1.1 INAYATBDV LTD (the "Company", "we", "us" or "our") respects your privacy and is committed to treating any information that we obtain about you with as much care as possible and in a manner that is compliant with all applicable data protection legislation including the EU General Data Protection Regulation 2016/679 ("GDPR") and any national implementing laws in relation to the same (collectively, "Data Protection Legislation"). In this privacy policy, By Dr. Vali means INAYATBDV LTD and any corporate affiliate.

1.2 This document (the "policy") is our Data Promise to you. Please read it carefully. Among other things, it explains:

1.2.1 what personal data we may collect about you in connection with: (i) providing you with our goods and services; (ii) your online interaction with us (including via our website(s), email or social media channels); (iii) our in-person interactions with you (such as in-clinic); and (iv) any other channels related or ancillary to the foregoing (collectively, the "Channels");

1.2.2 how we collect, store, disclose, transfer, protect and otherwise process that information and for what purposes;

1.3 This policy supplements (and its terms apply in addition to) any other terms of use or other terms and conditions agreed between you and the Company from time to time.

2.1 We collect personal data about you through the Channels when you:

• 2.1.1 access and use our website (including by way of cookies);
• 2.1.2 register for an account or subscribe for services, treatments, special events or our mailing list;
• 2.1.3 purchase a product or service from us;
• 2.1.4 request technical support or customer care support;
• 2.1.5 participate in polls, surveys and questionnaires;
• 2.1.6 contact us (whether in writing, by email, by telephone or otherwise);
• 2.1.7 post content on our social media pages;
• 2.1.8 book treatments or consultations.

2.2 The type of personal data we process may include:

• 2.2.1 information obtained through cookies when you use the site;
• 2.2.2 your name, email address, postal address, telephone number and other contact information;
• 2.2.3 information relating to your skincare interests, treatment history, and purchase history;
• 2.2.4 health information necessary for treatments and consultations;
• 2.2.5 payment information (processed through our payment providers).

3.1 We use various payment processors to handle your payment information. Each processor maintains their own privacy policy:

• Apple Pay: https://www.apple.com/legal/privacy/en-ww/
• Google Pay: https://www.google.com/policies/privacy/
• Stripe: https://stripe.com/us/privacy
• WorldPay: https://www.worldpay.com/en-gb/privacy-policy
• PayPal: https://www.paypal.com/webapps/mpp/ua/privacy-full
• Braintree: https://www.braintreepayments.com/legal/braintree-privacy-policy

3.2 Payment information is processed only by these third-party providers. We do not store your complete payment details.

We may process Personal Data under the following conditions:

• Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
• Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.
• Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
• Vital interests: Processing Personal Data is necessary in order to protect Your vital interests or of another natural person.
• Public interests: Processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.
• Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.

You have the right to:

• Request access to Your Personal Data.
• Request correction of Your Personal Data.
• Object to processing of Your Personal Data.
• Request erasure of Your Personal Data.
• Request transfer of Your Personal Data.
• Withdraw Your consent.
• Complain to a Data Protection Authority.

5.2 To exercise these rights, contact us at [email protected].

6.1 As operator of the Facebook Fan Page (https://www.facebook.com/bydrvali), we are Joint Controllers with Facebook.

6.2 We use Facebook Insights to obtain anonymized statistical data about our users..

6.3 Facebook's Privacy Policy: https://www.facebook.com/policy.php.

7.1 We use cookies to: Analyze website traffic. Personalize your experience. Remember your preferences. Enable certain website functions.

7.2 Types of cookies we use: Essential cookies. Performance cookies. Functionality cookies. Targeting/advertising cookies.

7.3 You can control cookie settings through your browser preferences.

8.1 Our Service does not address anyone under the age of 13.

8.2 We do not knowingly collect personal information from children.

9.1 We retain your data for as long as necessary to:

• Fulfill our services.
• Comply with legal obligations.
• Resolve disputes.
• Enforce agreements.

9.2 We implement appropriate security measures to protect your data.

10.1 We may transfer data internationally in compliance with GDPR requirements.

10.2 We ensure appropriate safeguards are in place for international transfers.

11.1 We may update this policy periodically.

11.2 We will notify you of any changes via email or website notice.

INAYATBDV LTD

71-75 Shelton Street

London, England

WC2H 9JQ

Email: [email protected]

Phone: 020 3096 3844

This Privacy Policy is governed by the laws of England and Wales. Any disputes will be decided by the courts of England or the relevant UK jurisdiction where you reside.

Our website may contain links to other websites. We are not responsible for their privacy practices.

You may withdraw consent for data processing at any time by contacting us. By using our services, you agree to this Privacy Policy. If you disagree with any part, please discontinue use of our services.