top of page

Privacy Policy

How we collect, use, and protect your personal information

Privacy Policy

Kelaya (“we”, “us”, “our”) is committed to protecting your privacy and ensuring your personal data is handled safely and in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: January 2026

​

Information We Collect

We may collect and process the following personal data:

  • Full name

  • Email address

  • Phone number

  • Skin concerns and treatment-related information voluntarily provided by you

  • Appointment and consultation details

  • Communication preferences

We only collect information that is necessary to provide our services safely and effectively.

 

How We Use Your Information

We use your information to:

  • Respond to enquiries and form submissions

  • Book and manage appointments

  • Assess suitability for treatments

  • Provide personalised skin treatments and aftercare

  • Communicate with you regarding services, updates, or follow-ups

  • Comply with legal or regulatory obligations

We do not sell or rent your personal data to third parties.

​

Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Consent – where you provide your information voluntarily

  • Contractual necessity – to provide requested services

  • Legitimate interests – to manage and improve our services

  • Legal obligation – where required by law

​

Data Sharing

We may share your data only with trusted third parties where necessary, such as:

  • Booking or appointment management systems

  • Secure communication platforms

  • Payment processors (where applicable)

All third parties are required to handle your data securely and in compliance with data protection laws.

​

Data Storage & Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.

Your information is stored securely and only accessed by authorised personnel.

​

Data Retention

We keep your personal data only for as long as necessary to:

  • Provide services and manage appointments

  • Maintain records for operational and legal purposes

  • Comply with regulatory obligations

You may request deletion of your data at any time, subject to legal obligations.

​

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent at any time (where applicable)

To exercise any of these rights, please contact us using the details below.

​

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

​

Kelaya
Email: kelayamahnaz@gmail.com
Website: www.kelaya.co.uk

​

Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on our website with the revised date.

bottom of page