Privacy Policy
Effective Date: July 23, 2025
1. Introduction
Welcome to The Dermatician Ltd. (“we,” “us,” “our”). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our website, book our services, or otherwise interact with us.
The Dermatician Ltd. is the data controller responsible for your personal data.
2. The Data We Collect
We may collect and process the following categories of personal information about you:
Identity Data: Includes your first name, last name, and title.
Contact Data: Includes your email address, telephone number, and billing address.
Special Category (Health) Data: Includes information about your skin concerns, conditions (such as rosacea, eczema, acne), allergies, lifestyle, and general health that you provide during consultations. We only collect this with your explicit consent.
Financial Data: Includes payment card details, which are processed securely by our third-party payment processors and are not stored by us.
Transaction Data: Includes details about payments to and from you and details of the services you have purchased from us.
Technical Data: Includes your internet protocol (IP) address, browser type and version, time zone setting and location, and other technology on the devices you use to access this website.
Usage Data: Includes information about how you use our website and services.
3. How We Use Your Personal Data & Our Legal Basis
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances and on the following legal bases:
| Purpose of Processing | Type of Data | Legal Basis for Processing |
| To register you as a new client. | Identity, Contact | Performance of a contract with you. |
| To provide our skincare consultation services. | Identity, Contact, Special Category (Health) | Performance of a contract. For Health Data, we rely on your explicit consent. |
| To process payments for our services. | Identity, Contact, Financial, Transaction | Performance of a contract and our legitimate interests. |
| To manage our relationship with you. | Identity, Contact, Transaction | Performance of a contract and our legitimate interests (to improve our services). |
| To operate and improve our website. | Technical, Usage | Our legitimate interests (to keep our website updated and relevant). |
| To comply with a legal or regulatory obligation. | Identity, Contact, Transaction | Compliance with a legal obligation. |
We will only use your Special Category (Health) Data to provide our consultation services and with your explicit consent, which you will be asked for at the start of our consultation process.
4. Data Sharing and Third Parties
We do not sell your personal data. We may have to share your data with trusted third parties to provide our services, including:
Service Providers: such as website hosting services, booking and scheduling platforms, and IT support.
Payment Processors: to securely handle payments.
Professional Advisers: including lawyers, accountants, and insurers who provide consultancy, banking, legal, and accounting services.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
5. International Transfers
Some of our external third-party providers may be based outside the United Kingdom (UK). Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring that appropriate safeguards, such as the UK’s Standard Contractual Clauses, are in place.
6. Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees and third parties who have a business need to know.
7. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.
8. Your Legal Rights
Under UK data protection law, you have rights regarding your personal data, including the right to:
Request access to your personal data.
Request correction of the personal data that we hold about you.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing of your personal data.
Request the transfer of your personal data to you or to a third 5party.
Withdraw consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us.
9. Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy.
10. How to Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact our Data Protection representative in the following ways:
Full name of legal entity: The Dermatician Ltd.
Email address:
info@thedermatician.comPostal address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
11. Changes to This Privacy Policy
We may update this policy from time to time. The latest version will always be posted on this page.