How we handle your data.

Who we are

Bare Essence Skin Clinic (trading as Bare Essence) is the data controller for your personal data. We operate from Regent 88, 210 Church Road, Leyton, London, E10 7JQ. For any privacy queries, contact us at hello@bareessenceclinic.co.uk or call 07444 894878.

What we collect

Depending on how you interact with us, we may collect the following:

• Contact details: name, phone number, email address.
• Medical and health history: information relevant to your suitability for electrolysis treatment, including current medications, conditions and previous hair removal treatments. This is "special category" personal data and we handle it with extra care.
• Treatment records: notes on your sessions, treatment areas, machine settings, your skin's response and aftercare advice given.
• Photographs: only where you have given explicit, written consent. Used for treatment records and never published without separate written consent.
• Booking and payment information: appointment times, fees paid. Payments are processed by our payment provider - we do not store full card details.
• Communications: messages exchanged by phone, SMS, WhatsApp or email.
• Website data: anonymous analytics if you accept analytics cookies. No personal identification.

Why we collect it (lawful bases)

• Contract: to provide the service you've asked for - booking, treating and following up.
• Explicit consent: for special category data (your medical and health history) and any photographs.
• Legitimate interests: to maintain treatment records for safety and continuity, and to communicate appointment information.
• Legal obligation: to keep records required by tax, insurance and any applicable regulatory law.

Medical history and treatment records

Because electrolysis is a medical-aesthetic treatment, we take a health questionnaire at consultation and keep notes from each session. These records are essential for your safety - they let us check suitability, track progress and respond appropriately if your skin or health changes between sessions.

These records are kept securely. They are accessed only by Danielle. They are not shared with any third party except where strictly required by law, by your explicit consent (for example sharing with your GP at your request), or where necessary to defend or respond to a legal claim.

How long we keep your data

• Treatment and consultation records: at least 8 years after your last treatment, in line with general guidance for medical-aesthetic records in the UK. After this period, records are securely destroyed.
• Booking and contact data: while you remain a client and for a reasonable period afterwards in case you return.
• Financial records: 6 years, as required by HMRC.
• Marketing-related data: only while you have not opted out.

Who we share data with

We only share your data with carefully chosen processors who help us run the clinic:

• Booking and CRM software (where used).
• Payment processors.
• WhatsApp / Meta, if you choose to contact us via WhatsApp.
• Email and hosting providers.
• Our insurer or legal advisors, only where strictly required.

We do not sell your data to anyone. Ever.

Cookies

We use a small number of essential cookies to make the website work. Anonymous analytics cookies are only set if you accept them. You can change your choice at any time by clearing your browser data for this site. We do not use advertising cookies.

Your rights

Under UK GDPR you have the right to:

• Be informed about how your data is used (this notice).
• Access the data we hold about you.
• Have inaccurate data corrected.
• Have your data erased, subject to legal retention requirements above.
• Restrict or object to processing.
• Data portability (where applicable).
• Withdraw consent at any time for any processing based on consent.

To exercise any of these rights, contact us at hello@bareessenceclinic.co.uk. We respond within one month.

Complaints

We hope you'll come to us first if you have a concern, but you also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Updates

We may update this notice from time to time. The "last updated" date at the top shows when it was last changed. Material changes will be communicated where reasonably possible.