Privacy policy

Who we are

Skin Deep Aesthetics Laser & Skin Clinic Ltd (company no. NI743898, registered office 30 Clooney Terrace, Londonderry, BT47 6AR), trading as Skin Deep Aesthetics from 6 Carlisle Road, Derry~Londonderry, BT48 6JJ, is the data controller for the personal information described here. Contact us about anything in this policy at info@skindeepaesthetics.clinic or 07878 644581.

What we collect and why

• Booking and skin quiz answers: your name, email, phone number, gender, age group, skin concerns, chosen treatment, appointment time and any notes you give us. We use these to arrange your appointment, prepare for your consultation and contact you about your booking. Lawful basis: taking steps to provide the service you asked for (contract).
• Health information: anything you tell us about your skin, medical conditions, medication, allergies, pregnancy or previous treatments, your consultation and consent forms, patch test results and treatment records. We use it only to decide whether a treatment is safe and suitable and to keep proper clinical records. Lawful basis: providing health care, and your explicit consent where needed (UK GDPR Article 9).
• Treatment photographs: before and after photos taken to track your progress. These are kept with your record and are never used publicly unless you give separate written consent, which you can withdraw at any time.
• Payments: when you buy products, treatment courses or gift vouchers online, card payments are handled by Stripe and pay-later payments by Klarna. We receive confirmation of payment and the last four digits of the card, never your full card details.
• Orders and vouchers: your name, email, phone, delivery address, what you bought and, for gift vouchers, the recipient's name and message.
• Enquiries: the details you send through our contact form, email, phone, WhatsApp or social media, so we can reply.
• Clinic notes: our team may add private notes to your booking, such as preferences or reminders. These are part of your record and you can ask to see them.
• How you found us: if you arrive from a link such as an Instagram post or an advert, we note the source with your enquiry so we know which channels work. Lawful basis: our legitimate interest in running the clinic.
• Website security: technical information such as your IP address may be recorded briefly to protect the site against abuse and repeated login attempts. Lawful basis: legitimate interests.
• Marketing: we only send offers and news if you tick the box to opt in. You can unsubscribe at any time using the link in any email or by contacting us. Lawful basis: consent.

If you start but do not finish a booking

If you enter your contact details in the skin quiz but do not complete a booking, we may contact you once to help you finish it or answer questions. We will not add you to marketing unless you opted in.

Appointment messages

We send booking confirmations, changes and reminders by email, and may send reminders and review requests by text or WhatsApp through our clinic booking system. These are service messages about your appointment, not marketing.

Who we share it with

We never sell your data. We share it only where needed to run the clinic and care for you:

• our website host and our email provider, to run this website and send your confirmations;
• our clinic booking and client management system (Fresha), which stores appointments and client records and sends reminders;
• Stripe, to take card payments, and Klarna, if you choose to pay later (Klarna may carry out its own credit checks under its own privacy notice);
• Royal Mail or our courier, to deliver your order;
• the doctors, prescribers and clinicians involved in your care, for example for prescription skincare, B12 or the doctor-led clinic;
• Google, if you agree to analytics cookies, and when the map on our pages loads (see our cookie policy);
• our accountant, insurers, professional advisers or the authorities, where the law requires it.

Each of these providers may only use your information for the purpose we give them and must keep it secure.

Information sent outside the UK

Some providers, such as Stripe, Klarna and Google, may process information outside the UK. Where they do, the transfer is protected by UK adequacy regulations or the UK's approved data transfer agreements.

How long we keep it

• Treatment and consultation records: in line with professional guidance for clinical records, normally 8 years after your last treatment.
• Orders, payments and vouchers: 6 years, for tax and accounting.
• Quiz enquiries that do not become bookings: 12 months.
• Contact form enquiries and booking emails: up to 2 years.
• Marketing consent: until you unsubscribe.

Keeping it secure

Our website uses an encrypted connection (HTTPS). Booking, order and enquiry records are stored in private areas that are not accessible from the web, and only authorised clinic staff can sign in to view them. Card details never pass through our systems.

Children

Our treatments are for clients aged 18 and over, and our website is not intended for children.

Cookies

We use one essential cookie to keep forms secure and a small amount of browser storage for your basket and booking progress. Analytics cookies are only used if you agree. Full details are in our cookie policy.

Your rights

Under UK data protection law you can ask to:

• see a copy of the personal information we hold about you;
• correct anything that is wrong or incomplete;
• have it deleted, unless we must keep it (for example clinical or tax records);
• restrict or object to how we use it, including for marketing;
• receive it in a portable format;
• withdraw your consent at any time, where we rely on consent.

Email info@skindeepaesthetics.clinic and we will respond within one month. There is no charge. If you are unhappy with how we handle your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy, for example when we add a new service. The date at the top shows when it last changed.