Legal
Privacy policy.
What we collect, why, how long we keep it and how to ask us about it.
What we collect
When you use the booking form we collect your name, mobile number, email address and postcode, the treatment, whether it is a single session, a course or the consultation, a day if you give one, and anything you write. The form also records the time it was sent and your IP address, used only to block automated submissions.
For anyone having a treatment we keep a client record: your skin history, the products you use, your medication, the contraindications we checked, patch test results, consent forms, the settings used for laser and peels, and skin scan images taken with your consent. Medication and skin conditions are health data, held because treating you safely requires it.
Why we use it
- To arrange and provide your treatments (our contract with you).
- To keep the records our insurer, Healthcare Inspectorate Wales (for the laser) and our professional association require (a legal and professional obligation).
- To keep accounting records (a legal obligation).
- To send aftercare and, with your agreement, a reminder when a course session is due.
- To ask for a review after an appointment, which you can decline by replying.
Who sees it
Seren and Leah. The secure booking and client-record system, under a data processing agreement. Our insurer, only if a claim is made. The review platform receives your email address once. We never sell or share your details for marketing, and skin scan images are never used in our marketing without separate written consent.
How long we keep it
Booking requests that do not lead to an appointment are deleted after six months. Client records, patch tests and consent forms are kept for eight years after your last treatment, as our insurer requires, then securely destroyed. Accounting records are kept for six years.
Your rights
You can ask for a copy of your record, including your skin scans, ask us to correct it, or object to how we use it; some of it we must keep. Email hello@the-skin-rooms.co.uk or ask at the clinic. We answer within a month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
This website sets a session cookie only when you send the booking form, to limit repeat submissions; it expires when you close the browser. There are no analytics or advertising cookies. The map on the find-us page is loaded from Google, which may set its own cookies when it is displayed; the page works without it.