Legal

Last updated: March 2026

This Privacy Policy explains how Armo GmbH (BeautyChic) ("we," "us," or "our"), operating the website https://beautychic.clinic, collects, uses, and protects your personal data in accordance with the Swiss Federal Act on Data Protection (nDSG/revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller
Name: Armo GmbH (BeautyChic)
Address: Fraumünsterstrasse 11, 8001 Zürich, Switzerland
Email: info@beautychic.clinic
Phone: (+41) 763340894

2. Data We Collect
We may collect the following categories of personal data:
Contact information: name, email address, phone number, and postal address, provided when you book an appointment, submit a contact form, or communicate with us.
Health-related information: skin type, allergies, medical conditions, and treatment history, shared during consultations to ensure safe and effective treatments. This data is considered sensitive under Swiss data protection law and is processed with your explicit consent.
Technical data: IP address, browser type, device information, and browsing behavior on our website, collected automatically through cookies and similar technologies.
Booking and transaction data: appointment dates, services requested, and payment information.

3. Purpose of Data Processing
We process your personal data for the following purposes:
To provide and manage our beauty and micropigmentation services, including scheduling appointments and maintaining treatment records.
To communicate with you regarding bookings, inquiries, and aftercare instructions.
To comply with legal and regulatory obligations under Swiss law.
To improve our website, services, and customer experience through analytics.
To send marketing communications, only with your prior consent, which you may withdraw at any time.

4. Legal Basis for Processing
Under the nDSG, we process your data based on the following legal grounds:
Your consent, particularly for health-related data and marketing communications.
The performance of a contract or pre-contractual measures when you book a service.
Our legitimate interests in operating and improving our business, provided these do not override your rights.
Compliance with legal obligations.

5. Data Sharing & Transfers
We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our website (e.g., hosting providers), processing payments, and managing bookings. These providers are contractually obligated to protect your data.
If data is transferred outside Switzerland or the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognized by the FDPIC (Federal Data Protection and Information Commissioner).

6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Treatment records and health-related data are retained for [10 years] in accordance with Swiss healthcare documentation requirements. Contact and booking data are retained for [5 years] after the last interaction.

7. Your Rights
Under Swiss data protection law (and the GDPR where applicable), you have the right to:
Access: Request information about the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Deletion: Request the erasure of your personal data, subject to legal retention obligations.
Restriction: Request that we restrict the processing of your data in certain circumstances.
Data portability: Request a copy of your data in a structured, commonly used format.
Objection: Object to the processing of your data for direct marketing purposes.
Withdrawal of consent: Withdraw your consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at [info@beautychic.clinic].

8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.

9. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch

10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Privacy Policy