top of page

Last updated: 17/10/2025

Privacy Policy

1. Data Controller

NYC PMU is the controller responsible for your personal data in accordance with GDPR and Spanish data protection laws.


Contact Email: hello@nyc-pmu.com

2. Personal Data We Collect

We collect the following personal data:

​

  • Identity & contact information (name, email, phone number)

  • Appointment information (dates, service details)

  • Payment details, when processed through physical payment providers such as Revolut

  • Browsing data, cookies and analytics via Google Analytics

  • Photos for before/after results, only with your consent

3. Legal Basis for Processing

We process your personal data where:

​

  • It is necessary for the performance of a contract (e.g., booking & providing services)

  • You have given consent (e.g., for marketing, newsletters or sharing photos)

  • It is in our legitimate interest (e.g., improving our services, website analytics), as long as your rights are protected

4. Purposes of Processing

Your data is used for the following purposes:

​

  • Managing your bookings, appointments, and payments

  • Sending you updates, newsletters by email and WhatsApp, if you have opted in

  • Operating, improving, and securing our website, including analytics via cookies

  • Sharing before/after photos with your permission for marketing or social media

5. Third-Party Processors

  • Wix: for website hosting, forms, and payment processing on-site

  • Revolut: for in-person payments

  • Google Analytics: for website usage statistics and analytics

  • ​

We ensure these partners comply with GDPR obligations.

6. Data Retention

We retain your personal data only as long as necessary for the purposes we collected it. Afterwards, we securely delete or anonymize it.

7. Your Rights

Under GDPR, you have the right to:

​

  • Access your personal data

  • Rectify any errors

  • Delete your data (“right to be forgotten”) when no longer needed

  • Restrict processing in certain circumstances

  • Data portability (move your data elsewhere)

  • Withdraw consent at any time (for marketing, photo use, etc.)

​

To exercise any of these rights, email us at hello@nyc-pmu.com.

8. Photos & Social Media Consent

We only use before/after photos if you explicitly agree. You may withdraw permission at any time. We will not use photos that identify you without your consent.

9. Cookies and Analytics

We use cookies and Google Analytics to understand how visitors interact with the site so we can improve it. You can adjust your browser settings to block or delete cookies, though some site functions may be affected.

10. Security

We have implemented appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure or destruction.

11. Complaints

If you believe your data rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

12. Changes to this Policy

We may update this policy occasionally to reflect changes in our practices or legal requirements. We will post the updated version on this page and update the effective date accordingly.

bottom of page