Privacy Statement

We take the protection of your privacy very seriously. We will only use your personal information to deliver the services you have requested from us and to meet our legal responsibilities. This privacy statement explains how we collect and use personal information.

What personal information do we collect?

The personal information we collect from you will vary depending on the services you engage us to deliver. The data we collect and process may include:
  • Personal details such as your name, address, mobile number, email address and date of birth
  • Medical history and prescription details
  • Your occupation and any health risks associated with it
  • Photographs recording the progression of your treatments
  • Details of our interactions with you and the services we have provided to you
  • Transactional information used in the payment of services
  • Testimonials photographs, videos and text which you may have provided and consented for us to use

Where do we collect the information from?

You provide us with your personal information through:
  • Telephone enquiries
  • Consultations
  • Completing questionnaires and forms in clinic and online
  • Submitting to us an onward referral from a third party e.g. your GP / dentist 
  • Online purchasing through our ecommerce store
  • Taking part in marketing surveys or competitions

How do we use your personal information?

Personal information is processed to enable us to provide related services to you.  The purpose for which the personal information is processed may include any or all of the following (the list is non-exhaustive):
  • To deliver services and recall you for maintenance treatments
  • To verify your identity when required
  • To communicate with you by post, email and telephone
  • To deliver telephone / ecommerce orders to your postal address
  • To process financial transactions
  • To maintain records and meet legal responsibilities
All employees with access to your information have a duty of care and confidentiality to protect your information under the regulations we are required to follow. All our employees are vetted through Disclosure Scotland checks.

Who do we share your personal information with?

To provide our services to you, it is sometimes necessary for us with your prior approval, to share your personal information with other individuals and organisations such as:
  • Healthcare professionals outside the company
  • Pharmacists and suppliers providing your prescriptions
  • Financial organisations where you seek to apply for finance to pay for your treatment plans
  • Inspecting regulatory bodies such as Healthcare Improvement Scotland, NMC, GDC etc

How long do we retain your personal information for?

We are required by legislation, other regulatory requirements and our insurers to retain your data even after we have ceased to provide services to you.  The period of retention may vary, but typically is 5-7 years. To ensure compliance with all such requirements it is policy of the firm to retain all data for a period of seven years from the last time we engaged with you.
Data storage is annually reviewed and:
  • Electronic data that has passed its retention period is securely deleted.
  • Paper records that have passed their retention are shredded using a registered and certified confidential service.

Holding personal information outside the EAA

We do not hold confidential personal data outside the EAA.  However, if you subscribed to certain web services, such newsletters or competitions, then your contact details, e.g. email, provided at subscription may be stored outside the EAA depending on the service provider.

Using our website

We use cookies in our website to collect data. Cookies are small text files stored on your computer by your browser. They help us to improve your online experience with our website, typically by keeping track of what is in your online basket and enabling the site to remember you.
To make full use of the online shopping and personalised features on our websites, your computer, tablet or mobile phone will need to accept cookies, as we can only provide you with certain personalised features of this website by using them.
Our cookies don't store sensitive information such as your name, address or payment details: they simply hold the 'key' that, once you're signed in, is associated with this information. However, if you'd prefer to restrict, block or delete cookies from us, or any other website, you can use your browser to do this. Each browser is different, so check the 'Help' menu of your browser (or your mobile phone's handset manual) to learn how to change your cookie preferences.
We use tracking cookies from Google Analytics and Bing to see how we can improve the user experience when using our website.
When you visit our websites you may notice some cookies that aren't related to us. If you go on to a web page that contains embedded content, for example from YouTube, you may be sent cookies from these websites. We don't control the setting of these cookies, so please check the third-party websites for more information about their cookies and how to manage them.
If you take the opportunity to 'share' our web content with friends through social networks – such as Facebook - you may be sent cookies from these websites. We don't control the setting of these cookies, so please check the third-party websites for more information about their cookies and how to manage them.
For impartial information on how to manage cookies visit the Information Commissioner’s Office website.

Your rights

Access to your information – You have the right to request a copy of the personal information about you that we hold.
Correcting your information – We want to make sure that your personal information is accurate, complete and up to date and you may ask us to correct any personal information about you that you believe does not meet these standards.
Deletion of your information – You have the right to ask us to delete personal information about you where:
  • You consider that we no longer require the information for the purposes for which it was obtained.
  • We are using the information with your consent and you have withdrawn your consent.
  • You have validly objected to our use of your personal information.
  • Our use of your personal information is contrary to law or our other legal obligations.

Withdrawing consent to use information

Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given provided:
  • We are not required by regulation or law to maintain what we are doing until a retention period has passed.
  • Should you have entered into a testimonial agreement with us you must have repaid any money due from early termination of the agreement as set out in the agreement.

Objecting to how we use your information

You have the right at any time to require us to stop using your personal information for direct marketing purposes.

Restricting how we may use your information

In some cases, you may ask us to restrict how we use your personal information. This right might apply where there is no longer a basis for using your personal information, but you don’t want us to delete the data. Where this right is validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Automated processing

We do not use automated processes to make decisions that significantly affect you. Should this change we will inform you. Should we in the future use your personal information in such a way you have the right to ask that the decision be reviewed by an individual to whom you may make representations and contest the decision.

Changes to our privacy statement

This privacy statement is regularly reviewed and updated on our website at Paper copies may also be requested from the Privacy Officer.  This privacy statement was last updated on 22/10/2020.

Contact information and further advice

To seek further information, make a request or a complaint please write to Privacy Officer, Skin Clinic (Edinburgh) Ltd, 32 Alva Street, Edinburgh, EH2 4PY.


We seek to resolve directly all complaints about how we handle personal information, but you also have the right to lodge a complaint with the Information Commissioner’s Office, whose contact details are:
  • Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
  • Telephone 030 123 1113
  • Web