Privacy Notice

Explanation of how we collect and process your personal data through our website.

 

1. INTRODUCTION

 

Our privacy notice will cover how we collect and process your personal data through our website www.skinbysarah.co.uk

By providing us with your data, you guarantee to us that you are over 18 years of age.

Skin By Sarah Ltd is the data controller, and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

Contact Details

Our full details are:

Full name of legal entity: Skin By Sarah Ltd

Email address: info@skinbysarah.co.uk

Postal address: 11 Wade House Rd, Shelf, Halifax, HX3 7PE

Company number: 11023631

If for any reason you are not happy with how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). If there is a reason you are planning to complain to the ICS, we would appreciate if you would contact us first so we can do our best to rectify any issues you may have with the way we have handled and processed your personal data.

 

2. WHAT DATA DO WE COLLECT ABOUT YOU

 

Personal data means any information capable of identifying an individual. It does not include anonymised data.

We may process certain types of personal data about you as follows:

Identity Data >> This may include your first name, maiden name, last name, username, marital status, title, date of birth and gender.

Contact Data >> This may include your delivery address, email address and telephone numbers.

Technical Data >> This may include your login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access this site.

Anything not mentioned here that you may add in the enquiry/question fields on any of the contact/enquiry forms on our website will not be processed unless relevant to your enquiry. Any sensitive data added will be immediately deleted. (See next section for what sensitive data is)

(A website form field is a space where you will type any information before sending the form)

If you change your personal data, please inform us at info@skinbysarah.co.uk as soon as possible as it is very important that your personal data is stored accurately and kept up to date.

Sensitive Data or Special Category Data

We will not intentionally collect any Sensitive Data about you through our website other than your GP's name and address. If we do receive any other then this, it will be removed as soon as the data is viewed.

Example's of sensitive data may include, information about an individual’s:

1. >> Race
2. >> Ethnic origin
3. >> Politics
4. >> Religion
5. >> Trade union membership
6. >> Genetics
7. >> Biometrics (where used for ID purposes)
8. >> Health
9. >> Sex life
10. >> Sexual orientation

 

3. HOW WE CAPTURE / COLLECT YOUR DATA

 

Your data will be captured using one of our website forms, or through the Bookly plugin which powers our online booking system when you sign up for a treatment or book a consultation online.

When you use our site, we may automatically collect Technical Data about your equipment, browsing actions and usage patterns. We collect this data by using cookies, server logs and similar technologies. We may also receive Technical Data about you if you visit other websites that use our cookies. Please see our cookie policy at https://skinbysarah.co.uk/cookie-policy/ for further details.

 

4. HOW WE WILL USE YOUR DATA

 

We will use your data to process and respond to your enquiry/questions or anything that is relevant to the information filled in on any of our website contact forms.

If your personal data is collected through the online booking form this will only be used to deal with your appointment, treatment or consultation.

Data collected by Skin by Sarah is collected and held for the following specific purposes

1. >> To enable a diagnosis to be made
2. >> Provide a basis for decision making in relation to cosmetic treatments
3. >> Enable us to offer services based on the information provided
4. >> Ensure that care is safe and effective using up to date information provided by the client
5. >> Remind clients about appointments
6. >> Check the quality of care provided
7. >> Help investigate complaints

Your data will not be used for marketing lists.

Change of purpose

If we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose that we may proceed to do so.

 

5. HOW YOUR DATA WILL BE STORED

 

Contact Forms

The contact forms on our website will be stored within our email services providers. These include one.com, you can find more information on their privacy policy here https://www.one.com/en/info/privacy-policy and Yahoo, you can find more information on their privacy policy here, https://policies.oath.com/ie/en/oath/privacy/index.html

Online Booking

If you set up an appointment, treatment or consultation then the information provided will be stored in our online database. This is protected by secure passwords and the plugins GDPR compliance. You can find out more information about GDPR's compliance here, https://www.booking-wp-plugin.com/bookly-v15-0/

 

6. DISCLOSURES OF YOUR PERSONAL DATA

 

Data collected by Skin by Sarah LTD is not shared with other parties unless there is consent in place from the client to share for a specific purpose, for example, a future clinician that the client sees for cosmetic treatments.

They will not use your data for anything other than your enquire/question/treatment/consultation.

 

7. DATA SECURITY

 

We have put security measures in place to ensure that your data is stored securely, by our associates and us.

We will also limit the access to your personal data by our associates if they don't need to access everything that is stored based on the nature of the work and their involvement. They will only process your personal data on our instruction and will uphold confidentiality based on agreements between us and all of our associates.

Data Breach

If a data breach is to happen, we have put in place a procedure that will be followed which includes notifying you at the closest possible time to us finding out about the breach.

 

8. DATA RETENTION

 

We will retain your personal data for up to 10 years.

 

9. YOUR LEGAL RIGHTS

 

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

1. >> Request access to your personal data
2. >> Request correction of your personal data
3. >> Request erasure of your personal data
4. >> Object to the processing of your personal data
5. >> Request restriction of processing your personal data
6. >> Request transfer of your personal data
7. >> Right to withdraw consent

You can see more about these rights at:

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

--

If you wish to exercise any of the rights set out above, please email us at info@skinbysarah.co.uk