Policy

Privacy Policy

Last updated: July 2026

SKINFORMED respects your privacy. This policy explains what personal information this website collects, why, and the rights you have over it under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

SKINFORMED is the data controller for information collected through this website. Contact: hello@skinformedclinic.com.

What we collect and why

  • Enquiry form:your name, email, phone number (optional), the topic you choose under “What can we help with?”, and your message, used solely to respond to your enquiry. Our lawful basis is legitimate interest in responding to you. Each enquiry is saved to our database and a copy is also sent to the clinic's inbox by email through a third-party email delivery provider, so we can reply promptly. The clinic can also export its list of enquiries as a spreadsheet file for its own record-keeping.
  • Bookings: appointments are made through our booking portal, operated by a third-party provider under its own privacy policy, presented at the point of booking.
  • Clinical records: health information shared during consultations is special category data, held securely in clinic systems (not on this website) under professional record-keeping standards.

Cookies and similar storage

This website uses strictly necessary storage only. Secure sign-in cookies (names beginning sb-, set by our database provider Supabase) are used solely when the clinic signs in to its private content dashboard; ordinary visitors are never signed in. When you answer our cookie banner, your choice is saved as a single local storage entry named sf-cookie-consent so we don't ask again on every visit. We use no analytics, advertising or tracking cookies. Our Cookie Policy explains each item in full and lets you change your choice.

Where your data lives

Website enquiries are stored securely with our database provider in the UK/EU region. We never sell personal information, and we share it only where the law requires.

How long we keep it

Website enquiries are kept only as long as needed to handle your enquiry and any follow-up, then deleted. Clinical records are retained in line with healthcare record-keeping requirements.

Your rights

  • Access a copy of your information.
  • Ask for corrections or deletion.
  • Object to or restrict processing.
  • Receive the information you gave us in a commonly used, machine readable format (data portability).
  • Withdraw consent at any time where we rely on your consent, without affecting anything done before you withdrew it.
  • Complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.

To exercise any right, email hello@skinformedclinic.com.