Privacy Policy

At BeautyTech AI (operated by AI Systems Limited), we take your privacy and data security seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

When you use our website or submit a form, we may collect:

• Full name
• Email address
• WhatsApp phone number
• Business or clinic name
• Website interaction data (cookies, IP address, device type, browser information)

We only collect information that you voluntarily provide or that is automatically generated through your use of our website.

2. Legal Basis for Processing

Under UK GDPR Article 6:

• Consent (Article 6(1)(a)): When you submit a form, join our waitlist, or contact us.
• Legitimate Interest (Article 6(1)(f)): For analytics, security monitoring, and improving our services.
• Contract Performance (Article 6(1)(b)): To provide services you have requested or agreed to.

3. How We Use Your Information

• To contact you regarding demos, services, and support
• To schedule appointments and consultations
• To provide customer communication through AI automation
• To improve our services and customer experience
• For internal analytics and system optimisation

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. Your data may only be shared with:

• Internal team members who require access to fulfil their role
• Technical service providers required to operate our systems (hosting, email, automation)

All third-party processors are contractually bound by data processing agreements compliant with UK GDPR.

5. Cookies and Tracking Technologies

• Essential cookies: Required for basic website functionality
• Analytics cookies: To analyse site traffic and performance
• Preference cookies: To remember your settings

You can manage or disable cookies through your browser settings at any time.

6. Data Security and Storage

• Encrypted data transmission (TLS/SSL)
• Secure server infrastructure
• Access controls limiting data to authorised personnel only
• Regular security reviews and updates

7. Data Retention

Typical retention periods:

• Contact and enquiry data: 24 months after last interaction
• Customer account data: Service agreement duration plus 6 years
• Analytics data: 26 months (anonymised)

8. International Data Transfers

Where data is transferred outside the UK, we use UK adequacy decisions, Standard Contractual Clauses (SCCs) approved by the ICO, and Binding Corporate Rules where applicable.

9. Your Data Rights

Under UK GDPR:

• Right of Access (Article 15)
• Right to Rectification (Article 16)
• Right to Erasure (Article 17)
• Right to Restrict Processing (Article 18)
• Right to Data Portability (Article 20)
• Right to Object (Article 21)
• Right to Withdraw Consent at any time

Contact info@btai.uk. We respond within 30 days.

10. Right to Complain

You may lodge a complaint with the Information Commissioner's Office (ICO):

11. Children's Privacy

We do not knowingly collect data from individuals under 18.

12. Business Transfers

In the event of a merger or acquisition, customer data may be transferred as part of business assets, remaining subject to this Privacy Policy.

13. Changes to This Policy

Changes will be posted on this page with an updated date.

14. Contact Information