Data Privacy and Protection

This privacy policy explains how SKIN SCIENCE BY POPPY LTD ("we", "us", "our") processes personal data in connection with the services provided at our clinic in Tunbridge Wells. We are committed to protecting your privacy and complying with UK GDPR and the Data Protection Act 2018.

Data Controller

The data controller is SKIN SCIENCE BY POPPY LTD, registered in England & Wales No. 17375393, of Flat 3 2 Montacute Gardens, Tunbridge Wells, England, TN4 8HG. You can contact our Data Protection Officer at: [email protected]

Lawful Bases for Processing

We process personal data on the following lawful bases under UK GDPR:

• Consent: Where you have voluntarily given permission for us to process your data for specific purposes, such as marketing communications.
• Contract: Where processing is necessary for the performance of a contract with you, such as booking and delivering a treatment.
• Legitimate Interests: Where processing is necessary for our legitimate interests, such as operating our business and improving our services, provided your rights and freedoms are not overridden.

Categories of Data Collected

We may collect and process the following categories of data:

• Name and contact details (address, phone number where provided, email address)
• Appointment information (date, time, type of treatment)
• Payment and billing information
• Skin type and treatment history notes
• Feedback and correspondence

Cookies

Our website uses cookies to distinguish you from other users and to improve your browsing experience. You can manage cookie preferences through your browser settings. The types of cookies we use are:

• Essential cookies: Required for the website to function correctly.
• Analytics cookies: Help us understand how visitors interact with our website.
• Preference cookies: Remember your settings and preferences.

Data Retention

Personal data is retained only as long as necessary to fulfil the purposes outlined in this policy, including meeting legal obligations, resolving disputes, and enforcing agreements. Specific retention periods are:

• Appointment records: 3 years after the last treatment
• Financial records: 6 years for tax and accounting purposes
• Marketing consent: Until withdrawn by the data subject

Data-Subject Rights

You have the following rights under UK GDPR and the Data Protection Act 2018:

• Access: You may request a copy of your personal data held by us.
• Rectification: You may request that inaccurate data be corrected.
• Erasure: You may request that your data be deleted, subject to exceptions.
• Restriction: You may request that we restrict processing of your data.
• Portability: You may request that your data be transferred to another controller in a machine-readable format.
• Objection: You may object to processing of your data for direct marketing purposes.

Right to Complain to the ICO

If you have a concern about how your data is processed, you have the right to complain to the Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by telephone on 0303 123 1113.

Contact

If you have questions about this privacy policy or wish to exercise your data-subject rights, please contact us at:

[email protected]
SKIN SCIENCE BY POPPY LTD
Flat 3 2 Montacute Gardens
Tunbridge Wells, England, TN4 8HG