Install Eventis App

Add the Eventis App to your desktop for quick and easy access

Install the Eventis App

For the best browsing experience, tap the share icon and select "Add to Home Screen" from the options.

Skip to main content
FREE SHIPPING ON ALL ORDERS OVER £60

eventis Privacy Notice

The International Institute for Active Ageing (“iiaa”) Limited, is a UK-based company that manufactures and sells scientifically proven, planet-positive skin health brands across multiple countries. Our mission is to deliver transformative, life-changing skin results for clients and unparalleled business benefits to our professional salon community.  

Our brands and divisions are ‘Advanced Nutrition Programme’, ‘et al’; and ‘eventis Technologies’. We are also the official UK and Republic of Ireland distributor of ‘Environ® Skin Care’ products. 

The ‘eventis technologies’ (“eventis”) consist of a Tablet, LaunchPad Scanner, Probe, Consultation App and Client App, and was introduced by iiaa to empower Skin Health Professionals (SHPs) to guide their end-user customers towards life-changing, lasting skin health results. It is a ground-breaking business solution that offers SHPs access to the iiaa brands and products; as well as training, business support and cutting-edge technology based on years of scientific research.  

 

This Privacy Notice addresses the processing of personal data by eventis, collected using eventis, from the eventis website (https://iiaa.co.uk/eventis-business-solution/,) or as part of eventis’s broader operations. For information on the processing of personal data by iiaa or its other brands and websites, please see the separate iiaa or brand-specific Privacy Notices. If you have a data privacy question or concern regarding eventis or this Privacy Notice, please contact iiaa by emailing Privacy@iiaa.eu  

1. Who is responsible for eventis’s processing of the personal data?
2. Which personal data and where does it come from?
3. What is the personal data used for and why?
4. Security of your personal data
5. Your personal data rights
6. Contact us
7. Changes to our privacy practices or to your personal data

1. Who is responsible for eventis’s processing of personal data?

The ‘Data Controller’ is responsible for how personal data is processed (e.g. how it is collected, used and stored in eventis and ensuring it is protected, etc.), and for eventis, there are two Data Controllers:- 

  • iiaa, the company that has developed the eventis skincare services and technologies and website; ; incorporated in the UK with company number 02810868 and registered address of Riverside House, 2A Southwark Bridge Road, London SE1 9HA. Its ICO (the UK’s Information Commissioner’s Office) registration number is Z695067X; and, 
  • The Salon or Treatment Provider that uses the eventis technologies to provide the individual with analyses and consultations to detect skin problems; offer advice, solutions and care; and, create bespoke treatment plans. 
     

When “we“, “us” or “our” is used below it refers to both Data Controllers collectively.

2. Which personal data and where does it come from?

The individual is referred to as “the Client”, “I”, “you”,“your” or “data subject” below. The personal data is the information, images, statistics, measurements and other data related to you, that is required by eventis to provide you with an initial consultation for a unique skin analysis to identify skin concerns / imperfections and recommend an unparalleled skin journey (treatment plan); follow-up skin analysis and consultations, and show your skin improvements over time. 

 

This includes your names; contact details; billing and address/es; profile data including username or similar identifier and password; payment information, transaction data and product purchase history; treatment plan and recommended products; marketing communications and cookie preferences; and, device, usage and content data including unique device identifiers, mobile network information, traffic and communication data. It also includes information relating to your skin health and conditions; your overall health including any allergies and medical conditions; your skin analysis images which may identify you and reveal your racial and ethnic origin; and your transepidermal water loss (TEWL) measurements; which is recognised by data privacy laws as ‘special category’ data. 

 

You provide us with most of this personal data directly when you: register to use eventis during your initial consultation with the Salon or Treatment Provider using eventis; install the eventis Client App; make an eventis in-App or in-store product purchase; track your skincare results, view your personal product recommendations or obtain guidance using eventis; and, contact us for assistance or to report a problem with eventis 

 

You may also provide us with your personal data by filling in forms on our eventis website. For instance, when you register to use our eventis website, contact us, request further services or report a problem with our eventis website; or when you email or call us with your eventis questions and enquiries or should you ever need to report an adverse reaction when using eventis. 

 

We also collect details of your visits to our eventis website and the resources that you access. If you interact with us via our eventis social media accounts we collect your personal data; for instance, when you log in to our eventis website via a social media account, or post content from a social media account onto our eventis website (when using the Instagram feed feature for example). Please refer to the privacy policy / notice for each social media account to find out how that platform processes your personal data. 

 

We may also collect or receive your personal data indirectly and from other sources and third parties, for instance:- 

 

  • For our eventis end-user consumer customers – from retailers, department stores, salons and skin healthcare professionals; marketing and loyalty partners (which may include Data Brokers or third-party marketing agencies enlisted to run targeted promotional campaigns); digital platforms and social media; and beauty tech and app providers; 
  • For our eventis stockists / trade / B2B customers and distributors – from credit reference agencies; industry directories; events, exhibitions and trade show organisers; parent companies, franchises, or subsidiaries where part of a corporate group; 
  • For those in our eventis supply chain and operations – from regulatory bodies and cosmetocovigilance services; and logistics & courier providers; 
  • For our employees and contractors recruited specifically for the eventis brand – from recruitment agencies; payroll and benefits providers; previous employers and professional references; 
  • For the data subjects who visit our premises – from our building management company. 
  • For the delegates who attend our eventis training courses – from the salons or other companies who employ or register the delegates; 
  • For Healthcare Professionals (HCPs) and Key Opinion Leaders (KOLs) supporting our eventis brand – from medical associations and regulatory bodies; medical marketing and PR agencies; scientific publishers and research databases; and, Continuing Medical Education (CME) providers;  
  • For our eventis shareholders, investors, and corporate advisors where applicable – from company registrars and corporate databases; investment banks, Venture Capital firms, or brokerages; and, 
  • Where eventis adverse reactions / product safety concerns are reported on your behalf or for you – from medical professionals and hospitals; National Health Authorities / Regulatory Bodies; legal representatives or family members; and, retailers and distributors; or brokerages; and, 
  • For eventis website visitors and Salon App and Client App users - indirect / automated collection; as well as from cookie and tracking tech providers; and, Consent Management Platforms (CMPs). 

3. What is the personal data used for and why?

Using eventis: eventis is not intended to be used for children under the age of 16 years and we do not knowingly collect or use or store personal data relating to children. If you are aged 16 years or above we use your personal data to provide you with an initial consultation for a unique skin analysis to identify skin concerns / imperfections and recommend an unparalleled skin journey (treatment plan); follow-up skin analysis and consultations and show your skin improvements over time. This use (processing) includes collecting, scanning and photographing, accessing, interpreting, analysing, editing / updating, transferring, sharing, storing, and otherwise processing your personal data. It also includes aggregating it for research; and deleting it when you ask us to or when it is no longer required for using eventis.

Lawful bases
We rely on the following legal justifications (lawful bases) depending on the context for the processing of your personal data: ‘explicit consent’ when we are processing your special category data; ‘performance of a contract’ in order to provide you with the eventis services (skin analysis, consultations, treatment plan, etc.); and ‘to fulfil our legal obligations’. We may also rely on the ‘legitimate interests’ lawful basis if the processing is necessary to run our businesses and improve our products and services and we have assessed and determined that it does not unduly affect your interests or fundamental rights and freedoms – we always seek to maintain a balance between our legitimate interests and your privacy.

Marketing
From time to time we would also like to send you marketing information (news and offers) for iiaa products and care. This is optional, and subject to you choosing to opt into our marketing communications separately. We process your personal data for this purpose, based on your prior consent. This may include profiling and segmenting your personal data, and combining it with other data collected or received indirectly from public sources or third parties (for instance, national census data) in order to send you only the marketing information that is relevant to your profile. You can opt out of our marketing communications at any time by using the unsubscribe link provided in each marketing communication.

Sharing & Disclosing
We do not share your personal data with any third parties for marketing purposes and we use it solely for the reasons outlined in this eventis Privacy Notice. We may share or disclose it with authorised personnel or third parties, only if required for the stated uses and only as allowed by the law; for instance, the Salon or Treatment Provider staff, or within the iiaa group of companies, and with our service providers (such as payment services providers and delivery companies). To ensure the integrity of your personalised skincare plan we share your iiaa product order history with your chosen Salon on Treatment Provider Additionally, we securely share your skincare images and TEWL readings with them only after we have verified that you have explicitly consented to that specific use (for example, for their social media channels). We may disclose your personal data to government authorities and/or law enforcement officials, for fraud protection and credit risk reduction purposes, and as otherwise required by law. 

Transfers
If the sharing or disclosure of your personal data required to fulfil our legal obligations involves international data transfers to countries outside the UK we ensure that it is to countries that have been deemed to provide an adequate level of protection in accordance with Data Protection Law; and/or we use standard contractual clauses or other mechanisms or instruments to mandate that the transfers are afforded the same degree of data protection and appropriate security measures as in the UK.

Retention
We keep and store (retain) your personal data securely for as long as we need to for the reasons described above, and for any additional term/s as required by applicable laws and/or to fulfil our legal obligations. Where you have given your explicit consent to use your images and TEWL measurements for research this includes compiling into reports the before and after images that illustrate your skin results (which may identify you and reveal your racial and ethnic origin) for analysis at the end of the trial, we may retain this data for the duration of our relationship with you, plus the life cycle of the concerned products and any additional term/s as required by applicable laws. We may aggregate your TEWL measurements before retention. Where you have given iiaa your explicit consent to use your before and after images and/or TEWL readings that personal data may be retained for the specific use you have consented to, for example, incorporation in iiaa’s training materials; publishing in internal company publications (e.g., newsletters, presentations, intranet posts), in external communications (e.g., website, promotional materials, press releases), or on social media platforms (e.g., LinkedIn, Twitter, Facebook, Instagram, YouTube, TikTok); and, in corporate events coverage.  

If you do not use the eventis Client App for a period of 365 days then we treat the account as expired and your personal data is securely destroyed. Some may be retained to fulfil our legal obligations, for instance, your basic information for six years after you cease being a consumer, for tax purposes.

Security of your personal data

We take appropriate security measures to protect your personal data and keep it only as long as is necessary. We also use strict data security policies and procedures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised manner.  Where we have provided you (or you have chosen) a password to access certain parts of eventis, you are responsible for keeping this password confidential and not share it with anyone. We have procedures in place to handle any suspected personal data breach in accordance with the Data Protection Law and in the event of a breach we will notify you and any applicable regulator when we are legally required to do so.

Your personal data rights

Under certain circumstances under Data Protection Law you have the following rights in relation to your personal data. To exercise your rights, please contact the Salon or Treatment Provider, or iiaa by emailing privacy@iiaa.eu. We respond to within one month. If your request is particularly complex we may take longer but we will notify you of the timeframe and keep you updated. You will not have to pay a fee exercise your rights, although we are allowed to charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, and we may refuse to comply with your request in certain circumstances. Please note that we may need to ask you for specific information first to confirm your identity, so that we are not disclosing your personal data to someone who has no right to receive it.

Request access – to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction
 – to have any incomplete or inaccurate personal data we hold corrected, though we may need to verify the accuracy of the new data you provide.

Request erasure
 – to ask us to delete or remove personal data where there is no good reason for continuing to process it, or we may be processing it unlawfully, or, are required to erase it to comply with local law. If we are not able to comply for other specific legal reasons we will notify you at the time of your request.

Object to processing
 – where we are relying on a legitimate interest that you believe impacts on your fundamental rights and freedoms. We may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. You may also object if we are processing your personal data for direct marketing purposes.

Request restriction of processing
 – to ask us to suspend the processing of your personal data if you want us to establish the data’s accuracy; where our use of the data is unlawful but you do not want us to erase it; where you need us to hold the data even if we no longer require it because you need it to establish, exercise or defend legal claims; or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer
 – of your personal data to you or to a third party (such as another Salon or Treatment Provider to continue to use eventis for you), in a structured, commonly used, machine-readable format. This right only applies to automated information which you initially provided our explicit consent to use or where we have used the information to perform a contract with you.

Withdraw consent – where we are relying on your consent (e.g. to receive our marketing communications) you can opt out at any time by using the unsubscribe link provided in each marketing communication. Where we are relying on your explicit consent (i.e. to process your special category personal data) you may withdraw it at any time by telling the Salon or Treatment Provider or by contacting iiaa. If you do decide to withdraw your explicit consent the Salon or Treatment Provider will not be able to continue with or complete your treatment plan. Withdrawing your consent or explicit consent will not affect the lawfulness of any processing carried out beforehand.

You also have the right to make a complaint at any time to: the Information Commissioner’s Office (“ICO”), the UK regulator for data protection issues at http://www.ico.org.uk” if you are based in the UK; or, the Data Protection Commission (“DPC”), the Irish regulator for data protection issues at http://www.dataprotection.ie” if you are based in the Republic of Ireland; or any other regulatory authority for the member state where you reside at https://ec.europa.eu/info/index_en if you are based in the European Union. We would however, appreciate the chance to address your concerns first so please contact us in the first instance.

Contact us

To exercise any of your data rights, or if you have any eventis data privacy questions, please contact the Salon or Treatment Provider, or contact iiaa by emailing Privacy@iiaa.euIf you have a privacy complaint, please click complete and submit our 'Data Privacy Complaints Form'. 

Changes to our privacy practices or to your personal data

We keep our privacy practices and this Privacy Notice under regular review to ensure that they meet legal requirements and industry standards. We may update them occasionally, with changes posted in this notice, and effective from the notice publication date. It is important that the personal data we hold about you is always accurate and current and it is your responsibility to keep us informed if any of it changes during our relationship with you. Please contact us to inform us of any changes.

Last updated: 19 March, 2026.