Policies
Privacy policy.
In plain English: what we collect, why, how long we keep it, and what you can ask us to do about it.
Who we are
Prive Skin Clinic operates two London locations: 54 Knightsbridge, SW1X 7JN and 1 Harley Street, W1G 9QD. We are the "data controller" for any personal information you share with us.
If you have any questions, contact us at hello@priveskinclinic.com.
What we collect
We only collect what we need to look after you. That typically means:
- Contact information — name, email, phone number
- Clinical history — relevant medical history, medications, allergies, previous treatments
- Treatment records — what we did, when, with what product, and how you responded
- Photographs — before and after images, only with your written consent
- Payments — handled by our payment provider; we don't store full card details
- Website data — basic, non-identifying request logs (IP, browser, time) for security and abuse prevention
Why we collect it
- To deliver your care safely — clinical and medical-history information is essential to treat you
- To get in touch about appointments — confirmations, reminders, aftercare
- To meet our legal and regulatory duties — record-keeping for prescription-only medications, complaints handling
- To improve our practice — anonymised review of outcomes
- To send you news, only if you opt in — and you can unsubscribe at any time
How long we keep it
Medical and treatment records are retained for the period required by UK regulators — currently a minimum of eight years after your last appointment, longer in some circumstances. Marketing-list entries are deleted within thirty days of you unsubscribing. Website logs are deleted within ninety days.
Who else sees it
We share personal information only with parties who help us deliver your care:
- Our partnered GPhC-registered pharmacy, where a prescription is involved
- Our payment provider, for processing card payments
- Our email and scheduling provider, who hold our appointment system on secure UK or EU servers
- Insurers and regulators, only where required by law
We never sell your information. We never share it with third-party advertisers.
Your rights
Under UK GDPR you have the right to:
- Access the information we hold about you
- Correct anything that's wrong
- Ask us to delete what we hold (subject to our regulatory retention duties)
- Restrict how we use it
- Object to a particular use
- Receive a portable copy
- Withdraw consent, where consent is the basis we rely on
To exercise any of these rights, email hello@priveskinclinic.com. If you're not satisfied with our response, you can complain to the Information Commissioner's Office.
Cookies and tracking
We keep our cookie footprint as light as possible. See our cookie policy for details.
Changes to this policy
We update this policy when our practice changes — for example, if we adopt new tools. We'll always show the "last updated" date at the top.