Privacy Policy

---

At Skinlytics, we are committed to protecting and respecting your privacy. We only process personal information about our customers using methods that comply with current legal and regulatory obligations, and we aim to be completely transparent about what we do with your personal information.

This privacy policy sets out how Skinlytics complies with the UK's data protection requirements. 

This policy explains how we use any personal information we collect from you when you visit our websites or when you use any of our services. 

By using our website, you are agreeing to be bound by this policy.

   How do we use personal information? 

So we can deliver the most effective service, we need to collect and use your personal data. See below for further details on the purpose:

To register you as a customer/ user of our services

• What we need: Your name, address, phone number, and email address.
• The legal basis for us processing this: Performance of a contract.
• Where this data will be stored: On our secure booking software cloud.
• How long will we keep this data: For as long as you remain a customer.

Where the data is sourced: Directly from you

To communicate details of products / services to you

• What we need: Email address and your communication preferences.
• The legal basis for us processing this: Your consent to do so.
• Where this data will be stored: On our secure marketing software cloud.
• How long will we keep this data: For as long as you consent to marketing

Where the data is sourced: Directly from you.

 To update you on relevant changes to our organisation

• What we need: Name, email address.
• The legal basis for us processing this: Performance of a contract.
• Where this data will be stored: On our secure marketing software cloud.
• How long will we keep this data: For as long as you are a registered customer.

Where the data is sourced: Directly from you

To deliver our service or products to you

• What we need: Name, address, phone number, email address, payment details.
• The legal basis for us processing this: Performance of a contract.
• Where this data will be stored: On our secure booking software cloud.
• How long will we keep this data: For as long as you are a registered customer.

Where the data is sourced: Directly from you 

To update you on relevant statutory changes that may affect our products/services, or our relationship with you

• What we need: Name, email address.
• The legal basis for us processing this: Performance of a contract.
• Where this data will be stored: On our secure marketing software cloud.
• How long will we keep this data: For as long as you are a registered customer.

Where the data is sourced: Directly from you 

How do we process your personal information

We will only collect and use your personal information in accordance with data protection laws. Our grounds for processing your personal information are as follows:

1. Consent – Where necessary we will only collect and process your personal information if you have given your consent for us to do so, for example, we will only send you certain marketing emails and process any sensitive information about you if we have your consent.
2. Legitimate Interests – We may use and process some of your personal information where we have sensible and legitimate business grounds for doing so. Under European privacy laws there is a concept of “legitimate interests” as a justification for processing your personal information. Our legitimate interests for processing your personal information are:
   • To enable you to access and use the services by: Keeping records of your previous treatment history to get you the best course of action when you use of our services again; processing any transaction; and tracking sales. Using your information in this way is an essential part of us being able to provide the service to you.
   • To communicate with you about the Services. We need to keep you informed about your use of the Services for example sending you a confirmation email of your purchase via our website or to confirm your booking. This won’t include marketing communications unless you have given us your consent to receive these.
   • To improve our Services. We may use your personal information to: personalize aspects of our service; for market research; and to use our smart search services. We constantly aim to improve our Services to you and using your personal information in this way helps us to do this.

Our website may contain links to other websites run by other companies or organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the policies or practices of other websites, even if you access them using links from our website.

In addition, if you are linked to our website from a third party site, we cannot be responsible for the privacy policies or practices of the owners and operators of that site and recommend that you check their privacy policies carefully.

Third party data processors

Occasionally we have to take advantage of third party systems to make sure we can properly fulfil our obligations to you. Below are a list of a few third party data processors we use:

Tracking – We use Google cookies, tracking and analytics on our website.
Social Media Platforms – We use Social Media Platforms including but not limited to Facebook, Twitter, Tiktok and Instagram to monitor our social media responses, queries and interests.
Calendar – We use third party software and system to mange our booking calendars and schedules.
Appointment Management – We use third party applications to manage all our appointments. Your personal information are stored in their secure and encrypted system.
Email Marketing – We use external email marketing systems to send our regular marketing emails and newsletters. All our marketing emails will give you the option to unsubscribe from a particular email list or to update your preference.
Payment Process – We do not process any payments directly on our website. All payments made on our site are via third-party partners who process, manage, encrypt and authorise your payments. The payment forms available in our site uses and iFrame or a Redirect option to make sure all payments are processed via the their party providers on a secure environment. All data before being processed are encrypted, to ensure adequate security measures are in place.

None of our third-party data processors will contact you or pass on your information to external companies unless required to do so by Law.

Who do we share your personal information with?

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

Whilst we are holding or processing your personal data, you have the following rights:

• The right of access – you have the right to request a copy of the information that we hold about you.
• The right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• The right to be forgotten – in certain circumstances, you can ask for the data we hold about you to be deleted.
• The right to the restriction of processing – where certain conditions apply you have a right to restrict the processing of your personal data.
• The right of portability – you have the right to request the data we hold about you be transferred to another organisation.
• The right to object – you have the right to object to certain types of processing such as direct marketing.
• The right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
• The right to judicial review – in the event that we refuse your request under rights of access, we will provide you with a reason as to why. If you are not satisfied with this you have the right to complain to the relevant supervisory authority
• Consent – where you have consented to the processing of your personal data, you have the right to remove this consent at any time.

You can exercise these rights at any time by contacting us.

If you feel you need to make a complaint about how we are processing your personal data, you can contact the Information Commissioner’s Office as the relevant supervisory authority. You do so through the following means:

Website – ico.org.uk/concerns/handling
Helpline – 0303 123 1113
Email – casework@ico.org.uk
Post – Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

 Last updated: 01 January 2025