Privacy Policy

Information we handle

We handle information that customers provide when they contact us, request a consultation, make a booking request, or communicate with our team. This may include:

• name, phone number, email address, and contact preferences;
• requested treatment or service, preferred branch, clinician, date and time;
• enquiry text, booking notes, consent choices, and source or campaign information;
• appointment history and related patient or lead records maintained in our CRM; and
• information needed to provide clinic services, where supplied directly to the clinic.

WhatsApp and Meta data

When a customer messages an authorized business through WhatsApp, Meta may deliver the customer's WhatsApp identifier, phone number, profile name, message content, message identifiers, timestamps, and delivery status information to Skin Society. We use that information to create or match a conversation, lead, customer, or patient record and to help authorized staff respond and manage an enquiry or appointment. WhatsApp communications are also subject to Meta and WhatsApp's own terms and privacy practices.

Skin Society OS and Platform Data

Skin Society OS is provided by wantsandneeds.ae as a business messaging and operations platform. We use Platform Data to provide authorized business users with WhatsApp customer messaging, appointment booking, CRM, customer-support, reporting, and related operational features. Data is used only to provide these services for the business that authorized access. Platform Data is not sold or used for unrelated advertising.

Why we process information

• to receive and respond to enquiries;
• to arrange, confirm, manage, and follow up on appointments;
• to maintain patient, lead, conversation, and service records;
• to operate, secure, troubleshoot, and audit the ERP and its integrations;
• to respect consent, opt-out, and do-not-contact preferences; and
• to meet applicable operational, regulatory, and legal obligations.

Service providers

We use service providers to operate this application and its communications. These include Meta and WhatsApp for WhatsApp messaging, and Railway-hosted application and PostgreSQL database infrastructure. Providers may process information on our behalf to deliver, host, secure, or support these services. We do not publish patient records or internal ERP information through this page.

Retention

We retain information for as long as it is reasonably needed for the purposes described above, including ongoing customer care, appointment and CRM administration, security and audit records, dispute handling, and applicable legal or regulatory requirements. Retention may vary by record type. Information may be archived, restricted, or deleted when it is no longer required, subject to obligations that require continued retention.

Security

We apply administrative and technical safeguards designed to protect information. These include authenticated access to internal ERP screens, role-based permissions, encrypted HTTPS transport, validation of Meta webhook signatures, audit records, and restricted access to production credentials. No system can guarantee absolute security, but we review and improve safeguards as the service evolves.

Your choices and rights

Subject to applicable law, you may ask about the personal information Skin Society holds about you, request correction or deletion, object to or restrict certain uses, or withdraw a consent you previously provided. Some information may need to be retained where required for clinical, financial, security, or legal reasons. You may also ask us to stop marketing or non-essential WhatsApp contact.

Privacy and deletion requests

To make a privacy or deletion request concerning Skin Society or Skin Society OS, contact Takeoff Beauty Clinic L.L.C on WhatsApp at +971 52 328 8478. Please state that your message is a privacy request and describe what you need. We may ask for enough information to verify your identity or authority for the relevant business before acting. See the data deletion instructions for the supported process.

Policy updates

We may update this policy when our services, integrations, or legal obligations change. The latest version will remain available on this page, with the updated date shown above.