Privacy Policy

Last updated: 24 September 2026

1. Who we are

Clear Skin Clinic Bradford Ltd ("we", "us") is the data controller for the personal data described in this policy.

43 Darley Street, Bradford, BD1 3HN
Telephone: 01274 630006
Email: shameem@clearskinclinic.co.uk

2. What we collect

• Contact details — your name, telephone number and email address.
• Appointment information — the treatments you book, and when.
• Health information — medical history, medication, allergies, consultation notes, patch test records, consent forms and, where relevant, clinical photographs. This is special category data under UK GDPR and is treated with additional protection.
• Enquiry messages — anything you choose to tell us through the contact form, by phone, or by email.

With your consent, this website uses Google Analytics to produce aggregated information about website use. We do not use advertising or profiling tools — see our Cookie Policy.

3. Why we use it, and our lawful basis

We will never use your clinical photographs publicly without your separate, explicit, written consent, and you may withdraw that consent at any time.

4. Who we share it with

• Booksy — our online booking provider, which processes your contact and appointment details under its own privacy policy.
• Google — only if you choose to load the map on our contact page. Google is based in the United States; such transfers rely on the UK International Data Transfer Addendum.
• Google Analytics — only if you accept analytics cookies. Google processes limited online identifiers and usage data to provide website analytics.
• Netlify — hosts this website and securely processes contact-form submissions on our behalf.
• Hostinger — provides our business email service and stores messages sent to the clinic inbox.
• Insurers and legal advisers — only where necessary to establish or defend a legal claim.
• Medical professionals — only with your knowledge, for example a referral.

We do not sell your data, and we do not share it for advertising.

5. How long we keep it

• Adult clinical records — retained for at least 8 years after your last treatment, in line with recognised guidance for medical and aesthetic records.
• Records for patients under 18 — retained until their 25th birthday.
• Enquiries that do not lead to treatment — up to 12 months.
• Consent records for photography — kept for as long as the images are in use, and for 8 years afterwards.

6. Keeping it secure

Clinical records are held securely with access limited to the treating practitioner. This website is served over HTTPS and applies a strict content security policy. Because we hold health data, we take particular care over storage, backup and disposal.

7. Your rights

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you
• Have inaccurate data corrected
• Ask us to delete your data, where we are not required to keep it
• Ask us to restrict how we use it
• Object to processing carried out on the basis of legitimate interests
• Receive your data in a portable format
• Withdraw consent at any time, where we relied on consent

To exercise any of these, contact us using the details in section 1. We will respond within one month. There is no charge.

8. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or on 0303 123 1113.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.