Privacy Policy

Bear Skin Aesthetics ("we", "us", "our") is committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what information we collect, how we use it, and the rights you have.

Who we are

Bear Skin Aesthetics is a private aesthetics clinic operated by a registered nurse. For any data protection enquiries please contact us at info@bearskinaesthetics.co.uk.

Information we collect

• Identity data: name, date of birth.
• Contact data: email address, phone number.
• Enquiry data: treatments of interest, messages submitted via our booking and contact forms.
• Clinical data collected in person: relevant medical history, consent forms and treatment records (held securely and separately from the website).
• Technical data: limited information collected by essential cookies and, where you have consented, analytics cookies.

How we use your information

• To respond to booking and consultation enquiries.
• To arrange and deliver treatments safely.
• To maintain accurate clinical records as required by professional standards.
• To comply with our legal and regulatory obligations.

Lawful bases

We rely on the following lawful bases under UK GDPR: your consent (when you submit an enquiry), the performance of a contract (when you become a patient), our legitimate interests (running a safe and ethical clinic), and legal obligations (record keeping required by our professional regulator and applicable law).

How we store your information

Booking enquiries submitted through this website are stored securely within our managed database. Clinical records are kept in line with NMC guidance and current professional retention standards. Access is restricted to the practitioner.

Sharing your information

We do not sell your personal information. Where a treatment requires a prescription, relevant clinical information may be shared with an appropriately qualified independent prescribing professional for the purpose of patient assessment. We may also share information with regulators or law enforcement where we are required to do so by law.

Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these rights please contact us using the details above.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top of the page will always reflect the most recent revision.