Privacy policy

1.    Introduction

Dubova Beauty Limited (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR). This applies to all personal information you share with us in person, via forms, or through any other direct interaction with our team.

We are a data controller, meaning we determine the purpose and means of processing your personal data.

This Privacy Policy is provided in accordance with our legal obligations and explains:

• What information we collect
• How and why we use it
• Your rights regarding your personal data

A copy of this policy is available at our premises, and you may request a copy at any time.

2.    Data Protection Principles

We are committed to adhering to the following principles under UK GDPR. Your personal information will be:

• Used lawfully, fairly, and transparently
• Collected for valid, stated purposes only
• Relevant and limited to what is necessary
• Accurate and kept up to date
• Retained only as long as necessary
• Stored securely

3.    How is Your Personal Information Collected

We collect personal information when you provide it to us directly in person, over the phone, or through written forms (including consent forms and medical history questionnaires). We may also collect some data from third parties if needed to verify your information.

4.    Information We May Collect

We may collect and process the following types of personal data:

• Full name, contact details (email, phone number, address)
• Date of birth, gender
• Medical history relevant to your treatment (e.g., skin conditions, medications, allergies)
• Emergency contact details, if applicable
• Treatment history and records
• Consent forms and signed agreements
• Payment information (processed securely)
• Photographs taken before and after treatment for clinical and record-keeping purposes (see below for details)

5.    Photographs – Pre and Post Treatment

As part of our service, we may take photographs before and after treatment for the following reasons:

• To monitor your treatment progress and results
• For medical and clinical records
• To ensure consistency and safety in repeat treatments
• With your additional, explicit consent – for use in training or marketing (e.g., website, brochures, social media)

These images form part of your treatment record and will be stored securely in accordance with data protection legislation.

You will always be informed when photographs are being taken, and we will never use your images publicly without your written, signed consent. You have the right to withdraw this consent at any time.

6.    How Do We Use Your Personal Data

We use your data to:

• Provide and manage your treatments and appointments
• Maintain accurate medical and treatment records
• Communicate with you about your treatments and any relevant updates
• Comply with legal and regulatory obligations
• Improve our services
• Where you have consented, for marketing and promotional communications

7.    Legal Basis for Processing Your Data

We rely on the following legal grounds to process your data:

• To perform our contract with you (providing treatment and services)
• To comply with legal obligations
• Based on our legitimate interests, such as improving services and ensuring safety
• With your explicit consent, where required (e.g., for marketing, photography use)

8.    Data Sharing and Transfers

We may share your data with trusted third-party service providers who assist us in providing our services (such as payment processors, software providers). All third parties are required to keep your data secure and only use it for the purposes we specify.

Where necessary, your data may be transferred outside the UK, but we will ensure it receives the same level of protection as within the UK.

We may also share your information if required by law or to protect your best interests.

9.    Data Retention

We will keep your personal data only for as long as necessary to provide our services and to comply with legal requirements. Typically, this is for the duration of your treatment relationship plus up to two years afterward, after which your data will be securely deleted.

10. Data Storage

Your personal data is stored securely on multiple servers located within the United Kingdom. Dubova Beauty Limited does not store personal information outside the UK or the European Economic Area (EEA). We take appropriate technical and organisational measures to protect your data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

11. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data, where appropriate
• Object to or restrict certain types of data processing
• Request the transfer of your data to another organisation
• Withdraw any consent you have given at any time

To exercise any of these rights, please contact us in writing at:

DUBOVA BEAUTY LIMITED
Email: info@dubovabeauty.com
Address: 116 Gloucester Road, London, England, SW7 4SD

We may need to verify your identity before processing your request.

12. Your Duty to Inform Us of Changes

Please keep us updated if your personal information changes to ensure our records remain accurate.

13. Consent and Withdrawal

Where we ask for your consent (such as for marketing or use of photographs), you have the right to withdraw it at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before you withdraw.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will inform you of any significant changes when appropriate.

If you have any questions about this Privacy Policy, please contact us by email: info@dubovabeauty.com