FFFACE TO FACESKINCARE & AESTHETICS

Clinic Policies

Privacy Policy

Effective date: October 2026 · Last reviewed: October 2026

1. Introduction

This policy explains how Face to Face Skincare and Aesthetics Clinic collects, uses, stores and shares personal information when you contact us, enquire about or receive treatments, book appointments, or use our website. We aim to handle personal information lawfully, fairly and securely. Please read this policy alongside any treatment-specific consent forms and privacy information we provide to you.

2. Who is responsible for your information?

The contact for privacy matters is Jenny Harvey Andrews RGN at Face to Face Skincare and Aesthetics Clinic, Oathall House, 70 Oathall Road, Haywards Heath, West Sussex, RH16 3EN.

3. Information we may collect

  • Contact and identity details, such as your name, address, telephone number and email address.
  • Appointment, enquiry and payment-related information, including booking history and transaction details. We do not intend to store full payment-card details ourselves.
  • Health and treatment information relevant to assessing suitability, providing care, managing risks and maintaining clinical records. This may include medical history, allergies, medicines, treatment notes and relevant photographs.
  • Communications with you, including emails, messages, feedback and complaints.
  • Website and technical information, such as device, browser, log or cookie information, where collected by the website or its tools.

4. How we use information

We may use your information to respond to enquiries, manage bookings, assess treatment suitability, provide and follow up treatment, maintain accurate records, process payments, manage complaints, meet legal or professional obligations, protect the safety of clients and staff, and improve our services. We will use information for marketing only where permitted by law and, where required, with your consent. You can opt out of marketing at any time.

5. Lawful bases for processing

Under UK data protection law, we must have a lawful basis for using personal information. Depending on the circumstances, this may include taking steps at your request before a contract, performing a contract, complying with a legal obligation, legitimate interests, consent, or protecting vital interests. Health information is special category data and requires an additional condition for processing. Depending on the purpose and circumstances, this may include provision of health care or treatment, explicit consent, or another condition permitted by law. The clinic should document the specific bases and conditions that apply to its actual

activities.

6. Clinical photographs and before-and-after images

Photographs may be taken where appropriate for clinical assessment, treatment planning, monitoring results or maintaining your clinical record. We will explain the purpose and obtain appropriate agreement before taking photographs. Using identifiable photographs or treatment results for advertising, social media, the website or other promotional purposes is separate from clinical record-keeping. We will ask for separate, informed permission where required, and declining promotional use will not affect your access to treatment.

7. Who we may share information with

We may share relevant information with healthcare professionals involved in your care, clinical software or booking providers, payment providers, IT and website providers, professional advisers, insurers, or public authorities and regulators where appropriate or legally required. We aim to share only information that is necessary for the relevant purpose. Service providers who process information on our behalf should be subject to appropriate contractual and security arrangements.

8. International transfers

Some providers may store or access information outside the United Kingdom. Where this occurs, we will take steps required by data protection law to ensure an appropriate level of protection, such as relying on an adequacy regulation or using approved safeguards. This section should be checked against the clinic’s actual providers and systems.

9. Security

We use appropriate organisational and technical measures intended to protect personal information from unauthorised access, loss, misuse or disclosure. No method of electronic storage or transmission is completely secure, but we take reasonable steps to protect the information we hold.

10. How long we keep information

We keep information only for as long as reasonably necessary for the purposes for which it was collected, including clinical care, record-keeping, legal obligations, handling complaints and resolving disputes. Retention periods can differ according to the type of record and applicable professional or legal guidance.

11. Cookies and website analytics

Our website may use essential cookies and, depending on the configuration, analytics or other optional cookies and similar technologies. Non-essential cookies should only be used in accordance with applicable consent requirements. Please consult the website’s cookie banner and settings for current choices. This section should be tailored to the actual website platform, analytics, advertising and embedded services in use.

12. Marketing

We may send service-related communications about appointments or treatment. We will send electronic marketing only where permitted by applicable law. You can ask us to stop marketing at any time by using an unsubscribe option where available or contacting us at Info@facetofaceskincare.co.uk.

13. Your data protection rights

Depending on the circumstances and subject to legal exemptions, you may have the right to request access to your personal information, correction of inaccurate information, erasure, restriction of processing, objection to processing, or data portability. Where processing relies on consent, you can withdraw that consent; this will not affect processing already carried out lawfully. To exercise a right, contact us using the details below. We may need to verify your identity before responding.

14. Questions or concerns

If you have a question or concern about how we use your information, please contact Jenny Harvey Andrews RGN at Info@facetofaceskincare.co.uk or on 07340038605. You can also complain to the UK Information Commissioner’s Office (ICO). Guidance and complaint options are available at https://ico.org.uk/make-a-complaint/.

15. Third-party websites

Our website may contain links to third-party websites or services. Those organisations have their own privacy practices, and we are not responsible for their policies. Please review their privacy information when using their services.

16. Children and young people

Our services are intended to be provided in accordance with applicable age, consent and safeguarding requirements. Where information about a child or young person is processed, we will take account of the relevant legal and professional requirements.

17. Changes to this policy

We may update this policy from time to time. The latest version will be made available on our website or on request, with the review date shown at the top.

18. Contact us

Jenny Harvey Andrews RGN Face to Face Skincare and Aesthetics Clinic Oathall House, 70 Oathall Road, Haywards Heath, West Sussex, RH16 3EN Email: Info@facetofaceskincare.co.uk Telephone: 07340038605