Privacy Policy

Ushi Nail Spa is a ladies salon and spa operating in the United Arab Emirates since 2009, with branches across Al Ain and Abu Dhabi, and home service in both emirates. For any privacy enquiry, contact us at operation@ggciae.com or +971 3 766 2732.

We collect only the personal information necessary to provide and improve our services:

• Booking details: your name, phone number, email, selected branch, services, preferred date and time, and any notes you share with us.
• Website usage: basic technical data such as browser type, device, and pages visited, collected through cookies and local storage.
• Communications: messages you send us via the in-site chat, email, phone, or social media.
• Optional account details: if you are invited to use our staff portal, limited account credentials and role information.

We do not process online payments through this website. Any payment for services is settled directly at the branch or home service appointment, and card or payment details are handled in-branch — never stored on our website.

• To confirm, schedule, and manage your appointments and bookings.
• To respond to your enquiries and provide customer support.
• To send appointment reminders or service-related notifications you have requested.
• To improve our website, services, and customer experience.
• To comply with legal and regulatory obligations under UAE law.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

For visitors in jurisdictions governed by the EU General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases:

• Performance of a contract — to manage bookings you have requested.
• Consent — where you provide information for enquiries or communications.
• Legitimate interests — to operate and improve our business and website security.
• Legal obligation — to comply with applicable UAE and international laws.

This policy complies with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL") and its Implementing Regulation (Cabinet Decision No. 28 of 2022). In accordance with the PDPL, we:

• Process your personal data lawfully, fairly, and transparently.
• Collect data only for specified, explicit, and legitimate purposes.
• Limit collection to what is necessary for those purposes.
• Keep your data accurate and up to date where reasonably possible.
• Retain data only for as long as needed, then delete or anonymise it.
• Apply appropriate technical and organisational measures to protect your data.

We may share your information with:

• Our own staff and branches, strictly to fulfil your booking or enquiry.
• Service providers (such as hosting or analytics) under contractual confidentiality obligations.
• Competent UAE authorities where required by law.

We do not transfer your personal data outside the UAE without ensuring an adequate level of protection in line with PDPL requirements.

Our website uses cookies and browser local storage to remember preferences (such as your selected branch or booking details) and to understand how the site is used. You can disable cookies in your browser settings; some features may then not function correctly.

When you first visit, a consent banner lets you accept all, reject non-essential, or customize cookies by category:

• Essential — required for the site and booking system to work (e.g. remembering your selected branch or booking progress). These are always on and cannot be disabled, as they are necessary to submit and confirm your booking.
• Analytics — help us understand how visitors use the site so we can improve it. Only active if you accept them.
• Marketing — used to show more relevant offers on our own and partner channels. Only active if you opt in.

You can change your choice at any time using "Cookie Settings" in the site footer. Your consent decision is stored in your browser and, to keep a record of consent, logged against an anonymous identifier — never against your name, phone number, or booking details.

We retain booking and enquiry information for as long as necessary to provide our services and meet legal obligations, after which it is deleted or anonymised. Staff portal account data is retained for the duration of employment or access, then removed.

Under the UAE PDPL and applicable international laws (including GDPR), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Object to or restrict certain processing.
• Withdraw consent at any time (without affecting processing already carried out).
• Lodge a complaint with the competent UAE data protection authority.

To exercise any of these rights, email operation@ggciae.com.

We implement reasonable technical and organisational measures — including access controls and encryption in transit — to protect your personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, but we strive to protect your data using commercially accepted standards.

Our services are intended for adults. We do not knowingly collect personal information from children under 18 without parental or guardian consent. If you believe a child has provided us with data, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version takes effect upon posting on this page, with the revised "Last updated" date.

If you have any questions about this Privacy Policy or your personal data, please contact us:

Ushi Nail Spa
Email: operation@ggciae.com
Phone: +971 3 766 2732
Abu Dhabi & Al Ain, UAE