Legal
How Aesthetic Labs collects, uses, retains, and shares personal data. Version 2.0.
Last updated: 2026-08-06 ยท Version 2.0 ยท Effective 2026-01-01
Contents
- Data controller identity
- Data we collect
- Cookies, analytics, and advertising technologies
- Service providers and recipients
- WhatsApp and Telegram
- Purposes and lawful bases
- Retention periods
- International transfers
- Marketing opt-in and opt-out
- Your rights
- Data breach procedure
- Children and minors
- Policy updates
Data controller identity
Aesthetic Labs FZ-LLC [legal entity TBC] is the data controller for personal data collected through aestheticlabs.co. Privacy contact: support@aestheticlabs.co. Registered address: Office A-34, Fronds Building, Sheikh Zayed Road, Al Quoz Industrial Area 3, Dubai, UAE. This policy is intended to align with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, as amended โ “UAE PDPL”) where applicable.
Data we collect
(1) Checkout and order data โ name, email, phone, delivery address, emirate, products, quantities, prices, payment status, delivery option, order notes; (2) Account data โ login credentials, saved addresses, order history; (3) Verification data โ research purchaser declarations, age/research gate acknowledgements, wholesale applications, institutional affiliation, laboratory details, identity or import documents you submit; (4) Payment data โ transaction references and status from our payment providers (we do not store full card numbers); (5) Device and technical data โ IP address, browser/device type, pages viewed, referral URLs, cookie identifiers; (6) Communications โ email, WhatsApp, Telegram messages, and support tickets; (7) Marketing preferences โ opt-in/opt-out records where applicable.
Cookies, analytics, and advertising technologies
We use essential cookies for cart, session, security, and locale; preference cookies for theme and language; and, where you consent, analytics and advertising technologies including Google Analytics / Google Ads. See our Cookie Policy. You may manage non-essential cookies via our consent banner and browser settings.
Service providers and recipients
We share data only as needed to operate the service: payment processing providers (Visa, Mastercard, Apple Pay, Google Pay); courier and logistics partners for delivery; email and hosting providers; analytics/advertising (Google Analytics / Google Ads) where enabled; professional advisers or authorities when required by law. We do not sell personal data. Processors are engaged under appropriate contractual or operational safeguards.
WhatsApp and Telegram
If you contact us via WhatsApp or Telegram, we process your messages, phone/username identifiers, and any attachments you send to respond to enquiries, fulfil orders, and maintain support records. These platforms operate under their own privacy policies. Avoid sending sensitive verification documents via messaging unless we explicitly request it โ prefer email for documentary evidence.
Purposes and lawful bases
We process data to: perform contracts (order fulfilment); comply with legal obligations (tax, accounting, regulatory requests); pursue legitimate interests (fraud prevention, research-use verification, service improvement, dispute defence) balanced against your rights; and, where required, based on consent (non-essential cookies, optional marketing). Research verification processing supports our research-use-only model and risk management.
Retention periods
Order and checkout agreement records: 7 years. Verification documents: up to 7 years where provided. Support correspondence: 3 years after closure where needed for quality or legal records. Marketing preferences: 24 months unless you opt out sooner. Analytics data: up to 26 months. Security logs: up to 12 months. We delete or anonymise data when no longer necessary, subject to legal holds.
International transfers
Some processors (payment, hosting, email, analytics) may process data outside the UAE. Where required, we implement appropriate safeguards consistent with applicable UAE data protection requirements, including contractual protections with processors.
Marketing opt-in and opt-out
We send transactional messages about orders without separate marketing consent. Promotional emails or messages are sent only where permitted by law and your preferences. You may opt out of direct marketing at any time via unsubscribe links or by emailing support@aestheticlabs.co.
Your rights
Under the UAE PDPL where applicable, you may request access, correction, erasure, restriction, portability, or object to certain processing, and withdraw consent where processing is consent-based. You may lodge a complaint with the UAE Data Office where applicable. Contact support@aestheticlabs.co to exercise rights โ we may verify your identity and respond within statutory timeframes.
Data breach procedure
We maintain incident response procedures. Where a personal data breach is likely to pose a risk and notification is required by applicable law, we will notify the relevant authority and affected individuals in accordance with UAE PDPL requirements.
Children and minors
Our services are intended for qualified research buyers aged 21 or older. We do not knowingly collect personal data from children or minors.
Policy updates
Version 2.0 ยท Last updated 2026-08-06. Material changes will be posted on this page.
These pages provide the current commercial policies of Aesthetic Labs.shop and are not a substitute for independent legal advice.
ุงููุณุฎุฉ ุงูุนุฑุจูุฉ โ