Privacy Policy

Last updated: 4 November 2026

Who we are

Mimosa Beauty Lounge is a ladies-only beauty salon in Barsha Heights (TECOM), Dubai, United Arab Emirates. This policy explains what personal data we collect through our website mimosabeautylounge.com, our WhatsApp and booking channels and our salons, how we use it, and the choices you have.

BranchLocationEmailWhatsApp
DamacDamac Smart Heights, Barsha Heights, Dubai[email protected]+971 58 958 4077
CayanCayan Business Centre (Cayan Tower), Barsha Heights, Dubai[email protected]+971 58 958 4078

For any privacy question or request, write to [email protected].

What we collect

We collect only what we need to book, serve and stay in touch with you.

WhereWhat we collectWhy
WhatsApp enquiries and bookingsYour name, phone number, the messages you send, the services and times you ask aboutTo answer you and manage your appointment
Online bookingName, phone, email, appointment details, any notes you addTo confirm, remind you about and manage your booking
Salon visitsServices received, products bought, payments, preferences and any health information relevant to a treatment (for example allergies)To deliver the service safely, keep your client record and run loyalty rewards
Email sign-up and offer pop-upYour email address, and your name if you give itTo send the voucher you asked for and our offers, if you opt in
Careers (Join Us) formName, contact details, CV and anything you include in itTo consider your application
ReviewsYour name and review if you post one on GoogleTo reply to you and show reviews on our site
Website usePages visited, device and browser type, approximate location from your IP address, how you arrived (for example from an ad) and which buttons you clickTo keep the site secure, understand how it is used and measure our advertising

We do not collect payment card details through the website. Card payments are taken in the salon on our payment terminals.

Cookies, analytics and advertising

Our website uses cookies and similar technologies from the services below. You can block or delete cookies in your browser settings; the site will still work, but some features and our ad measurement may not.

ServiceProviderWhat it does
Google AnalyticsGoogleCounts visits and shows how people use the site
Google Ads conversion trackingGoogleMeasures whether visits from our Google ads lead to an enquiry
Meta PixelMeta (Facebook, Instagram)Measures whether visits from our Facebook and Instagram ads lead to an enquiry, and lets us show our ads to people who have visited our site
OpenAI Ads pixelOpenAIMeasures whether visits from our ads in ChatGPT lead to an enquiry, such as a WhatsApp or online-booking click. If you have entered contact details on our site, a one-way hashed (unreadable) version may be sent to OpenAI to match visits to ads. Your raw contact details are never shared.
Site statisticsWordPress.com (Jetpack)Basic visit statistics
Email sign-upMailPoet / BrevoRemembers that you subscribed and which pages you viewed
Security and performanceCloudflareProtects the site from bots and attacks and speeds up loading
Reviews widgetTrustindexShows our Google reviews on the site
Embedded contentGoogle (Maps), GravatarMaps and profile images may set their own cookies
How we use and share your data

We use your data to book and deliver your services, keep your client record, answer your questions, send offers you signed up for, run our loyalty and referral programmes, keep accounts, meet legal obligations, and improve our website and advertising. We do not sell your personal data.

We rely on your consent (for example for marketing emails, which you can stop at any time with the unsubscribe link), on what is needed to provide the service you asked for, and on our legitimate interest in running and promoting the salon.

We share data only with service providers who help us run the business, under their own privacy terms:

  • Our booking system provider — salon booking, client records and point of sale
  • Meta (WhatsApp Business) — client messaging
  • Brevo and MailPoet — email sign-ups and newsletters
  • Google, Meta and OpenAI — website analytics and ad measurement
  • Cloudflare, Bluehost and WordPress.com (Jetpack) — website hosting, security and statistics
  • Our accountants — bookkeeping and VAT
  • Authorities — where the law requires it

Some of these providers store data outside the UAE. We use reputable providers that apply recognised safeguards to protect it.

Retention, security and your rights

How long we keep it. We keep your client record while you remain our client and for a reasonable period after your last visit. Invoices and payment records are kept for as long as UAE accounting and tax rules require. CVs are kept for up to 12 months unless you ask us to delete them sooner. Email sign-ups are kept until you unsubscribe.

Security. Access to client data is limited to staff who need it. Our website runs over HTTPS behind Cloudflare, and our booking and messaging systems are password-protected.

Your rights. Under the UAE Personal Data Protection Law, you can ask us to:

  • show you the personal data we hold about you
  • correct it if it is wrong
  • delete it, where we are not required to keep it
  • stop using it for marketing
  • restrict or object to other uses

Send your request to [email protected] or message us on WhatsApp. We will reply within 30 days.

Children. Our services for children are booked by a parent or guardian, who provides the child’s details. We do not knowingly collect data directly from children online.

Changes. We may update this policy. The latest version will always be on this page, with its date.