Bare Skin Clinic
Bare Skin Clinic is committed to protecting your privacy and handling your personal data with care, transparency and respect. This Privacy Policy explains how we collect, use, store and protect your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Bare Skin Clinic is the data controller responsible for your personal data.
Contact details:
Email: info@bareskinclinic.co.uk
Location: Worsley, Greater Manchester, UK
What Personal Data We Collect
We may collect and process the following information:
Personal & Contact Information
Name
Email address
Phone number
Address (if required for vouchers or records)
Health & Treatment Information (Special Category Data)
Medical history and consultation forms
Skin concerns, treatment records and progress notes
Before/after photos (with consent)
Booking & Payment Information
Appointment details via our booking system (e.g. Fresha)
Payment confirmations (payment details are processed securely by third-party providers - we do not store card details)
Website Data
IP address
Browser type
Pages visited
Cookies (see Cookies section)
How We Use Your Information
We only use your data when we have a lawful reason to do so, including:
To provide safe and effective treatments
To manage bookings, appointments and payments
To communicate with you regarding your appointments or enquiries
To maintain accurate treatment records
To comply with legal, insurance and regulatory requirements
To improve our services and website performance
Lawful Bases for Processing
Under UK GDPR, we process your data under the following lawful bases:
Consent – for consultations, photos and marketing (where applicable)
Contract – to provide treatments you book
Legal obligation – for record keeping and compliance
Legitimate interest – to manage and improve our business safely
Health-related data is processed under explicit consent and healthcare provision exemptions.
How Your Data Is Stored
Your information is stored securely using:
Encrypted booking systems (e.g. Fresha)
Password-protected devices and systems
Secure cloud-based platforms
We retain data only for as long as necessary to meet legal, insurance and professional requirements.
Sharing Your Data
We do not sell your data.
Your information may be shared only when necessary with:
Booking and payment providers (e.g. Fresha)
Professional insurers
Legal or regulatory bodies if required by law
All third parties are required to protect your data in line with UK GDPR.
Your Rights
You have the right to:
Access your personal data
Request corrections
Request deletion (where legally possible)
Restrict or object to processing
Request data portability
Withdraw consent at any time
To exercise any of these rights, please contact: info@bareskinclinic.co.uk
Cookies
Our website uses cookies to improve functionality and understand how visitors use the site. You can control or disable cookies through your browser settings.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their policies separately.
Data Security
We take appropriate technical and organisational measures to protect your personal data. While no system is completely secure, we work hard to minimise risk and safeguard your information.
Changes to This Policy
This Privacy Policy may be updated from time to time. The latest version will always be available on our website.
Contact
If you have any questions about this Privacy Policy or how your data is handled, please contact: info@bareskinclinic.co.uk