InJCT SKIN CLINIC LTD

INJCT Skin Clinic LTD
Last updated: January 2026

INJCT Skin Clinic LTD is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

⸻

1. Data Controller

INJCT Skin Clinic LTD is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how your data is handled, please contact us directly.

⸻

2. Personal Data We Collect

We may collect and process the following types of personal data:

• name• address• email address
• telephone number
• date of birth
• medical history and health information
• consultation notes and treatment records
• consent forms
• before-and-after photographs (where consented)
• payment and transaction details
• correspondence and communications

Medical and health information is classified as special category data and is handled with additional care and security.

⸻

3. How We Collect Your Data

We collect personal data when you:

• make an enquiry or booking
• attend a consultation or treatment
• complete medical questionnaires or consent forms
• communicate with us by phone, email, website, or social media
• purchase treatments, courses, or memberships

⸻

4. How We Use Your Data

Your personal data is used to:

• provide safe, appropriate, and effective treatments
• assess medical suitability and maintain accurate clinical records
• manage appointments, courses, and memberships
• communicate regarding appointments, aftercare, and services
• process payments and manage accounts
• comply with legal, regulatory, insurance, and professional obligations

We do not sell or rent your personal data to third parties.

⸻

5. Lawful Basis for Processing

We process your personal data under one or more of the following lawful bases:

• Consent – for medical treatment, marketing communications, and photography
• Performance of a contract – to provide treatments, courses, and memberships
• Legal obligation – to comply with healthcare, tax, and regulatory requirements
• Legitimate interests – for clinic administration and service improvement

⸻

6. Data Storage & Security

All personal data is stored securely using appropriate technical and organisational safeguards.

Access to medical and personal records is restricted to authorised staff only. We take reasonable steps to protect your data from loss, misuse, unauthorised access, or disclosure.

⸻

7. Data Retention

Medical records are retained for the period required by law, professional guidance, and insurance requirements.

Non-medical personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.

Due to legal and clinical obligations, medical records cannot always be deleted upon request.

⸻

8. Sharing Your Data

We may share your data with:

• healthcare professionals involved in your care
• regulatory or professional bodies where required
• payment processors and booking systems
• insurers or legal advisers where necessary

All third parties are required to comply with data protection legislation and handle your data securely.

⸻

9. Marketing Communications

You will only receive marketing communications where you have given consent.

You may withdraw consent or unsubscribe at any time by using the unsubscribe link or contacting the clinic directly.

⸻

10. Your Rights

Under UK GDPR, you have the right to:• access your personal data• request correction of inaccurate or incomplete data• request deletion of data where legally permissible• restrict or object to certain types of processing• withdraw consent where processing is based on consent

Requests can be made in writing to the clinic. Proof of identity may be required.

⸻

11. Photography & Social Media

Clinical photographs may be taken for medical records and treatment assessment.

Photographs used for marketing, education, or social media will only be used with your explicit written consent, which may be withdrawn at any time.
Withdrawal of consent does not affect content already lawfully published prior to withdrawal.

⸻

12. Cookies & Website Data

Our website may use cookies or similar technologies to improve functionality and user experience.

You can manage or disable cookies through your browser settings.

⸻

13. Complaints & ICO

If you have concerns about how your personal data is handled, please contact us in the first instance.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

⸻

14. Changes to This Privacy Policy

INJCT Skin Clinic LTD reserves the right to update this Privacy Policy from time to time.

The most current version will always be available on our website.