Privacy Policy

Privacy Policy for Anna Skin Clinic
Last Updated: July 2026

1. Introduction

Welcome to Anna Skin Clinic. We respect your privacy and are committed to protecting your personal data. This privacy notice will inform you how we look after your personal data when you visit our website (https://annaskinclinic.co.uk/), enquire about our services, or visit our clinic for treatments, and explain your privacy rights and how the law protects you.

2. Who We Are

Anna Skin Clinic is the data controller and is responsible for your personal data.

Contact Details:

Anna Zamczyk Skin Clinic Ltd
info@annaskinclinic.co.uk
32 Crymlyn Gardens, Skewen, Neath, SA10 6EU
044 7479 687014

3. The Data We Collect About You

We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:

Identity Data: First name, last name, title, and date of birth.
Contact Data: Billing address, email address, and telephone numbers.
Health and Medical Data (Special Category Data): Medical history, current medications, allergies, and treatment records. We require explicit consent to collect this to ensure treatments are safe and appropriate.
Financial Data: Payment card details (processed securely via our payment providers).
Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences, including data collected via social media lead forms (e.g., Meta/Facebook, Instagram, HubSpot).

4. How Is Your Personal Data Collected?

We use different methods to collect data from and about you, including through:

Direct interactions: You may give us your Identity, Contact, and Health Data by filling in forms (online or in-clinic), or by corresponding with us by post, phone, email, social media, or otherwise.
Third parties or publicly available sources: We may receive contact data from social media platforms like Meta (Facebook/Instagram, HubSpot) when you interact with our advertisements and submit a lead form.

5. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Performance of a Contract: To register you as a new client, process your payments, and deliver aesthetic treatments.
Legal Obligation: To comply with medical and insurance record-keeping requirements.
Legitimate Interests: To follow up on enquiries submitted via our website or social media ads, and to run our business properly.
Consent: We rely on your explicit consent to process your Health Data for treatment purposes and to send you direct marketing communications via email or text message. You have the right to withdraw consent to marketing at any time.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to your personal data (especially sensitive health records) is limited to those employees, agents, and contractors who have a business need to know.

7. Data Retention

We will retain your personal data only for as long as reasonably necessary to fulfil the purposes for which we collected it. By law and for insurance purposes, we are required to retain basic information about our clients (including Contact, Identity, Financial, and Medical Records) for 7 years after they cease to be clients.