Privacy & Cookie Policy
Last Updated: July 2026
1. Privacy Policy
Welcome to the SKIN CARD Clinic Privacy Policy. We respect your privacy and are committed to protecting your personal data. This privacy policy informs you as to how we look after your personal data when you visit our website and tells you about your privacy rights and how the law protects you.
Important Information and Who We Are
SKIN CARD Clinic is the data controller and responsible for your personal data.
- Company Name: SKIN CARD Clinic Ltd
- Company Registration Number: 17267149 (Registered in England and Wales)
- Email Address: [email protected]
- Treatment Clinic Address: House of Ell HQ, Regent Works, Lawley Street, Longton, Stoke-on-Trent, ST3 1LZ
- Data Protection Registration: We are registered with the Information Commissioner's Office (ICO).
The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, including:
- Identity Data: First name, last name, date of birth.
- Contact Data: Email address, telephone numbers, billing address.
- Special Category (Health) Data: Medical histories, skin conditions, allergies, and treatment notes required to safely perform clinical facials, microneedling, and chemical peels.
How Your Data is Collected and Stored
To ensure maximum security, your clinical consultation data, treatment plans, and medical histories are securely captured and stored electronically using the Faces app. Faces acts as our data processor, storing this data securely on encrypted cloud servers. We do not store local digital copies of your medical consultation forms on our personal devices.
Data Retention & Legal Rights
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or clinical insurance requirements (medical treatment records are typically held for a minimum of 7 years post-treatment).
Under UK data protection laws, you have rights including the right to access, correct, or erase your personal data, object to or restrict processing, and request data porting.
2. Cookie Policy
Cookies are small text files that are placed on your computer or mobile device when you browse websites. The cookies used directly by this site are strictly necessary. There is one optional exception, the embedded map on our "Find the Clinic" section, which you can choose to accept or reject using the consent banner shown on your first visit.
The Cookies We Use
- Necessary Cookies: These cookies are essential for the website to function properly, enabling basic features like page navigation. The website cannot function properly without them.
Note: Our hosting provider, Cloudflare, places strictly necessary routing and security cookies (such as the __cf_bm cookie) to protect the site from malicious bot traffic and ensure the network performs reliably.
- Embedded Map Cookies (optional): Our "Find the Clinic" section shows a map so you can see our location. By default, and if you reject, this is a cookie-free OpenStreetMap embed. If you accept, we instead show an interactive Google Maps embed, which may set cookies belonging to Google, used for Google's own purposes including analytics and advertising. This is outside of our control — please refer to Google's own privacy policy for details.
Analytics
We use Cloudflare Web Analytics to understand site traffic. It is cookieless — it does not use cookies or any other client-side storage to track visitors — though it does process technical data such as IP address and browser type, which is why it's disclosed here. No consent is required for this, as no cookie or similar tracking technology is used.
You can change your map cookie choice at any time by clearing this site's data in your browser settings and reloading the page, which will show the consent banner again. You can also control or delete cookies generally through your own browser settings, though doing so may affect how parts of the site function (such as the interactive map).
3. Contact Form Submissions
When you submit an enquiry through our Contact page, the name, email address, and message you provide are sent to us using Web3Forms, a third-party form processing service that acts as our data processor solely to deliver your enquiry to our clinic inbox. Web3Forms retains a copy of each submission for a maximum of 30 days for spam-prevention and delivery-reliability purposes, after which it is automatically and permanently deleted from their systems. We do not use Web3Forms to store your data beyond this window.
For further detail on how Web3Forms handles data, please refer to their own privacy policy.
