Privacy Policy

Last updated: 13 July 2026

BIYŌ Beauty Spa & Salon ("Biyo," "we," "us," or "our") operates a ladies' salon located in Abu Dhabi, United Arab Emirates, and the website https://biyospa.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations, as well as other applicable UAE laws.

By using our Site or booking a service with us, you agree to the collection and use of information as described in this Policy.

1. INFORMATION WE COLLECT

We may collect the following categories of personal data:

• Identity and contact data: full name, phone number, email address, gender.
• Booking and service data: appointment history, service preferences, stylist preferences, notes relevant to the service (e.g. hair/skin type, allergies you choose to disclose).
• Payment data: billing details and transaction records. Card details are processed by our licensed third-party payment processor and are not stored on our systems.
• Technical data: IP address, browser type, device information, and cookies collected when you use our Site (see Section 6).
• Marketing preferences: your choices regarding promotional communications.
• Any other information you voluntarily provide, such as through contact forms, reviews, or customer support requests.

We do not knowingly collect sensitive personal data (such as health data) unless you voluntarily provide it to help us deliver a service safely (for example, disclosing an allergy or skin condition), in which case we process it only for that purpose and with your consent.

2. HOW WE USE YOUR INFORMATION

We process personal data for the following purposes, consistent with Article 4 of the PDPL:

• To schedule, confirm, and manage your salon appointments.
• To process payments and issue invoices/receipts.
• To communicate with you about bookings, changes, or customer service matters.
• To send you promotional offers and marketing communications, where you have consented (you may opt out at any time).
• To improve our services, Site, and customer experience.
• To comply with legal, tax, and regulatory obligations under UAE law.
• To protect the safety and security of our staff, clients, and premises.

3. LEGAL BASIS FOR PROCESSING

We process your personal data on one or more of the following legal bases: your consent; performance of a contract with you (i.e. providing the salon service you booked); compliance with a legal obligation; and our legitimate business interests, provided these do not override your fundamental rights.

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal data. We may share personal data with:

• Payment processors and point-of-sale providers, to process transactions.
• Booking/scheduling software providers who host our appointment system.
• IT and hosting providers who support our website and systems.
• Professional advisors (legal, accounting) where necessary.
• Government or regulatory authorities, where required by UAE law.
• A buyer or successor in the event of a merger, acquisition, or sale of business assets.

Any third party processing personal data on our behalf is contractually required to protect it in line with the PDPL and to use it only for the purposes we specify.

5. INTERNATIONAL DATA TRANSFERS

If personal data is transferred outside the UAE (for example, to a cloud hosting provider), we will ensure such transfers comply with the PDPL, including verifying that the receiving country provides an adequate level of protection, or by putting in place appropriate contractual safeguards, as required under Articles 22–23 of the PDPL.

6. COOKIES AND TRACKING

Our Site may use cookies and similar technologies to operate the booking system, remember your preferences, and analyze Site traffic. You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features, such as online booking.

7. DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements under UAE law. Booking and transaction records are generally retained for 5 years to meet tax and commercial record-keeping obligations.

8. DATA SECURITY

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration, in line with Article 20 of the PDPL. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. YOUR RIGHTS

Under the PDPL, you have the right to:

• Be informed about how your personal data is processed.
• Request access to the personal data we hold about you.
• Request correction or completion of inaccurate or incomplete data.
• Request erasure of your personal data, subject to legal exceptions.
• Restrict or object to processing of your personal data, including for direct marketing.
• Withdraw consent at any time where processing is based on consent.
• Request data portability, where technically feasible.
• Lodge a complaint with the UAE Data Office if you believe your rights have been violated.

To exercise any of these rights, contact us using the details in Section 12.

10. CHILDREN'S PRIVACY

Our services are intended for adults. We do not knowingly collect personal data from individuals under 18 without the consent of a parent or legal guardian.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. Continued use of our services after changes take effect constitutes acceptance of the updated Policy.

12. CONTACT US

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

BIYŌ Beauty Spa & Salon Al Forsan Central Mall, Khalifa City, [Emirate], United Arab Emirates Email: info@biyospa.com Phone (Abu Dhabi): +971 2 667 4377 Phone (Al Ain): +971 3 734 2993

13. COOKIE CATEGORIES AND YOUR CHOICES

We group cookies and similar technologies into three categories:

• Strictly necessary — required for the Site to function, including page security, your language preference, and submitting an appointment request. These are always active and cannot be switched off, as the Site cannot be provided without them.
• Analytics — help us understand how the Site is used so we can improve it. These are inactive until you allow them.
• Marketing — used to measure our campaigns and show relevant offers on other platforms. These are inactive until you allow them.

When you first visit the Site, a consent notice lets you accept all cookies or continue with strictly necessary cookies only. Your choice is stored in your browser and, so that we can evidence it, we record the choice itself (accepted categories, notice version, date, and page) without using it to identify you.

You can change or withdraw your choice at any time using the "Cookie Settings" link in the footer of every page, or by clearing cookies in your browser. Withdrawing consent does not affect processing that already took place while consent was valid, and it does not affect bookings you have already made — appointment requests rely on strictly necessary processing and continue to work regardless of your cookie choice.

This Privacy Policy is provided for general informational purposes and does not constitute legal advice. We recommend having it reviewed by a UAE-licensed legal professional before publishing.