Welcome to NAAMA’s Privacy Notice
NAAMA Privacy Notice
We respect your privacy and are committed to protecting your personal data.
This Privacy Notice explains how Euraser UK Ltd (“we”, “us”, or “our”), trading as NAAMA, looks after your personal data when you visit the NAAMA website (“Website”) or one of our studios, and tells you about your privacy rights and how the law protects you. This notice is provided for your information; it explains how we process your personal data and the rights you have, including the right to object to some of the processing we carry out.
Last updated: July 2026
1. Important information about NAAMA
1.1 Who we are and a recent change of ownership
In June 2026, the NAAMA business was acquired by Euraser UK Ltd. As part of that acquisition, the personal data previously held by NAAMA Studios Ltd — including client records, contact details, treatment records and related information — was transferred to Euraser UK Ltd, which is now the data controller responsible for that personal data. The transfer took place on the basis of our legitimate interests in continuing to provide services to NAAMA clients without interruption, and (in relation to clinical records) to ensure continuity and safety of your care.
Nothing changes in how you interact with NAAMA: your account, appointments and services continue as normal. Your data has not been sold to any third party for marketing purposes and continues to be handled to the same standard of confidentiality, in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).
1.2 Purpose of this Privacy Notice
This Privacy Notice applies to you if you are a NAAMA client, but it also applies if you are simply visiting our Website, interacting with us on social media, writing us an email, subscribing to our newsletter, or participating in one of our events.
We may also provide you with additional information when we collect personal data, where we feel it would be helpful to provide relevant and timely information.
2. The data we collect about you
When you visit our Website or studio, or otherwise interact with us, NAAMA may collect, use, store and transfer different kinds of personal data about you. The types of personal data we collect depend on the type of relationship you have with us. If you are interested in how we use the various types of personal data, please see Section 3.
Identity Data: your first name, last name, username or similar identifier, title, date of birth, and gender.
Contact Data: your billing address, email address, and telephone number.
Demographic Information: age, gender, and other relevant information.
Financial Data: your payment card or bank account information. If you apply for financing through a third-party lender and are approved, we are notified; however, we do not receive other details of your application beyond your name, email, billing and mailing address, the approved financing amount and reference numbers.
Marketing Data: your preferences in receiving marketing from us and our third parties.
Profile Data: details of any appointments you attend, purchases you make, and any queries, comments or complaints you send us.
Social Media Data: details of your social media accounts, where you follow or interact with us on social media or use your social media accounts to create an account on our Website.
Audio and Visual Information: before and/or after photographs and customer service call recordings.
Medical and Health Data: health history, treatment details and other relevant medical information, including allergies, medications, pregnancy status, skin conditions and other medical conditions or health concerns. Given the medical nature of tattoo removal, we may also need to collect medical information or doctors’ notes related to your procedures.
Skin Type and Ethnicity Data: information regarding your skin type and ethnicity, which may include photographs of your tattoo(s) or other parts of your body. We need this information to deliver laser treatment safely and effectively.
Website Analytics Data: information about how you use our Website, links you click on and pages you visit, time zone, browsing behaviour and device type. NAAMA uses Google Analytics; you can read the Google Analytics privacy policy on Google’s website.
Technical Data: internet protocol (IP) address, login data, browser type and version.
We collect most of this information from you directly — for example, from forms you complete on our Website or in our studios, from your identity documents, from correspondence with you, or through meetings and interactions on social media. We also collect some information about you from other people or organisations: from your doctor or other medical teams where necessary before we carry out any tattoo removal procedure, and from publicly available sources. In addition, if you became a NAAMA client or contact before June 2026, your personal data was obtained by Euraser UK Ltd from NAAMA Studios Ltd as part of the acquisition described in Section 1.1.
3. Why we use your personal data
We collect, use and store your personal data for the reasons set out below.
Where the processing is necessary for us to enter into or administer a contract with you:
providing tattoo removal and related services;
registering you as a new or potential client and contacting you about the services and procedures you have requested from us.
Where necessary for NAAMA’s legitimate interests, as listed below, and where our interests are not overridden by your data protection rights:
managing our business, including delivering high levels of client care, ensuring we provide quality services, and developing our brand and marketing strategy;
continuing to hold and use client records transferred to us from NAAMA Studios Ltd so that we can provide services to existing clients without interruption;
growing our professional network of tattoo artists, dermatologists and other professionals who may wish to receive referrals from us;
managing our IT systems and infrastructure, including improving and running our Website, and ensuring content is presented effectively for you and your device;
sending you relevant stories or promotional information about our services where you have not opted out of receiving this information (see Section 4);
improving our services when you provide feedback, and for audit purposes;
protecting our legitimate business interests and legal rights, including in connection with legal claims, compliance, regulatory, auditing and investigative purposes, and other ethics and compliance reporting requirements.
Where we process personal data on this basis, we have carried out a balancing test as required by data protection law to document our interests, consider the impact of the processing on individuals, and determine whether individuals’ interests override ours. You can request more information about this balancing test using the contact details in Section 10.
Where necessary to comply with our legal obligations, such as:
tax law and similar obligations;
health and safety obligations;
responding to court orders or other legal processes with which NAAMA is required to comply;
complying with legal and regulatory requirements under UK law.
With your consent:
we collect pictures of your tattoo for use when you enquire about our services;
we use your pictures on our Website or social media, alongside your personal data, where you have agreed to this;
we engage with you and serve you advertisements on third-party social networks where you interact with third-party social networking features;
we collect feedback when you complete surveys where you have opted in to receive these electronically;
we collect health data from your doctor where necessary before we carry out tattoo removal procedures;
we use your personal data, where it cannot be anonymised, to conduct research on how to improve our devices and lasers, or to study how tattoo removal can improve body image or wellbeing.
Where we require your consent, we will ask for it at the time we collect your personal data, and you can withdraw it at any time.
3.1 Special category data (health, skin type and ethnicity)
Some of the information we process — in particular your medical and health data, and information about your skin type and ethnicity — is “special category data” under the UK GDPR, and we only process it where an additional condition applies. We rely on the following conditions:
Explicit consent: your explicit consent (Article 9(2)(a) UK GDPR), which we obtain when you provide medical information as part of your consultation and treatment;
Provision of care: processing necessary for the provision of health care or treatment (Article 9(2)(h) UK GDPR, together with the associated condition in Schedule 1 of the Data Protection Act 2018), where treatment records are created and maintained by or under the responsibility of appropriately trained professionals subject to a duty of confidentiality;
Legal claims: processing necessary for the establishment, exercise or defence of legal claims (Article 9(2)(f) UK GDPR), where relevant.
Your treatment records, photographs and medical history are held confidentially, are accessible only to those who need them to deliver or support your care, and are never used for marketing without your consent.
4. Marketing
We provide you with an opportunity to express your preferences with respect to receiving marketing communications from us, and for us to share your personal data with trusted partners for their direct marketing purposes. If you wish to update these preferences, you can submit a request using the contact details in Section 10. To opt out of receiving our email marketing communications, you can also follow the ‘unsubscribe’ instructions provided in any marketing message you receive from us. Please note that even if you opt out of marketing, we may still send you non-promotional service messages, such as appointment confirmations or important information about your data or account.
5. Sharing your personal data
We will only share personal data where doing so is permitted under data protection law. Where this is the case, we may share your personal data with the following parties:
Service providers, including our appointment management system, CRM providers, marketing providers, and payment and financing processors. Third parties that process personal data on our behalf are required by contract to implement safeguards no less protective than our own and are prohibited from using the personal data for any purpose other than to perform services as instructed by NAAMA. In certain cases, service providers are directly accountable to you for how they use your personal information and may be required to give you additional details about the personal data they hold about you — you might receive this in a separate notice or directly from them, for example through their websites;
Group companies, including our parent company and affiliates within the Euraser / Undo group;
Professional advisers, including our lawyers, bankers, auditors and insurers;
Regulators and government agencies, including HMRC, the Care Quality Commission, the Information Commissioner’s Office and other authorities where required;
Business transfers: in the event that the NAAMA business is sold or integrated with another business, your details may be disclosed to our advisers and any prospective purchaser’s advisers, and will be passed to the new owners of the business.
6. International transfers
The group that NAAMA belongs to operates in several countries. We may therefore share your personal data with our employees or partners outside the United Kingdom, but only where doing so is necessary for the purposes described in this Privacy Notice.
Where personal data is transferred outside the UK, we will ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is in place: the destination country has been deemed to provide an adequate level of protection under UK adequacy regulations (this includes countries in the European Economic Area); the transfer is subject to the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or, for transfers to the United States, the recipient is certified under the UK Extension to the EU–US Data Privacy Framework. A copy of the relevant safeguard can be obtained on request using the contact details in Section 10.
7. Retaining your personal data
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
Treatment and clinical records: we retain your clinical records — including treatment details, medical history and treatment photographs — for 8 years after your last treatment, in line with recognised guidance on the retention of adult health records.
Other personal data: your personal data will generally be kept for 6 years from your last interaction with us.
We may retain personal data for a longer period in the event of a complaint, or if we reasonably believe we may need to establish, exercise or defend legal claims. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. Please contact us if you have any questions regarding data retention.
8. Your legal rights
You have the right to ask NAAMA for a copy of your personal data; to correct or delete your personal data; to restrict the processing of your personal data; and to obtain the personal data you provided to us in a structured, machine-readable format. In addition, you can object to the processing of your personal data in some circumstances — in particular, where we do not have to process the data to meet a contractual or other legal requirement, including where we rely on legitimate interests (such as the transfer of your data described in Section 1.1). Where we have asked for your consent, you may withdraw it at any time; this will not affect any processing that has already taken place.
These rights may be limited — for example, if fulfilling your request would reveal personal data about another person, or if you ask us to delete information that we are required by law, or have compelling legitimate grounds, to keep (such as clinical records we must retain for your safety and ours).
To exercise any of these rights, contact us using the details in Section 10. You will not have to pay a fee, and we aim to respond within one month. If you have unresolved concerns, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113, although we would welcome the chance to address your concerns first.
9. Other important information
9.1 Third-party links
Our Website includes links to other websites and applications, including social media. Clicking on those links may allow third parties to collect or share data about you. NAAMA does not control these third-party websites and is not responsible for their privacy statements. We encourage you to read the privacy statement of every website you visit.
9.2 Financing through Klarna
If you choose to pay using Klarna’s financing options, we will share the personal data necessary to process your payment — such as your contact details and order information — with Klarna Bank AB (publ). Klarna acts as an independent data controller for its assessment of your application and its provision of credit, and processes your personal data in accordance with its own privacy notice, available on Klarna’s website. We do not receive details of Klarna’s credit assessment beyond confirmation of the approved amount and reference numbers.
9.3 Changes to this Privacy Notice
We keep our Privacy Notice under regular review. Any changes we make in the future will be uploaded to the Website, and we will provide you with a new privacy notice when we make any substantial changes. We may also notify you in other ways from time to time about the processing of your personal data.
10. Contact details
Data controller: Euraser UK Ltd, trading as NAAMA, is the controller of your personal data. Euraser UK Ltd is a limited company registered in England and Wales (company number 16521470) with its registered office at 1 Bow Churchyard, London, EC4M 9DQ, and is registered with the Information Commissioner’s Office under registration number ZC164691.
Data Protection Officer: we have appointed Jesper Pettersson as our Data Protection Officer (DPO). You can contact the DPO directly at dpo@naamastudios.com.
General privacy queries: for day-to-day questions about your personal data, or to exercise any of your rights, contact our privacy team at privacy@naamastudios.com, or write to us at NAAMA, 109 Great Portland St, Marylebone, London, W1W 6QG.
Cookie policy
We use cookies to remember your preferences and optimise your experience of using the NAAMA Website.
How we use cookies
Cookies are very small text files that are stored on your equipment when you visit some websites. They can be used to identify that you have previously visited a site or to store small bits of information locally with you. We use cookies to remember your preferences and to make the NAAMA Website easier for you to use.
You can remove any cookies already stored on your computer, but if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Website. You can manage your cookie settings at any time by clicking the cookie icon in the bottom left of the browser window. Non-essential cookies are only set with your consent.
We use the following cookies:
Strictly necessary cookies: cookies that are required for the operation of our Website. They may include, for example, cookies that enable you to log into secure areas of our Website or make use of e-billing services.
Analytical/performance cookies: these allow us to recognise and count the number of visitors and to see how visitors move around our Website when they are using it. This helps us improve the way our Website works — for example, by ensuring users find what they are looking for easily.
Functionality cookies: these are used to recognise you when you return to our Website, enabling us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Targeting cookies: these record your visit to our Website, the pages you have visited and the links you have followed. We use this information to make our Website and the advertising displayed on it more relevant to your interests, and may share this information with third parties for this purpose.
Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance or targeting cookies.