InJCT SKIN CLINIC LTD

Last updated: Octobor  2026

INJCT Skin Clinic LTD is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.INJCT Skin Clinic LTD is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

⸻

1. Data Controller

INJCT Skin Clinic LTD is responsible for determining how and why personal data is processed for the activities covered by this Privacy Policy, where applicable.INJCT Skin Clinic LTD is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how your data is handled, please contact us using the verified contact details published on our website.If you have any questions about this Privacy Policy or how your data is handled, please contact us directly.

Email: hello@injctskinclinic.com
Business address: Building 70, Suite 19, Churchill Square Business Centre, Kings Hill, West Malling ME19 4YU
‍
⸻

2. Personal Data We Collect

Depending on how you interact with us, we may collect and process the following types of personal data:We may collect and process the following types of personal data:

• name
• address
• email address
• telephone number
• date of birth
• medical history and health information
• consultation notes and treatment records
• medical questionnaires and consent forms
• clinical and before-and-after photographs, where appropriate
• payment and transaction details
• booking, course, and membership information, where applicable
• correspondence and communications

Medical and health information is classified as special category data under UK GDPR and requires an appropriate lawful basis and additional protection.Medical and health information is classified as special category data and is handled with additional care and security.

⸻

3. How We Collect Your Data

We collect personal data when you:

• make an enquiry or booking
• attend a consultation or treatment
• complete medical questionnaires or consent forms
• communicate with us by phone, email, website, or social media
• purchase treatments, courses, or memberships, where available
• interact with our website, including through cookies or similar technologies where used

⸻

4. How We Use Your Data

Your personal data is used to:

• assess treatment suitability and support safe, appropriate care
• maintain accurate consultation, treatment, and clinical records
• manage appointments, courses, and memberships
• communicate regarding appointments, aftercare, and services
• process payments and manage accounts
• respond to enquiries, complaints, and requests
• comply with applicable legal, regulatory, insurance, and professional obligations
• administer and improve our services and website


We do not sell your personal data to third parties.

⸻

5. Lawful Basis for Processing

• Consent – where consent is the appropriate basis, such as for certain marketing activities or optional uses of photographs
• Performance of a contract – where processing is necessary to provide treatments, courses, or memberships, or to take steps at your request before entering into a contract
• Legal obligation – where processing is necessary to comply with applicable legal requirements
• Legitimate interests – where applicable, for clinic administration and service improvement, provided your rights and interests are considered
• Special category data – an additional condition under UK GDPR must apply when processing health information

The appropriate lawful basis and any additional condition depend on the specific processing activity.

⸻

6. Data Storage & Security

We take appropriate technical and organisational measures intended to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure.

Access to medical and personal records should be restricted to authorised individuals who need the information for legitimate work-related purposes.

No method of electronic storage or transmission is completely secure. We review our safeguards in line with our responsibilities and applicable requirements.
‍
⸻

7. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, taking account of applicable legal, professional, regulatory, and insurance requirements.

Different categories of information may need to be retained for different periods.

Medical records may be subject to specific retention requirements and cannot always be deleted immediately upon request.

When personal data is no longer required, it will be securely deleted or otherwise disposed of in accordance with our applicable retention procedures, unless a lawful reason requires further retention.

⸻

8. Sharing Your Data

Where necessary and lawful, we may share relevant personal data with:

• healthcare professionals involved in your care
• booking and practice-management systems
• payment processors
• insurers or legal advisers where necessary
• regulatory or public authorities where disclosure is legally required
• other service providers supporting the clinic's operations, where appropriate

We aim to share only the information needed for the relevant purpose. Appropriate contractual and security arrangements will be used with service providers where required.All third parties are required to comply with data protection legislation and handle your data securely.

⸻

9. Marketing Communications

We will send marketing communications only where we have the necessary permission or another lawful basis permitted by applicable law.

You may opt out of marketing communications at any time by using the unsubscribe facility, where available, or by contacting the clinic directly.

Opting out of marketing will not affect necessary service communications, such as appointment confirmations or treatment-related information.You will only receive marketing communications where you have given consent.

⸻

10. Your Rights

Depending on the circumstances and applicable law, you may have the right to:

• access your personal data
• request correction of inaccurate or incomplete data
• request deletion of data where the legal conditions are met
• request restriction of certain processing
• object to certain types of processing
• request data portability where the right applies
• withdraw consent where processing is based on consent
• lodge a complaint with the Information Commissioner's Office (ICO)

These rights are subject to applicable legal conditions and exemptions. Certain clinical records may need to be retained where there is a valid legal or other basis to do so.

Requests can be made using the clinic's verified contact details. Proof of identity may be required.



⸻

11. Photography & Social Media

Clinical photographs may be taken where appropriate for treatment assessment, planning, or clinical record-keeping.

Photographs used for marketing, education, or social media will be handled separately from clinical record-keeping. We will identify the appropriate lawful basis and obtain consent where required before using photographs for these purposes.

Where marketing use relies on consent, you may withdraw that consent for future use. Withdrawal cannot always reverse publication or distribution that has already lawfully taken place, but we will consider appropriate steps in response to your request.

⸻

12. Cookies & Website Data

Our website may use cookies or similar technologies to support functionality, understand website usage, or provide other features, depending on the technologies enabled.

Where required, non-essential cookies or similar technologies will be used in accordance with applicable consent requirements.

You may be able to manage cookie preferences through a website cookie control, where available, and through your browser settings. Disabling certain cookies may affect some website functions.

⸻

13. Complaints & ICO

If you have concerns about how your personal data is handled, please contact the clinic first so that we can review your concern.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

https://ico.org.uk/

⸻

14. Changes to This Privacy Policy

INJCT Skin Clinic LTD may update this Privacy Policy when our data-handling practices, services, or applicable legal requirements change.

The latest version will be published on our website with its actual review or update date. We encourage you to review this page periodically to understand how your personal data is handled