Privacy Policy

Privacy Policy

Last updated: 9 November 2026

At TOV Organic Salon, we respect your privacy. This policy explains what personal information we collect, how we use it, who we share it with and what your rights are.

1. Who we are

TOV Organic Limited, trading as TOV Organic Salon, is responsible (the "data controller") for your personal information.

  • Address: 51 Triq Robert Arrigo, Tas-Sliema, SLM 3160, Malta

  • Email: hello@tovorganic.com

  • Phone / WhatsApp: +356 9963 5094

If you have any questions about this policy or your information, contact us using the details above.

2. What information we collect

  • Contact details: your name, phone number and email address.

  • Booking information: your appointments, the treatments you book, your preferences and any notes you give us.

  • Health and skin information: to give you safe treatments, we may ask about allergies, skin conditions, medical conditions, medication or pregnancy. We only collect this with your consent, and we use it only to provide your treatment safely.

  • Payment information: payments are processed by our booking and payment providers. We do not store your full card details.

  • Information from our ads and social media: when you fill in a form on one of our Facebook or Instagram ads, or message us on social media, WhatsApp or Messenger.

  • Your marketing preferences: whether you've agreed to receive offers from us or have unsubscribed.

  • Website information: our website may collect basic technical information (such as your device and browser) through cookies. See section 10. If you buy something through our website (for example a gift voucher), we'll also receive your order and delivery details.

3. How we collect your information

  • When you book an appointment online through Fresha, or by phone, WhatsApp, email or in the salon.

  • When you contact us through the WhatsApp, Messenger or email links on our website.

  • When you fill in a form on one of our Facebook or Instagram ads to ask about a treatment or offer.

  • When you message us on Instagram, Facebook Messenger or WhatsApp.

  • When you fill in a consultation form before a treatment, including before Botox or filler treatments.

  • When you join our newsletter or our TOV VIP Inner Circle group.

  • When you buy something through our website.

4. How we use your information, and why we're allowed to

  • Booking and managing your appointments, and sending confirmations and reminders. Legal basis: to provide the service you asked for (contract).

  • Replying to your enquiry, including calling or messaging you about the offer you asked about on one of our ad forms. Legal basis: steps you asked us to take before booking.

  • Giving you safe treatments, using the health and skin information you share. Legal basis: your explicit consent.

  • Sending you offers, news and promotions by email, SMS or WhatsApp. Legal basis: your consent or, if you're an existing client, our legitimate interest in telling you about similar treatments. You can opt out at any time.

  • Understanding which of our ads and offers work best, and improving our services. Legal basis: our legitimate interests.

  • Keeping financial and tax records. Legal basis: legal obligation.

5. Marketing emails and offers

We'd love to keep you updated on our offers, new treatments and seasonal promotions by email, SMS or WhatsApp. We will only send you these:

  • if you've agreed to receive them, for example by ticking the marketing box on one of our ad forms, signing up to our newsletter, or telling us in the salon; or

  • if you're an existing client who has booked with us, about treatments similar to the ones you've had, unless you've told us you don't want them.

You can unsubscribe at any time, free of charge: click the "unsubscribe" link at the bottom of any email, reply STOP to a text or WhatsApp message, or email hello@tovorganic.com. Unsubscribing won't affect your appointments, and we'll still send you booking confirmations and reminders.

We never sell your personal information to anyone.

6. Who we share your information with

We only share your information with trusted providers who help us run the salon, and only as much as they need:

  • Our booking and payment system, which we use to manage your appointments and payments

  • Meta (Facebook, Instagram, Messenger and WhatsApp): for our ads, ad forms and messages with you

  • Our marketing and communication providers: the agency that manages our ads, and the tools we use to manage enquiries and send newsletters

  • Our website provider, including for any online purchases

  • The qualified practitioner who carries out Botox and filler treatments: only the information needed to treat you safely

  • Our accountants, bank and professional advisers: for accounting, tax and legal purposes

  • Public authorities: only where the law requires us to

These providers may only use your information to provide their service to us, and must keep it secure.

7. Transfers outside the EU

Some of our providers (such as Meta and Squarespace) may store or process information outside the European Economic Area, including in the United States. When this happens, it's protected by legal safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

8. How long we keep your information

  • Client and treatment records: for as long as you're a client, and for a reasonable period after your last visit, so we can look after you safely if you come back.

  • Enquiries from our ads that don't lead to a booking: up to 24 months from our last contact with you, then deleted.

  • Financial records: for as long as required by Maltese tax and company law.

  • Marketing: until you unsubscribe. After that, we keep your email or number on a "do not contact" list so we don't message you again.

9. Your rights

Under data protection law (GDPR), you have the right to:

  • access the personal information we hold about you;

  • correct information that's wrong or incomplete;

  • ask us to delete your information;

  • ask us to limit how we use it;

  • receive a copy of your information in a format you can take elsewhere;

  • object to how we use your information, including the right to stop marketing at any time;

  • withdraw your consent at any time, where we rely on consent.

To use any of these rights, email hello@tovorganic.com. We'll reply within one month.

10. Cookies

Our website uses cookies to make it work properly and, where you agree, to help us understand how visitors use it. You can manage cookies through the cookie banner on our website or in your browser settings.

11. Children

We don't knowingly collect information from children under 16 without the consent of a parent or guardian.

12. Complaints

If you're unhappy with how we've handled your information, please contact us first and we'll do our best to put it right. You also have the right to complain to Malta's data protection authority:

Information and Data Protection Commissioner (IDPC) Floor 2, Airways House, Triq il-Kbira, Tas-Sliema SLM 1549, Malta +356 2328 7100 · idpc.info@idpc.org.mt · idpc.org.mt

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.