marketing preferences, where you agree to receive updates or promotional communications.
Employee & Contractor Data
– National ID/passport number (if required for identity verification);
– Name, contact details, job title;
– Employment contracts, payroll, and tax details;
– Certifications and training records.
4. How we collect personal data
We may collect your personal data when you:
– Visit our website;
– Contact us by phone, email, WhatsApp, social media, or online form;
– Make an enquiry or booking;
– Visit our salon;
– Purchase a service, product, or gift card;
– Subscribe to marketing communications;
– Interact with our social media pages or online content.
5. How we use your personal data
We may use your personal data for the following purposes:
– To respond to your enquiries;
– To manage appointments and bookings;
– To provide beauty, cosmetology, hair, nail, body, and related services;
– To assess whether a treatment is suitable for you;
– To process payments and gift card purchases;
– To communicate with you about your appointment or service;
– To maintain business and client records;
– To improve our website, services, and customer experience;
– To send marketing communications, where permitted by law or with your consent;
– To comply with legal, tax, accounting, and regulatory obligations;
– To protect our business, clients, staff, website, and legal rights.
6. Legal basis for processing
Under Article 6 and Article 9 of GDPR, we process personal data based on:
– Contractual necessity: where processing is required to provide services, manage bookings, or process payments;
– Consent: where you have given consent, such as for marketing communications or certain treatment-related information;
– Legal obligation: where we are required to comply with applicable laws and regulations;
– Legitimate interests: where processing is necessary for our business operations, service improvement, client communication, fraud prevention, or protection of our rights.
Where we process health, skin, allergy, contraindication, or treatment-related information, we will only do so where permitted by law, including where you have provided explicit consent or where the information is necessary for the safe provision of the services requested.
7. Marketing communications
We may send you marketing communications about our services, offers, promotions, gift cards, and updates where you have agreed to receive them or where otherwise permitted by law.
You may opt out of marketing communications at any time by contacting us at info@aimie.com or by following the unsubscribe instructions in the relevant communication.
We do not sell your personal data to third parties.
8. Cookies and website tracking
Our website may use cookies and similar technologies to:
– Ensure the website functions properly;
– Improve your browsing experience;
– Analyze website traffic and performance;
– Support marketing and advertising activities, where applicable.
Where required by law, we will request your consent before using non-essential cookies, such as analytics or marketing cookies.
You can manage or disable cookies through your browser settings. Some parts of the website may not work properly if cookies are disabled.
9. Sharing your personal data
We may share your personal data with trusted third parties where necessary, including:
– Website hosting and IT service providers;
– Booking or customer management platforms;
– Payment processing providers;
– Marketing, analytics, or communication service providers;
– Professional advisers, including lawyers, accountants, and auditors;
– Regulators, public authorities, courts, or law enforcement bodies, where required by law.
Any third-party service providers are required to protect your personal data and process it only in accordance with applicable laws and our instructions.
10. International transfers
Where your personal data is transferred outside the European Economic Area, we will ensure that appropriate safeguards are in place in accordance with applicable data protection laws.
11. Data retention
We will keep your personal data only for as long as necessary for the purposes for which it was collected, including to provide services, manage bookings, maintain business records, comply with legal obligations, resolve disputes, and protect our legal rights.
When personal data is no longer required, we will securely delete, anonymize, or archive it.
12. Data security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
However, no website, email, or electronic communication system is completely secure. Please avoid sending highly sensitive information through unsecured channels.
13. Your rights
Subject to applicable law, you may have the following rights in relation to your personal data:
– The right to access your personal data;
– The right to correct inaccurate or incomplete data;
– The right to request deletion of your personal data;
– The right to restrict processing;
– The right to object to processing;
– The right to data portability;
– The right to withdraw consent at any time, where processing is based on consent;
– The right to lodge a complaint with a data protection authority.
To exercise your rights, please contact us at info@aimie.com.
14. Complaints
If you have any concerns about how we process your personal data, please contact us first at info@aimie.com so we can try to resolve the matter.
You also have the right to lodge a complaint with the competent data protection authority in Cyprus:
Office of the Commissioner for Personal Data Protection
Website: www.dataprotection.gov.cy
15. Children’s privacy
Our website and services are not intended for children under the age of 16 without the involvement and consent of a parent or legal guardian.
If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such data where required by law.
16. Third-party links
Our website may contain links to third-party websites, platforms, payment providers, booking systems, social media pages, or messaging services.
We are not responsible for the privacy practices, security, or content of third-party websites. You should review their privacy policies before providing any personal data.
17. Changes to this privacy policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date.
18. Data processing principles
– Lawfulness, Fairness & Transparency: Clients are informed about data processing.
– Purpose Limitation: Data is used strictly for beauty services and business operations.
– Data Minimization: Only necessary data is collected.
– Accuracy: Personal data is kept up to date.
– Storage Limitation: Data is retained only for necessary periods.
– Confidentiality & Integrity: Data is securely stored and protected.
19. Data retention policy
|
Type of Data
|
Retention Period
|
|---|---|
|
Client records & treatment history
|
5 years after last appointment
|
|
Payment & invoicing records
|
7 years for tax purposes
|
|
Employee records
|
7 years after employment termination
|
|
Website cookies & logs
|
6 months to 1 year
|
|
Marketing consent records
|
Until consent is withdrawn
|
20. Contact us
For any questions about this Privacy Policy or how we process your personal data, please contact:
Aimie Limited
Spyrou Kyprianou,68, Germasogeia, 4042 Limassol, Cyprus
Email: info@aimie.com
Telephone: +357 99 977871