Skin Boss are committed to safeguarding the privacy of our customers and website visitors; in this policy we explain how we will treat your personal information. One of the ways we do this is by adhering to the requirements of UK data protection legislation, and this has changed as part of the General Data Protection Regulation (GDPR for short) in force from 2018.

We respect and value the privacy of everyone who visits this website, skinbossltd.co.uk will only collect and use personal data in ways that states this privacy policy, and in a way that is consistent with our obligations and your rights under the law.

Please read this Privacy Policy carefully and ensure that you understand it. We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our website. By using our website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of this policy.

By signing your medical history and consent form(s) you are also agreeing for the use of your photos to be used for, including but not limited to: treatment evidence, training purposes, marketing and social media, if you do not consent for your photos to be used, please put this in writing to info@skinbossltd.co.uk.

What Does This Policy Cover?

This Privacy Policy applies only to your use of our website. Our site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

What is Personal Data?

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

GDPR rights

Under the GDPR, you have the following rights, which we will always strive to uphold:

• The right to be informed about our collection and use of your personal data. This Privacy Policy should tell you everything you need to know, but you can always contact us  to find out more or to ask any questions using the contact details provided.
• The right to access the personal data we hold about you. We will tell you how to do this.
• The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. Please contact us using the contact details provided.
• The right to ask us to delete or otherwise dispose of any of your personal data that we hold. Please contact us using the contact details provided.
• The right to restrict (i.e. prevent) the processing of your personal data.
• The right to object to us using your personal data for a particular purpose or purposes.
• The right to data portability. This means that, if you have provided personal data to us directly, we aim to use it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.

For more information about our use of your personal data or exercising your rights as outlined above, please contact us using the contact details provided.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

If you have any cause for complaint about our  use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.

What Data Do We Collect?

We may collect, store and use the following types of personal information:

• information that you supply to us in any medical questionnaire;
• information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths);
• information that you provide to us when registering with our website (including your email address);
• information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (including your name and email address);
• information relating to any purchases you make of our goods or services (including your name, delivery address, payment address, telephone numbers and email address);
• information that you post to our website for publication on the internet (including your user name, profile pictures and reviews);
• information contained in or relating to any communication that you send to us (including the communication content and metadata associated with the communication); and
• any other personal information that you choose to send to us.
• If you are booking on behalf of another person, before you disclose to us the personal information of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this policy.

Personal data usage

Personal information submitted to us through our website will be used for the purposes specified in this policy or on the relevant pages of the website.This may be because the data is necessary for our  performance of a contract with you, because you have consented to our  use of your personal data, or because it is in our legitimate business interests to use it. This means we have a legal reason to ask you for your data for contractual reasons. In order for us to carry out our part of the contract by carrying out your treatment, you are required to share your personal data as your part.

You do not have to share your personal data with us, however if you do not, we are unable to offer any treatment at Skin Boss Ltd.

We may need to contact you from time to time in regards to the treatment(s) you receive from us or appointments should they need to be rescheduling for example if your consultant is unable to attend the clinic and/ or unable to carry out the procedure.

Your personal data may be used for one of the following purposes:

• send statements, invoices and payment reminders to you, and collect payments from you;
• administer our business and website;
• personalise our website for you;
• provide services to you;
• send you non-marketing commercial communications;
• send you email notifications that you have specifically requested;
• send you text notifications reminding you of your appointment;
• send you our email newsletter, if you have requested it (you can inform us at any time if you no longer require the newsletter);
• send you marketing communications relating to our business or the businesses we are associated with by post or, where you have specifically agreed to this, by email and/or telephone and/or text message and/or post or similar technology (you can inform us at any time if you no longer require marketing communications); You will not be sent any unlawful marketing or spam.
• deal with enquiries or complaints made by or about you relating to our website;
• keep our website secure and prevent fraud; and
• verify compliance with the terms and conditions governing the use of our website.
• Providing and managing your Account;
• Supplying our products and/or services to you. Your personal details are required in order for us to enter into a contract with you.
• Communicating with you. This may include responding to emails or calls from you. which may include contacting you by email and/or telephone and/or text message and/or post and/ or social media.

If you submit personal information for publication on our website, or social media we will publish and otherwise use that information in accordance with the licence you grant to us.

We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing.

We will require you to fill in a health consultation form to ensure that the present and all future treatments you have are safe to go ahead and and not contra-indicated. The form(s) will also include any medical history or medication you may be taking or have taken in the past. The information give. Will be reviewed at every appointment to ensure there are no changes and the treatment is safe to be carried out.

Photos and videos are also taken to log your treatment results and for social media purposes.

Disclosing personal data

We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy.

We may disclose your personal information:

• to the extent that we are required to do so by law;
• in connection with any ongoing or prospective legal proceedings;
• in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
• to the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling; and
• to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.

Except as provided in this policy, we will not provide your personal information to third parties.

Retention of personal data

We  will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):

Dependent upon treatment supplied and whether this may lead to a follow-up procedure and previous records are required.

 Access and amendments of personal data

You may instruct us to provide you with any personal information we hold about you. This is known as a “subject access request”. Provision of such information will be subject to:

• the payment of a fee (currently fixed at GBP 10); and
• the supply of appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address).

You may instruct us at any time not to process your personal information for marketing purposes.

In practice, you will usually either expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt out of the use of your personal information for marketing purposes.

All subject access requests should be made in writing and sent to the email or postal addresses.

We  will respond to your subject access request within less than one month and of receiving it. Normally, we  aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our  progress.

Please let us know if the personal information that we hold about you needs to be corrected or updated.

How are Cookies used?

We only use cookies to collect analytical information for the website. These cookies are not shared with any other third parties.

Changes to this Privacy Policy

We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.

Any changes will be immediately posted on our website and you will be deemed to have accepted the terms of the Privacy Policy on your first use of our website following the alterations. We  recommend that you check this page regularly to keep up-to-date should any changes be made.

Information About Us

Our Site is owned and operated by Skin Boss Ltd, a limited company registered in England under company number 10153174.

How Do I Contact Skin Boss Ltd?

To contact us  about anything to do with your personal data and data protection, including to make a subject access request, please use the following details (for the attention of Danielle Dickenson):

Our trading name is Skin Boss Ltd.skin Boss Ltd is a company registered in England and Wales under registration

Telephone number: 07712729826

Email address: info@skinbossltd.co.uk

Address:

Great Broomfields,

Cranfield Park Road,

Wickford,

Essex

SS12 9EP