Privacy policy

Who we are

Skin Life Laser & Aesthetic Clinic is run by Skin Life Ltd, a company registered in England (company number 10592551). Our clinic and registered office are at 22 Lisson Grove, London NW1 6TT.

Skin Life Ltd is the data controller for the information described on this page. That means we decide how it is used and we are responsible for looking after it.

If you have any question about your information, email contact@skinlifeaesthetic.com, call 07593 301148 or write to us at the address above.

The information we collect

When you send us a message

If you use the contact form, email us, call or message us on WhatsApp, we receive your name, your contact details and whatever you choose to tell us. Messages sent through the contact form go straight to the clinic’s email. They are not stored on the website.

When you fill in the consultation form

The consultation form asks for your name, your contact details, the treatment you are interested in and, if you choose to answer them, a few health questions. Filling it in is optional.

The law gives health information extra protection, so we only use it with your agreement, which you give by ticking the box on the form. Your answers are stored securely on this website, where only clinic staff who are signed in can read them. We also receive an email telling us that a form has arrived. That email does not contain your health answers.

When you book

Online booking is provided by Phorest, the booking system we use in the clinic. When you book, Phorest collects your name, your contact details and the appointment you choose. Any card payment made while booking is handled by Phorest and its payment provider. This website never sees or stores card details. You can read Phorest’s privacy policy on its website.

When you buy from our shop

When you order from our online shop, we ask for your name, your email address and your billing address, and for a phone number if you want to give one. If you ask us to post your order, we also ask for the address to send it to, and we give your name and that address to the delivery company so that it can deliver the parcel. We use these details to prepare your order, to send your receipt, to tell you when the order is ready to collect or has been posted, and to keep the records that tax law requires. Orders are stored on this website, where only clinic staff who are signed in can see them.

Payment is taken by PayPal, whether you pay by card, with a PayPal account, with Apple Pay or Google Pay, or pay later through PayPal. Your card details go straight to PayPal. This website never sees or stores them. PayPal tells us whether the payment went through, so that we can match it to your order. PayPal’s privacy statement explains how it uses your information.

You do not need an account to buy. If you choose to create one, the website also keeps a password for you, stored in a scrambled form that nobody can read, so that you can sign in and see your orders.

When you ask to buy a ZO Skin Health product

ZO Skin Health products are sold only after a short check by the clinic. The form asks for your name, your contact details and a few questions about your health and skincare. The law gives health information extra protection, so we only use it with your agreement, which you give by ticking the box on the form. Your answers are stored securely on this website, where only clinic staff who are signed in can read them, and they are not sent by email. We use them only to decide whether the product is suitable for you.

If we approve your request and you do not yet have an account, we create one for you so that you can buy the product, and we email you a link to choose your password. If we cannot offer you the product, we may email you to explain why.

When you become a client

When you have a treatment with us, we keep a client record in Phorest. It holds your contact details, your appointments and purchases, your consultation and consent forms, the medical history you give us, notes on your treatments and any photographs taken to record them.

Photographs and videos on this website

We only publish a before-and-after photograph or a video with the consent of the person shown. If that is you, you can withdraw your consent at any time and we will remove it.

When you browse this website

Like most websites, the computer that hosts ours keeps a short-term record of visits for security and fault-finding. It records the internet address (IP address) of the device, the pages requested, the time and the type of browser. We do not use this to identify you.

We also count visits, so that we can see which pages are useful and how people find us. For each visit the website records the page, the date and how the visit began (for example a Google search, Instagram, or one of our adverts), and it counts how often buttons such as Book, WhatsApp and Call are pressed. If you place a shop order, the order also notes how that visit began. The counts are kept on this website for up to three years. They are not shared with any other company and they are not used for advertising.

Counting visits does not record who you are. To avoid counting the same visitor twice in one day, the website makes a short code from your device’s internet address and browser type, mixed with a random key. The key and the codes are deleted every night, so a visit on one day cannot be linked to a visit on another. To remember how your visit began on the pages you open afterwards, the website saves one small cookie, described in the Cookies section below. You can ask not to be counted at all in that section.

Cookies

Cookies are small files that a website can save on your device. Browsing this website saves one cookie of our own, called sl_src. It holds the name of the place your visit began, such as “Google search”, and the time, so that our visit counts can show which sources are useful. It holds nothing about you, it is not shared with anyone, and it is removed when you close your browser.

If you would rather not be counted at all, press the button below. Your choice is remembered on this device for a year by a single cookie called sl_nostats, which holds nothing but that choice.

Do not count my visits

Advertising and analytics from other companies

We ask before using any of the following, in the banner shown on your first visit. If you do not agree, none of them is loaded.

• Statistics. Google Analytics records which pages are visited, roughly where visitors are, and how they found us. Its cookies (names beginning _ga) last up to two years.
• Advertising, Meta. The Meta pixel tells Meta, which runs Instagram and Facebook, which pages you open and whether you press Book, send an enquiry or place an order, so that we can see which adverts work and show our adverts to people who have visited. Its cookies (_fbp, _fbc) last up to 90 days. If you came from one of our Instagram or Facebook adverts, its reference number is passed to our booking form in the same way.

These companies may process the information outside the UK. We never send them your name, your contact details, anything you type into a form, or what is in a consultation or ZO request. Your answer is remembered for six months in a cookie called sl_consent, and you can change it at any time:

Change my cookie choices

Cookies the shop needs

When you add something to your basket, the website saves cookies and similar small files on your device to remember what is in it. The basket is forgotten after two days if you do not order. If you create an account and sign in, cookies keep you signed in. The shop cannot work without these.

The basket and checkout pages show PayPal’s payment buttons and card form. PayPal saves its own cookies on those pages to take your payment and to guard against fraud.

Other companies’ services on our pages

The booking page shows Phorest’s booking system inside our page, and Phorest uses its own cookies to make booking work.

The map on our contact page is provided by Google. When the map appears, your browser fetches it from Google, so Google sees your device’s internet (IP) address. Google’s privacy policy explains how it uses that.

Our pages link to Instagram, Facebook, TikTok, WhatsApp and Google. Those services only receive information about you if you follow a link, and their own privacy policies then apply.

Why we use your information

Data protection law only lets us use personal information when we have a proper reason. These are ours.

• To reply to you. It is in our legitimate interests, and yours, to answer people who contact us.
• To arrange and carry out your appointments, supply the products you order and take payment. This is needed for our contract with you.
• To check that a treatment or product is suitable and to treat you safely. This uses health information, and we rely on your explicit consent.
• To keep business, tax and treatment records. The law and our insurers require this.
• To send you offers and news by email or text. We only do this if you have agreed. You can stop at any time by using the link in a message or by telling us.
• To keep this website and our systems secure. It is in our legitimate interests to prevent misuse.
• To count visits to this website. It is in our legitimate interests to see which pages people find useful, so that we can improve them. The counts do not identify you, and you can opt out in the Cookies section above.

Who we share it with

We never sell your information.

A small number of companies help us run the clinic. They handle information only on our instructions.

• Phorest, for bookings, client records and the emails and texts we send to clients
• Krystal Hosting, a UK company, which hosts this website
• Cloudflare, which carries visits to this website and protects it from attacks
• PayPal, which takes payment for orders from our shop
• Our email provider, for messages sent to and from the clinic

We may also share information when the law requires it, with our insurers or professional advisers if there is a complaint or a claim, or with a medical professional in an emergency.

Where your information is kept

This website is hosted in the United Kingdom. Some of the companies we use may store or handle information outside the UK. Where that happens, they are required to protect it to the standard that UK law demands.

Your rights

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that is wrong or out of date
• ask us to delete your information
• ask us to limit how we use it, or object to our using it
• ask us to pass your information to you or to another provider
• withdraw your consent at any time, for example for health information, marketing messages or a photograph

To use any of these rights, contact us using the details at the top of this page. There is no charge. We may need to check your identity first, and we will reply within one month. Some rights only apply in certain circumstances, and if we cannot do what you ask we will explain why.

If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Keeping your information safe

Every page of this website uses a secure (https) connection, and consultation forms can only be read by clinic staff who are signed in. No way of sending information over the internet is completely secure, so please do not send card details or detailed medical information by ordinary email.

If your information were ever lost, or seen by someone who should not have seen it, in a way that put you at risk, we would tell you and the Information Commissioner’s Office without delay, and within 72 hours where the law requires it.

Under 18s

Our treatments and this website are for adults aged 18 and over. We do not knowingly collect information from anyone under 18.

Changes to this policy

We will update this page when we change how we handle information. The date at the top shows when it was last changed.