1. Who We Are

Skinco London ("we," "us," or "our") is a beauty and aesthetics business located in the United Kingdom. We are committed to protecting and respecting your privacy and complying with the General Data Protection Regulation (GDPR).

2. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: info@skincolondon.co.uk

• Phone: +44 78401 41187

• Address: 104 Judd Street, London, WC1H 9PU

3. What Data We Collect

We may collect and process the following categories of personal data:

a) Information You Provide Directly:

• Name

• Email address

• Phone number

• Date of birth

• Payment information (processed securely by third-party payment processors)

• Health and medical information (if required for services)

b) Automatically Collected Information:

• IP address

• Browser type and version

• Time zone settings

• Operating system

• Usage data (e.g., pages viewed, time spent on the website)

c) Cookies and Tracking Technologies:

We use cookies and similar tracking technologies to enhance your experience and gather analytics. For more details, see our Cookie Policy.

d) Social Media Interactions:

• When you interact with us on social media platforms, we may collect your public profile information, likes, comments, and messages.

e) Feedback and Surveys:

• Information you provide through feedback forms or surveys.

4. How We Use Your Data

We use your personal data to:

1. Provide Services: Schedule appointments, process payments, and deliver services.

2. Communication: Respond to your inquiries, send confirmations, and notify you of updates or offers.

3. Compliance: Fulfil legal and regulatory requirements.

4. Marketing: Send promotional emails or newsletters, subject to your preferences and consent.

5. Analytics: Analyse website usage and improve our services.

6. Customisation: Personalise your experience based on your preferences.

7. Feedback: Gather insights to improve our services.

5. Legal Basis for Processing

Under GDPR, we rely on the following legal bases to process your data:

1. Consent: When you opt into receiving marketing communications.

2. Contractual Obligation: To fulfil our contractual obligations when providing services.

3. Legal Obligation: To comply with applicable laws and regulations.

4. Legitimate Interests: For business analytics, feedback collection, and service improvement.

6. Sharing Your Data

We may share your personal data with:

1. Service Providers: Payment processors, IT support, email marketing platforms, and appointment booking systems.

2. Legal Authorities: When required by law or to protect our legal rights.

3. Third-Party Tools: Analytics services like Google Analytics to enhance user experience.

4. Affiliates and Partners: With trusted partners for joint marketing initiatives, subject to your consent.

We ensure that any third-party processors are GDPR-compliant and handle your data securely.

7. Data Retention

We retain your personal data only as long as necessary to:

• Fulfil the purposes outlined in this Privacy Policy.

• Comply with legal obligations.

• Resolve disputes and enforce agreements.

Specific retention periods include:

• Financial records: 7 years (as required by law).

• Marketing preferences: Until you withdraw consent.

• Health records: Retained for the duration of our services and as legally required.

8. Your Rights

Under GDPR, you have the following rights:

1. Access: Request access to the personal data we hold about you.

2. Correction: Rectify inaccurate or incomplete data.

3. Erasure: Request deletion of your data, subject to legal exceptions.

4. Restriction: Limit how we process your data.

5. Portability: Obtain and reuse your data across different services.

6. Objection: Object to data processing based on legitimate interests.

7. Withdraw Consent: Revoke your consent for marketing communications at any time.

8. Automated Decision-Making: Opt-out of profiling or automated decisions that significantly affect you.

To exercise your rights, contact us at privacy@skincolondon.co.uk.

9. Data Security

We implement robust security measures to protect your personal data, including:

• SSL encryption on our website.

• Restricted access to personal data.

• Regular data protection training for staff.

• Regular audits of our security measures.

10. International Transfers

If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission.

• Binding corporate rules.

• Verification of GDPR compliance by third-party processors.

11. Children's Privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately.

12. Cookies

We use cookies to:

• Improve website functionality.

• Provide personalised experiences.

• Analyse website usage.

• Deliver targeted advertisements.

Types of cookies we use:

1. Essential Cookies: Required for the website to function.

2. Performance Cookies: Collect information on how users interact with our site.

3. Functional Cookies: Remember your preferences.

4. Advertising Cookies: Deliver ads relevant to your interests.

For more details, see our Cookie Policy.

13. Updates to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page, and where appropriate, notified to you by email. Please review it regularly.

14. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk

• Phone: 0303 123 1113

Thank you for trusting Skinco London with your personal data. We are committed to safeguarding your privacy and ensuring transparency in our practices.