top of page
Homepage
Book a consultation

Privacy Policy

Our Commitment

NG4 3AA. As the 'Data Controller' at Mercia Skin, we safeguard your personal information as required by law. This policy details our data protection practices for website visitors and clients as of 21 May 2026.

Information we hold

We gather and maintain the following categories of data:

    Personal Details: Full name, date of birth, residential address, email, and mobile. Medical Data: Clinical history, allergies, and current medications. This sensitive information ensures your aesthetic safety. Clinic Records: Personalised treatment plans, product dosages, and progress photography. Site Usage: IP addresses and browser details collected via essential and analytical cookies.

Information we hold

We gather and maintain the following categories of data:

  • Personal Details: Full name, date of birth, residential address, email, and mobile.Medical Data: Clinical history, allergies, and current medications. This sensitive information ensures your aesthetic safety.Clinic Records: Personalised treatment plans, product dosages, and progress photography.Site Usage: IP addresses and browser details collected via essential and analytical cookies.

Legal Grounds for Usage

We process your information strictly within the law. Our legal bases are:

  • Contractual: To manage your bookings and provide specialist skincare services.Legitimate Interests: To send relevant appointment alerts and operate our clinic efficiently.Healthcare Provision: Specifically for health-related processing under UK GDPR guidelines.Direct Consent: For marketing communications or featuring your results in our portfolio.

Use of Clinical Images

Photographs form a vital part of your confidential record.

    Clinical Duty: Images are stored securely to track outcomes for insurance purposes. Promotional Use: We only share photos on social media if you provide explicit written consent. This permission can be revoked whenever you choose.

Sharing Data

We never sell your details. We work with trusted partners including:

    Prescription Partners: To facilitate regulated medical treatments like muscle relaxants. Clinic Software: Secure platforms such as Faces or Jane App for digital records. Regulatory Bodies: When legally required to disclose information for professional standards.

Data Retention

As a healthcare provider, we must keep clinical records for insurance and regulatory compliance. We normally store data for 8 to 10 years after your final visit. Once this period concludes, all information is permanently and securely destroyed.

Your Rights

You have the right to:

    Access: Request a digital copy of all data we hold about you. Rectification: Ask us to correction any mistakes in your contact details. Deletion: Request the removal of your data (subject to our legal medical duties). Opt-out: Unsubscribe from our marketing lists at any time.

Contact or Compliment

Please contact our Data Protection Lead via hello@skinclinicnottingham.co.uk with any queries. Mercia Skin is registered with the Information Commissioner’s Office. If you need further assistance, visit www.ico.org.uk to reach the regulator directly.

bottom of page