Privacy Policy
Last updated: 10 April 2026
At Skinlytics, we are committed to protecting and respecting your privacy. We ensure that all personal information is processed in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains how we collect, use, and protect your personal information when you visit our website or use our services.
By using our website or services, you agree to the terms outlined in this Privacy Policy.
Who we are
Skinlytics is a skincare clinic providing personalised treatments and skincare solutions. If you have any questions about this policy or how your data is handled, you can contact us via the details provided on our website.
What information we collect
We may collect and process the following personal information:
- Full name
- Contact details (email address, phone number, address)
- Appointment and treatment history
- Payment information (processed securely via third-party providers)
- Communication preferences
Sensitive (special category) data
As part of our services, we may collect information relating to your skin health and medical history (e.g. acne, rosacea, allergies, or other relevant conditions).
This information is classified as special category data under UK GDPR and is only collected and processed with your explicit consent. This allows us to provide safe, effective, and personalised treatments.
How we use your personal information
We use your personal data to deliver safe, effective, and personalised services. This includes:
1. To provide our services
- Register you as a client
- Manage appointments and treatment records
- Deliver treatments and aftercare
Legal basis: Performance of a contract
2. To communicate with you
- Appointment confirmations and reminders
- Updates relating to your bookings or treatments
Legal basis: Performance of a contract
3. To send marketing communications
- Newsletters, offers, and promotions (only if you opt in)
Legal basis: Consent
You can withdraw your consent at any time.
4. To improve our services
- Analyse client preferences
- Improve treatments, products, and customer experience
Legal basis: Legitimate interests
5. To meet legal or regulatory obligations
- Maintain accurate records where required by law
Legal basis: Legal obligation
How We Process Your Information
We will only process your personal data where we have a lawful basis to do so, including:
- Consent – for marketing and sensitive health-related data
- Contractual necessity – to provide booked services
- Legitimate interests – to improve and manage our services
- Legal obligations – where required by law
How Long We Keep Your Data
We retain your personal data only for as long as necessary:
- Client records and treatment history: typically up to 6 years after your last appointment (in line with UK legal and insurance requirements)
- Marketing data: until you withdraw your consent
Data Storage & Security
Your data is securely stored using trusted third-party systems. We take appropriate technical and organisational measures to protect your information from unauthorised access, loss, or misuse.
Third-Party Data Processors
We use carefully selected third-party providers to support our services, including:
- Booking and appointment management systems
- Payment processing providers (secure and encrypted)
- Email marketing platforms
- Analytics and website tracking tools (e.g. cookies)
- Social media platforms for communication and engagement
All third parties are required to handle your data securely and in accordance with data protection laws.
Payments
We do not store or process payment details directly. All payments are handled securely through trusted third-party providers using encrypted systems.
Cookies & Website Tracking
Our website uses cookies and similar technologies to improve your browsing experience and analyse website performance.
You will be given the option to accept or manage cookies when visiting our site. For more information, please refer to our Cookie Policy.
Sharing Your Information
We do not sell, distribute, or lease your personal data to third parties. Your information will only be shared:
- Where necessary to deliver our services
- With trusted service providers
- If required by law
Your Rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data (where applicable)
- Restrict or object to processing
- Request transfer of your data to another provider
- Withdraw consent at any time (where applicable)
To exercise any of these rights, please contact us.
Links to Other Websites
Our website may contain links to external websites. This Privacy Policy applies only to our website, and we are not responsible for the privacy practices of other sites.
Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office:
- Website: https://ico.org.uk/concerns
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
