Privacy Policy



Furless Beauty Institute – Privacy Policy

Last Updated: August 17, 2025

Furless Beauty Institute ("Furless", "we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our websites, communicate with us, or participate in our training programmes and related services.

This Policy is designed to comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable laws. Where local laws provide stronger protections (for example, in the EEA/UK or Saudi Arabia), we will honour those protections when they apply to you.


1) Who we are

Controller: Furless Beauty Institute LLC

For HR-related processing of staff/applicants, our HR group entity may act as a separate controller. For certain services, we use third-party providers (processors) under written contracts.


2) What personal data we collect

The personal data we collect depends on how you interact with us:

Website & communications

  • Identifiers and contact details (name, email, phone number, country/city)
  • Enquiry details, chat/WhatsApp messages, call recordings where permitted
  • Technical and usage data (IP address, device identifiers, pages viewed, cookies/SDKs)

Admissions & enrolment

  • Identity and demographics (full name, date of birth, nationality)
  • Government IDs where required (e.g., Emirates ID/Passport for compliance/attestation)
  • Academic and professional history, certificates, CV
  • Payment and billing details (payer name, masked card details via payment gateway)

Training delivery & quality

  • Attendance records, assessments, grades, certificates
  • Photos/video captured during classes or events (with consent where required)
  • Health information relevant to suitability/contra-indications (e.g., allergies, skin conditions) where needed to deliver services safely

Operations & safety

  • Site access and CCTV at our premises
  • Incident reports, health & safety logs

Marketing

  • Preferences, survey responses, testimonials, and permissions (opt-in/opt-out)

We collect data directly from you, from your use of our services, from publicly available sources, or from third parties (e.g., referees, payment processors, marketing platforms) in accordance with applicable law.


3) Why we process your personal data (purposes & legal bases)

We process personal data for the following purposes and under the legal bases recognised by the UAE PDPL and applicable laws:

  • Provide and improve services (course admissions, training delivery, certification, student support) — contract necessity; legitimate interests
  • Communications (answer enquiries, send notices about your course) — contract necessity; legitimate interests
  • Safety & compliance (health & safety, CCTV, identity verification, regulatory reporting/attestation) — legal obligation; legitimate interests; public interest where applicable
  • Payments & finance (invoicing, fraud prevention, accounting, audits) — contract necessity; legal obligation; legitimate interests
  • Marketing (newsletters, event invites, promotions) — consent where required; you may withdraw consent at any time
  • Analytics (improve website and programmes) — legitimate interests

Where we rely on consent (e.g., sensitive health data for practical sessions; use of photos/videos; certain cookies), you can withdraw consent at any time without affecting the lawfulness of prior processing.


4) Cookies and similar technologies

We use necessary cookies to operate our websites, and (with your consent where required) analytics/advertising cookies to understand performance and tailor content. You can manage preferences via your browser settings and our cookie banner. See our Cookie Notice for details on types, purposes, and retention.

5) Sharing your personal data

We share personal data only as needed and subject to appropriate safeguards:

  • Service providers/Processors: hosting, IT support, cloud storage, email/SMS/WhatsApp providers, payment gateways, learning management, surveys, analytics
  • Regulators and authorities where legally required (e.g., education regulators/attestation bodies)
  • Professional advisers (lawyers, auditors)
  • Group companies where necessary for HR, finance, or support services
  • Event/placement partners (e.g., site visits or internships), with your knowledge and where appropriate legal basis exists

We do not sell personal data. We permit targeted advertising only where lawful and consented.


6) International data transfers

We may transfer personal data outside the UAE (e.g., to cloud providers). Where we do so, we use one or more of the following safeguards, as required by applicable law: adequacy decisions, standard contractual clauses, binding corporate rules, or your explicit consent.


7) How we protect your data

We implement technical and organisational measures appropriate to the risk, including access controls, encryption in transit and at rest (where feasible), network protections, logging, staff training, and vendor due diligence.


8) Data retention

We keep personal data only as long as necessary for the purposes set out above, including satisfying legal, accounting, or reporting requirements. Typical retention:

  • Student records & certificates: up to 7 years after last interaction (or longer where required by law/accreditation)
  • Financial records: 7 years
  • CCTV: typically 30–90 days, unless required longer for incident investigation
  • Marketing preferences: until you opt out or your consent is withdrawn


9) Your rights

Subject to applicable law, you may have the right to:

  • Access your personal data and obtain a copy
  • Rectify inaccurate or incomplete data
  • Erase data in certain circumstances
  • Restrict or stop processing in certain circumstances
  • Data portability (receive your data in a machine-readable format where processing is based on consent or contract and carried out by automated means)
  • Object to processing, including direct marketing
  • Withdraw consent at any time where processing relies on consent

To exercise your rights, contact info@furlessbeautyinstitute.com. We may need to verify your identity before responding. You also have the right to lodge a complaint with the UAE Data Office or other competent authority in your jurisdiction.


10) Children’s data

Our programmes are generally intended for adults. We do not knowingly collect personal data from children without the consent of a parent/guardian and any additional approvals required by law.


11) Links to third parties

Our websites may link to third-party sites or services (e.g., payment pages, social media). Their privacy practices are governed by their own policies.


12) Changes to this Policy

We may update this Policy from time to time. Material changes will be highlighted on our website and, where appropriate, notified to you directly. Please review this page periodically.


13) Contact us

If you have questions about this Policy or how we handle your personal data, please contact our Privacy Team: