Privacy Policy

Plain English summary: AOGRL uses NgoziCRM to manage bookings and client records. We collect only what we need to deliver your service. Your data stays on secure EU-based servers. You can request access, correction, or deletion at any time.

APPLICABLE REGULATIONS

NDPA 2023 (Nigeria) POPIA (South Africa) DPA 2019 (Kenya) DPA 2017 (Mauritius) General Data Protection Principles

1. Who Is the Data Controller?

AOGRL is the data controller for the personal data you provide when booking appointments or using our services. We use NgoziCRM, operated by A-One Global Resourcing Ltd (AOGRL), as our software platform.

2. What Data We Collect

Identity data: Full name, date of birth
Contact data: Phone number, WhatsApp number, email address
Appointment data: Services booked, dates, times, session notes
Health & skin data: Intake form responses, consultation notes (where applicable)
Financial data: Payment confirmations (we do not store card numbers)
Technical data: IP address at time of booking (for consent records)

3. Why We Process Your Data

Contractual necessity: To book, confirm, and manage your appointments
Legitimate interest: Appointment reminders via WhatsApp
Consent: Marketing communications (you may opt out at any time)
Legal obligation: Retaining records as required by applicable law

4. How Long We Keep Your Data

We retain your personal data for 24 months from your last appointment, or as required by law. After this period, records are automatically anonymised. You may request earlier deletion at any time (see Your Rights below).

5. Who We Share Your Data With

NgoziCRM / AOGRL — our booking software provider (data processor)
WhatsApp (Meta) — appointment reminder delivery
Payment processors — Stripe or PayPal (for deposit transactions only)
We do not sell your data to any third party.

6. Data Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Our servers are hosted within the EU (Railway / Render infrastructure). We perform regular security audits and restrict access to staff on a need-to-know basis.

7. Your Rights

Under applicable data protection law you have the following rights:

👁️

Right of Access

Request a copy of all personal data we hold on you.

✏️

Right to Rectification

Ask us to correct inaccurate or incomplete data.

🗑️

Right to Erasure

Ask us to delete your data (subject to legal obligations).

📦

Data Portability

Receive your data in a structured, machine-readable format.

🚫

Right to Restrict

Request that we pause processing while a complaint is resolved.

📣

Right to Object

Object to processing based on legitimate interests or for marketing.

To exercise any of these rights, use our secure request form or contact us directly.

Submit a Data Request →

8. Cookies

Our booking page uses a single session cookie to remember your progress. We do not use third-party tracking or advertising cookies on booking pages.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via WhatsApp or email. Continued use of our services after updates constitutes acceptance.

10. Contact

For privacy queries:

Email: None

Or use our Data Subject Request Form.