Privacy Policy

This Privacy Policy explains how Matryoshka Beauty Salon LLC (“Matryoshka Beauty Salon”, “we”, “us”, or “our”) collects, uses, stores, and shares personal information when you visit our salon located at Carlton Downtown Hotel, M Floor, Sheikh Zayed Road, Trade Centre Second, Dubai, UAE, use our website https://matryoshkasalon.ae, contact us via phone or WhatsApp, or otherwise interact with our services.

1. Information we collect

We collect the following categories of personal information:

• Booking details: name, phone number, requested service, date and time of appointment — provided by you when you book via WhatsApp, phone, walk-in, or our online channels.
• Service records: services received, treatment history, allergies, sensitivities, or medical conditions you disclose to our staff for your safety.
• Payment information: we do not store card numbers; transactions are processed by our terminal provider. We retain transaction receipts for accounting and warranty purposes.
• Communication: messages you send us via WhatsApp, phone, or Instagram, including photos you share for reference.
• Website usage: standard server logs (IP address, browser type, pages visited) and analytics data collected via Google Analytics through Google Tag Manager — see “Cookies and tracking technologies” below.
• Reviews and feedback: publicly posted reviews on Google or other platforms; in-person feedback you provide.

2. How we use your information

• To schedule, confirm, modify, or cancel your appointments.
• To provide the beauty services you request safely and effectively, including adjusting techniques and products for any disclosed allergies or conditions.
• To contact you about your bookings (reminders, follow-ups, schedule changes).
• To process payment and issue receipts.
• To improve our website, services, and customer experience based on aggregated usage data.
• To send occasional service updates or promotional messages via WhatsApp — only if you have opted in. You can opt out at any time by replying STOP.
• To comply with applicable laws, including UAE health and safety regulations.

3. Legal basis for processing

We rely on the following legal grounds (UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where applicable, EU GDPR):

• Consent: when you provide booking details or opt in to marketing.
• Contractual necessity: when processing is needed to deliver the service you booked.
• Legal obligation: for tax records, hygiene compliance, and similar regulatory requirements.
• Legitimate interests: for fraud prevention, website security, and aggregated analytics — balanced against your privacy rights.

4. Cookies and tracking technologies

Our website uses Google Tag Manager (container ID GTM-MXZDNS6W) to load analytics scripts that help us understand how visitors use the site. These scripts run in an isolated web worker via Partytown, minimising performance impact and reducing main-thread tracking surface.

Cookies set by our analytics tools are used to:

• Distinguish unique visitors and sessions (anonymised).
• Measure traffic sources (organic search, social, direct).
• Identify which pages and treatments are most popular.

We do not use cookies to build advertising profiles or sell your data. You can clear cookies or disable tracking in your browser settings at any time without affecting your ability to use the site.

5. Sharing with third parties

We share personal information only with trusted parties strictly as needed:

• Google LLC — website analytics (anonymised, aggregated traffic data) via Google Tag Manager and Google Analytics.
• WhatsApp / Meta Platforms — when you contact us via WhatsApp Business.
• Payment processors — for card transactions; we do not store card details.
• UAE authorities — when required by law, court order, or formal regulatory request.
• Cloudflare — our website hosting and CDN provider; processes server logs to deliver the site securely.

We do not sell or rent your personal information to third parties. Some of these providers are based outside the UAE (e.g. United States, European Union); they comply with international data protection standards and, where applicable, standard contractual clauses.

6. Data retention

• Booking and service records: retained for 3 years after your last visit for warranty, follow-up care, and dispute resolution purposes.
• Financial records: retained for 5 years as required by UAE tax law.
• Marketing consent: retained until you opt out.
• Website analytics: aggregated data retained for 26 months in Google Analytics.

7. Your rights

Under UAE PDPL and (if applicable) GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, subject to legal retention requirements.
• Restrict or object to processing in certain circumstances.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the UAE Data Office or your local data protection authority.

To exercise any of these rights, contact us via WhatsApp at +971 58 554 9788 or visit the salon in person. We will respond within 30 days.

8. Data security

We use reasonable technical and organisational measures to protect your personal information, including encrypted connections (HTTPS/TLS), restricted staff access to client records, and physical security at our premises. No transmission over the internet is 100% secure; we cannot guarantee absolute security but will notify affected clients and authorities promptly in the event of a confirmed personal data breach.

9. Children

Our services may be provided to minors only with the consent and presence of a parent or legal guardian. We do not knowingly collect personal information from children under 13 through our website. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted on our website. Continued use of our services after the update constitutes acceptance of the revised policy.

11. Contact us

For privacy-related questions or requests:

• WhatsApp: +971 58 554 9788
• Phone: +971 58 554 9788
• Address: Carlton Downtown Hotel, M Floor, Sheikh Zayed Road, Trade Centre Second, Dubai, UAE
• Open daily 10:00 — 21:00