Privacy Policy
At Nail Tropics, we value your trust and are committed to protecting your personal data in accordance with the Data Privacy Act and its Implementing Rules and Regulations. This Privacy Notice outlines how we collect, use, store, share, and safeguard your information.
1. Personal Data Collected & Basis for Processing
We collect personal data necessary to provide our services, which may include:
Full name
Contact details (mobile number, email address)
Appointment and service preferences/history
Payment information, where applicable
Video recordings and images via CCTV within our premises for security and safety purposes
We process your personal data based on:
Your consent
The performance of a contract (e.g., service bookings)
Legal obligations
Our legitimate interests, including ensuring safety and security, provided these do not override your fundamental rights
2. Purpose of Processing
Your personal data is used for:
Primary Purposes:
Managing appointments and delivering services
Customer care and service enhancements
Ensuring the safety and security of clients, staff, and premises through CCTV monitoring
Secondary Purposes:
Marketing communications, exclusive offers, and loyalty programs
Personalized promotions and client engagement
Business analytics and service improvements
Marketing activities may be conducted through email, SMS, or other communication channels, and you may opt out at any time.
3. Manner of Data Storage
Your personal data is stored securely through:
Encrypted digital systems and booking platforms
Controlled access granted only to authorized personnel
Secure physical storage, where applicable
Protected storage of CCTV recordings with restricted access
4. Data Sharing and Disclosure
We may disclose your personal data to:
Accredited third-party service providers (e.g., booking systems, payment processors, marketing platforms)
Professional advisors or auditors, where necessary
Government or regulatory authorities when legally required
We ensure that all third parties uphold strict confidentiality and data protection standards. Your personal data is never sold.
5. Data Retention
We retain personal data only for as long as necessary to:
Fulfill the purposes for which it was collected
Comply with legal, tax, and regulatory obligations
CCTV recordings are retained for a limited period and are automatically deleted unless required for investigation, legal purposes, or incident review.
Retention periods are determined based on operational and legal requirements.
6. Secure Disposal of Data
When personal data is no longer required, we ensure secure disposal through:
Permanent deletion of digital records
Secure overwriting of electronic files
Shredding or destruction of physical documents
7. Risks in Data Processing
While we implement robust safeguards, risks such as unauthorized access, data breaches, or system vulnerabilities may occur. We actively work to minimize these risks through continuous monitoring and improvement.
8. Security Measures
To address potential risks, we maintain:
Encryption and secure servers
Access restrictions and authentication controls
Regular security reviews and staff training
Monitoring and protection of surveillance systems
9. Automated Processing
We may use automated systems for:
Appointment confirmations
Marketing communications and personalized offers
These systems do not make decisions that significantly affect you without human involvement.
10. Data Protection Officer (DPO)
You may contact our Data Protection Officer for any concerns:
Email: marketing@nailtropics.com
Phone: +639171276284
Address: Unit K 7th Floor, Westgate Tower, Madrigal Business Park, Ayala Alabang, Muntinlupa, 1780 Metro Manila, Philippines
11. Your Rights as a Data Subject
Under the Data Privacy Act, you have the right to:
Be informed about the collection and use of your data
Access your personal data
Correct inaccurate or incomplete data
Object to processing, including direct marketing
Withdraw consent at any time
Request erasure or blocking of data
File a complaint with the National Privacy Commission
Claim damages, where applicable
12. How to Exercise Your Rights
Requests may be submitted via email or in writing. We may require identity verification before processing your request. All requests will be addressed within the timeframes prescribed by law.
