Privacy Policy

1. Introduction

ManLab Gentlemen's Spa ("ManLab", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our online booking system, or receive our grooming and spa services in the United Arab Emirates.

This policy is published in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and aligned with international best practice, including the principles of the EU General Data Protection Regulation (GDPR).

2. Data Controller

ManLab Gentlemen's Spa is the Data Controller responsible for your personal data. For any privacy enquiry, please contact us using the details provided in the website footer.

3. Information We Collect

We collect and process the following categories of personal data:

• Identity and contact details: full name, email address, phone number.
• Booking data: preferred branch, selected services, appointment date and time, and notes you provide.
• Payment data: handled through secure third-party payment providers; we do not store full card numbers on our servers.
• Health and preference notes: information you voluntarily share to help us tailor your treatment (e.g. allergies, skin sensitivities).
• Communications: records of your messages to us via chat, email, or phone.
• Technical data: IP address, browser type, device information, and usage data collected via cookies and similar technologies.

4. Legal Basis for Processing

We process your personal data on the following lawful bases under the PDPL:

• Consent: you provide your data voluntarily when booking or contacting us.
• Contractual necessity: to fulfil your booking and deliver the services you requested.
• Legal obligation: to comply with UAE laws, including tax and record-keeping requirements.
• Legitimate interests: to improve our services, ensure security, and prevent fraud.

5. How We Use Your Data

Your personal data is used to:

• Confirm and manage appointments and send related reminders.
• Provide and personalise our grooming and spa services.
• Process payments and issue invoices or receipts.
• Respond to enquiries, feedback, and complaints.
• Send marketing communications only with your explicit opt-in consent.
• Maintain records required by UAE law and our internal policies.
• Protect the security and integrity of our services.

6. Sharing and Disclosure

We do not sell your personal data. We may share it with the following categories of recipients, only to the extent necessary:

• Service providers: payment processors, booking platform providers, and IT vendors acting on our instructions under appropriate confidentiality obligations.
• Branch staff: only the information needed to deliver your appointment.
• Government authorities: where required by UAE law, court order, or regulatory request.
• Professional advisors: lawyers, auditors, and accountants for legitimate business purposes.

We may transfer your data outside the UAE to our service providers. Where this occurs, we ensure an adequate level of protection in line with PDPL requirements, including standard contractual clauses or equivalent safeguards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy and to meet our legal and regulatory obligations under UAE law. Booking and financial records are typically retained for the period required by applicable tax and commercial legislation; data used solely for marketing is deleted when you withdraw consent.

8. Cache, Cookies and Similar Technologies

Our website uses cookies, browser cache, local storage, and similar technologies to operate the site, keep your booking selections between pages, remember your preferences, and understand how the site is used. We group them as follows:

• Strictly necessary cookies: required for the website and online booking system to function, including security and session handling.
• Functional storage and cache: browser cache and local storage that retain your selected services, chosen branch, and display preferences so your booking is not lost as you navigate.
• Analytics cookies: help us measure traffic and improve the experience; they are used in aggregate and never to identify you personally.
• Marketing cookies: used only where you have given consent, to measure the performance of our campaigns.

You can accept, block, or delete cookies and clear your cached data at any time through your browser settings. Blocking strictly necessary cookies or clearing the cache mid-booking may reset your selections or prevent parts of the booking system from working. Cached and locally stored data remains on your own device and is removed when you clear your browser data.

We do not use cookies or cache to store payment card details, and we never sell data collected through these technologies.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including encryption in transit, access controls, and regular security reviews. No method of transmission over the internet is fully secure, but we strive to use commercially acceptable means to protect your data.

10. Your Rights

Under the PDPL and applicable international standards, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention obligations.
• Withdraw consent for marketing at any time.
• Object to or restrict certain processing activities.
• Request a copy of your data in a portable format.
• Lodge a complaint with the competent UAE data protection authority.

To exercise any of these rights, contact us using the details in the footer. We will respond within the timeframe required by the PDPL.

11. Children

Our services are intended for adults. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date above indicates when the policy was last revised. Continued use of our website after changes signifies your acceptance of the updated policy.