Privacy Policy
Last updated: 10 September 2026
1. About this Privacy Policy
Naiyah Nails respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how Naiyah Nails (“we”, “us” or “our”) collects, uses, stores and protects personal information when you:
- visit our website;
- make or manage an appointment;
- create or use a Naiyah Hub account;
- purchase products or services from us;
- make a payment;
- contact us;
- subscribe to marketing communications;
- participate in our loyalty or customer programmes;
- provide photographs or other information relating to your appointments; or
- otherwise interact with us online or in person.
For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Naiyah Nails is responsible for your personal information.
Our contact details
Business name: Naiyah Nails
Address: 30 New Park Road, Brixton Hill, London, SW2 4UN
Email: contact@naiyahnails.com
Website: naiyahnails.com
If you have any questions about this Privacy Policy or how we use your information, please contact us using the details above.
2. What personal information we collect
Depending on how you interact with us, we may collect different types of personal information.
Information you provide to us
This may include:
- your name;
- email address;
- telephone/mobile number;
- billing and/or delivery address;
- appointment information;
- services booked;
- appointment notes;
- booking preferences;
- cancellation or appointment history;
- payment-related information;
- account login information;
- information contained within your Naiyah Hub profile;
- loyalty or rewards information;
- Nail Journey information;
- photographs associated with your appointments;
- nail-care or service-related information you choose to provide;
- preferences relating to your appointments or services; and
- any other information you voluntarily provide to us.
Information relating to appointments
When you book an appointment, we may collect information necessary to provide the service, including:
- the service or services booked;
- appointment date and time;
- technician preference or assignment;
- service duration;
- booking status;
- payment and deposit information;
- appointment history; and
- relevant service notes.
Information about your nail services
Where necessary and appropriate, we may record information relevant to providing your services safely and effectively.
This may include information you voluntarily provide about:
- allergies or sensitivities;
- reactions to products;
- previous nail treatments;
- product removals;
- nail condition;
- service preferences; and
- other information relevant to your treatment.
Some information concerning health or allergies may constitute special category data under data protection law. We will only collect or use such information where there is an appropriate lawful basis and, where required, an additional condition for processing special category data.
You should only provide information that is relevant to your treatment and safety.
3. Information collected through your Naiyah Hub account
If you create or use a Naiyah Hub account, we may process information associated with your account, including:
- your name;
- email address;
- telephone number;
- account details;
- appointment history;
- upcoming appointments;
- previous services;
- customer profile information;
- loyalty or rewards information;
- Nail Journey information;
- appointment photographs;
- booking and payment information; and
- account security information.
Your Naiyah Hub allows you to access information relating to your relationship with Naiyah Nails in one place.
Your account information is used to provide and manage these features and is not sold to third parties.
4. Photographs and your Nail Journey
We may store photographs associated with your appointments where you or we provide them for purposes connected with your customer record or Nail Journey.
These photographs may be used to:
- maintain your customer treatment history;
- document your Nail Journey;
- help us identify previous work;
- assist with future appointments;
- provide customer-facing features within your Naiyah Hub account; and
- improve the continuity and quality of your services.
We will not use identifiable photographs of you for public marketing, advertising or social media without an appropriate legal basis and, where required, your consent.
5. How we use your personal information
We may use your information for the following purposes.
Providing our services
To:
- process bookings;
- manage appointments;
- provide nail and beauty services;
- manage cancellations and rescheduling;
- communicate appointment information;
- maintain your customer history;
- provide relevant service information; and
- provide customer support.
Managing your account
To:
- create and maintain your Naiyah Hub account;
- authenticate your account;
- allow you to view your appointments and customer information;
- provide access to your Nail Journey;
- manage account security;
- process password resets; and
- maintain accurate customer records.
Payments and orders
To:
- process payments;
- process deposits;
- process refunds;
- process orders;
- provide receipts and confirmations;
- maintain financial records; and
- prevent or investigate fraudulent transactions.
Communications
To send:
- booking confirmations;
- appointment reminders;
- cancellation or rescheduling notifications;
- payment information;
- receipts;
- account-related communications;
- important service announcements; and
- responses to enquiries.
Business administration
To:
- maintain business records;
- manage customer relationships;
- understand appointment patterns;
- improve our services;
- manage complaints;
- protect our business and customers;
- maintain website and account security; and
- comply with legal and regulatory obligations.
Marketing
Where permitted by law and, where required, with your consent, we may use your contact details to send information about:
- new services;
- promotions;
- products;
- events;
- offers;
- loyalty programmes; and
- other Naiyah Nails news.
You can unsubscribe from marketing communications at any time.
6. Our lawful bases for using your information
UK data protection law requires us to have a lawful basis for processing personal information. Depending on what we are doing, we may rely on one or more of the following:
Contract
We may process your information where it is necessary to provide services you have requested, including processing bookings, managing appointments and fulfilling purchases.
Legal obligation
We may process information where necessary to comply with legal obligations, such as accounting, tax, financial record-keeping or other legal requirements.
Legitimate interests
We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.
Examples may include:
- managing customer relationships;
- maintaining customer and appointment records;
- improving our services;
- protecting our website and systems;
- preventing fraud or misuse;
- maintaining business security;
- handling complaints; and
- sending certain relevant service communications.
Consent
Where required, we may rely on your consent, for example for certain marketing communications, optional cookies or certain uses of photographs.
Where we rely on consent, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
7. Marketing communications
We may send marketing communications where permitted by applicable law.
You can unsubscribe using the unsubscribe option included in marketing emails or by contacting us at contact@naiyahnails.com.
Please note that opting out of marketing communications does not stop essential service communications, such as:
- booking confirmations;
- appointment reminders;
- payment notifications;
- account security messages;
- changes affecting your appointment; or
- other communications necessary to provide a service you have requested.
8. Payments
Payments made through our website may be processed by third-party payment service providers, including:
- Stripe
- PayPal
We do not generally store complete payment card details on our own systems.
Your payment information may be processed directly by the relevant payment provider in accordance with its own privacy policy and security requirements.
We may retain limited payment information necessary to:
- identify a transaction;
- reconcile payments;
- record deposits;
- process refunds;
- maintain financial records; and
- manage your booking or order.
Payment providers may process information in accordance with their own privacy policies and applicable data protection obligations.
9. Who we share your information with
We do not sell your personal information.
We may share personal information with trusted third parties where necessary to operate our business and provide our services.
These may include:
- website and hosting providers;
- booking and scheduling technology providers;
- Stripe;
- PayPal;
- email and communication providers;
- website security providers;
- website search and performance technology providers;
- accounting and financial service providers;
- professional advisers;
- technology and software providers;
- delivery providers where relevant; and
- legal, regulatory or law-enforcement authorities where required.
Third-party service providers that process information on our behalf are expected to process information only as necessary to provide their services and in accordance with applicable data protection requirements.
10. International transfers
Some of our technology and service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law and that appropriate safeguards are in place where required.
This may include reliance on an applicable adequacy decision or appropriate contractual or other safeguards.
11. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:
- provide services;
- maintain customer and appointment records;
- meet legal, accounting and tax requirements;
- resolve disputes;
- deal with complaints;
- enforce agreements; and
- protect our legitimate business interests.
Different types of information may therefore be retained for different periods.
For example, financial and transaction records may need to be retained for longer than certain marketing information.
Where we no longer need personal information, we will securely delete it, anonymise it or otherwise dispose of it in accordance with our data retention procedures.
12. Customer accounts and account security
If you create a Naiyah Hub account, you are responsible for keeping your login credentials confidential and for notifying us if you believe your account has been accessed without permission.
We use appropriate technical and organisational measures designed to protect customer accounts and personal information.
We may require verification before making certain changes to your account or providing access to personal information.
13. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function, including features such as:
- account login;
- security;
- shopping baskets;
- bookings;
- session management; and
- other essential functionality.
Other cookies may be used for purposes such as analytics, preferences, advertising or other optional functionality.
Where consent is required for non-essential cookies, we will provide an appropriate mechanism for you to manage your preferences.
You can also control cookies through your browser settings.
14. Website security
We take reasonable technical and organisational measures to protect personal information against:
- unauthorised access;
- accidental loss;
- destruction;
- misuse;
- alteration; and
- unauthorised disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
If we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps required by law.
15. Your data protection rights
Depending on the circumstances and the applicable legal requirements, you may have rights including:
- Right of access – to request a copy of the personal information we hold about you.
- Right to rectification – to ask us to correct inaccurate or incomplete information.
- Right to erasure – to ask us to delete your personal information in certain circumstances.
- Right to restriction – to ask us to restrict how we use your information in certain circumstances.
- Right to object – to object to certain types of processing, including certain processing based on legitimate interests and direct marketing.
- Right to data portability – in certain circumstances, to receive personal information you have provided to us in a structured, commonly used and machine-readable format.
- Right to withdraw consent – where processing is based on consent.
These rights are not absolute and may depend on the lawful basis we rely upon and the circumstances of the request.
16. How to exercise your rights
To exercise any of your data protection rights, please contact:
Email: contact@naiyahnails.com
Please provide enough information for us to identify you and understand your request.
We may need to verify your identity before providing personal information or making certain changes to your account.
We will respond to valid requests within the timeframe required by applicable data protection law.
17. Complaints
If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
The ICO provides information about your data protection rights and how to make a complaint.
18. Children’s information
Our website and services are primarily intended for adults.
We do not knowingly collect personal information from children where this is not necessary or permitted.
Where a service is provided to a minor, we may require appropriate information and/or consent from a parent or guardian where necessary.
19. Third-party websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
20. Automated decision-making and profiling
We do not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects.
If this changes in the future, we will update this Privacy Policy and provide any information required by applicable data protection law.
21. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our services;
- changes to our website;
- changes to technology;
- changes to the way we process personal information; or
- changes in applicable legal or regulatory requirements.
The latest version will always be published on this page with the date it was last updated.
22. Website search and performance
We use Google Search Console to understand how our website appears in Google Search and to monitor and improve the technical performance and visibility of our website.
Search Console may provide us with information about search queries, website pages, clicks, impressions, search positions and other aggregated website search-performance information.
We use this information to:
- understand how visitors discover our website through search engines;
- identify opportunities to improve our website;
- monitor technical search performance; and
- improve the relevance and usability of our online content.
Google Search Console is not used by us to identify individual customers for marketing purposes.
23. Contact us
If you have questions about this Privacy Policy, your personal information or how we use it, please contact:
Naiyah Nails
30 New Park Road
Brixton Hill
London
SW2 4UN
Email: contact@naiyahnails.com
