Privacy Policy

Effective Date: 1st January 2023

At Skinvestment, your privacy and the protection of your personal data are of utmost importance to us. This Privacy Policy outlines how we collect, use, and safeguard your personal information in compliance with UK law, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

1. Who We Are

Skinvestment is a medical aesthetics clinic that provides a range of skincare and cosmetic services. Our registered address is The Bungalow, Nuttall Park, Ramsbottom, BL0 9LU. For any privacy-related concerns, you can contact us at:

Phone: 01706 611389
Email: info@skinvestment.pro

2. What Information We Collect

We collect personal data that is necessary for providing our services. This may include:

Personal Identification Information: Name, address, date of birth, contact details (phone number, email).
Medical Information: Medical history, current medications, allergies, and any relevant health information necessary for your treatment.
Payment Information: Billing details, bank account information, or payment card details.
Photographs: Before and after treatment photos, taken with your consent for clinical records and, with explicit consent, for marketing purposes.
Appointment History: Records of your previous visits, treatments, and consultations.

3. How We Use Your Information

We use your personal data for the following purposes:

Providing Services: To offer and manage your treatments and appointments, and to ensure your safety by reviewing your medical history.
Communication: To contact you regarding your appointments, treatment plans, or any other relevant communication.
Billing and Payment: To process payments for services rendered.
Legal Compliance: To comply with legal obligations and regulatory requirements.
Marketing: With your explicit consent, we may use your contact details and photos for promotional purposes, such as newsletters or social media.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Consent: When you provide consent for specific purposes (e.g., marketing communications).
Contractual Necessity: To fulfill our contract with you (e.g., providing treatments).
Legal Obligation: To comply with legal requirements (e.g., maintaining medical records).
Legitimate Interests: For purposes related to clinic operations, such as improving services, unless these interests are overridden by your rights.

5. How We Protect Your Information

We take data protection seriously and implement appropriate technical and organizational measures to safeguard your personal data, including:

Data Encryption: Personal and medical data is stored securely using encryption technologies.
Access Control: Only authorized personnel have access to your personal information, and they are bound by confidentiality agreements.
Regular Audits: We regularly review our security practices and data protection measures.

6. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. However, we may share your information with:

Medical Professionals: If necessary, to provide you with the best possible care (e.g., referrals).
Service Providers: Trusted third parties who assist us with clinic operations, such as IT support and payment processing, under strict data protection agreements.
Legal Authorities: If required by law or to protect our legal rights.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. Medical records are retained for a minimum of eight years after your last treatment, in accordance with UK healthcare regulations.

8. Your Rights

Under UK law, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
Right to Erasure: You can request the deletion of your personal data under certain circumstances.
Right to Restriction: You can ask us to limit the processing of your data in certain situations.
Right to Data Portability: You can request that we transfer your data to another organization or to you, where feasible.
Right to Object: You can object to the processing of your personal data in certain situations, including direct marketing.
Right to Withdraw Consent: Where we rely on your consent to process your data, you can withdraw this consent at any time.

To exercise your rights, please contact us at info@skinvestment.pro. We will respond to your request within one month.

9. Cookies and Website Data

Our website may use cookies to enhance your browsing experience. Cookies are small files stored on your device that help us understand how you use our website and improve its functionality. You can control cookies through your browser settings.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes and update the "Effective Date" at the top of this policy. We encourage you to review this policy periodically.

11. Complaints

If you have any concerns about how we handle your personal data, please contact us at info@skinvestment.pro. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority. You can find more information on the ICO website: https://ico.org.uk/.