PRIVACY POLICY
Last updated: October 2026
At Dermabright Aesthetics, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how we protect it and what rights you have.
1. Who We Are
Dermabright Aesthetics is responsible for the personal information we collect and use in connection with our website, appointments, skin consultations, treatments and skincare products.
Contact details
Dermabright Aesthetics
1B Brockhampton Lane, Havant, PO9 1LU
Email: hello@dermabrightaesthetics.co.uk
Website: www.dermabrightaesthetics.co.uk
2. What Information We Collect
Depending on how you interact with us, we may collect the following information:
Personal and contact information
Your name, email address, telephone number, address and date of birth, where required.
Health and skin information
Information about your medical history, medications, allergies, skin conditions, previous treatments, skin assessments and treatment notes. We use this information to assess treatment suitability and help provide appropriate services.
Photographs
Photographs taken for clinical records, skin assessments, treatment progress and before and after comparisons.
Booking and payment information
Appointment details, purchase history, payment records, deposits and refunds. Payments may be processed by third party payment providers.
Marketing information
Your marketing preferences, records of consent and information about whether you have agreed to receive promotional communications or allow photographs to be used in marketing.
Website information
Technical information may be collected when you visit our website, such as your IP address, browser information and how you interact with the website, depending on the website features and technologies in use.
3. How We Use Your Information
We use personal information where necessary to:
• Manage appointments, consultations and bookings.
• Assess treatment suitability and provide skincare treatments.
• Maintain appropriate client records and treatment notes.
• Recommend appropriate skincare products and treatment plans.
• Process payments, deposits, refunds and product purchases.
• Respond to enquiries, feedback and complaints.
• Manage our business, accounting and legal obligations.
• Send marketing communications where permitted.
• Use clinical photographs to monitor skin progress and treatment outcomes.
• Use photographs in marketing or promotional materials where you have given separate permission.
4. Health Information and Confidentiality
Health information is sensitive personal information and receives additional protection under data protection law.
We collect relevant health and skin information to help assess your suitability for treatments, identify potential contraindications, plan appropriate services and maintain accurate client records.
We treat client information confidentially and take steps to protect it from unauthorised access, use or disclosure.
We only share health information where there is an appropriate lawful basis or other valid legal justification, such as where you have given appropriate permission or disclosure is required or permitted by law.
If you do not provide information necessary to assess your suitability for a treatment, we may be unable to proceed with that treatment.
5. Clinical Photographs and Marketing Consent
Photographs may be taken as part of your clinical records or to monitor treatment progress.
Clinical photography and marketing photography are treated separately. Permission to use your photographs for marketing is optional and is not a condition of receiving treatment.
We will seek your separate permission before sharing identifiable photographs in marketing materials, on our website or on social media. We will also check with you before sharing photographs publicly.
You can decline marketing photography without affecting your treatment. If you have previously given permission and wish to withdraw it, please contact us. Withdrawal will not affect processing that has already taken place lawfully, although we will stop future use where applicable and take reasonable steps to address existing uses where appropriate.
6. Our Lawful Bases for Using Personal Information
UK data protection law requires us to have a lawful basis for collecting and using personal information.
Depending on the purpose, we may rely on:
Contract: Where information is necessary to manage a booking, provide a treatment or fulfil a product purchase.
Legal obligation: Where information must be processed or retained to comply with the law.
Legitimate interests: Where using information is necessary for appropriate business administration, managing enquiries, maintaining records or handling complaints, provided our interests do not override your rights and interests.
Consent: Where you have given permission for a specific use of your information, such as certain marketing activities or the promotional use of photographs.
Where we process health information, we must also meet an additional legal condition for using special category data. We will only process this information where the applicable requirements under data protection law are met.
Where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
7. Marketing Communications
We may use your contact details to send information about our treatments, skincare products, offers or clinic updates where permitted by law.
You can opt out of marketing communications at any time by using the unsubscribe option where available or contacting us at hello@dermabrightaesthetics.co.uk.
Opting out of marketing will not prevent us from sending essential messages about your bookings, appointments or services.
We do not make marketing consent a condition of receiving treatment.
8. Who We Share Your Information With
We may share relevant personal information with trusted third parties where necessary to operate our business, including:
Booking and client management providers, to manage appointments and relevant client records.
Website hosting and management providers, to operate our website and handle enquiries.
Payment processing providers, to process payments, deposits and refunds.
Professional advisers, such as accountants or legal advisers, where necessary.
Authorities or other organizations, where we are legally required or permitted to share information.
These organizations may process personal information on our behalf or for their own lawful purposes, depending on the service they provide and their role.
We do not sell your personal information to third parties.
Where we use third party providers, we take reasonable steps to ensure that personal information is handled appropriately.
9. International Data Transfers
Some of our service providers may store or process information outside the United Kingdom.
Where personal information is transferred internationally, we will take the steps required by applicable data protection law to ensure that appropriate safeguards are in place.
If you would like further information about international transfers relevant to your information, please contact us using the details above.
10. How We Protect Your Information
We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.
Access to client information is restricted to what is necessary for business and service purposes. Where we use third party providers, their handling of information is subject to the arrangements and safeguards applicable to those services.
No method of storing or transmitting information can be guaranteed to be completely secure, but we take reasonable steps to protect the information we hold.
11. How Long We Keep Your Information
We keep personal information only for as long as necessary for the purposes for which it was collected.
Retention periods depend on the type of information, why it was collected, whether it is needed for ongoing client services, and any applicable legal, accounting or record keeping requirements.
We periodically review the information we hold and securely delete or anonymize it when it is no longer needed, unless we are legally required to retain it for longer.
12. Your Data Protection Rights
Under UK data protection law, you may have the right to:
• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your information where the legal requirements are met.
• Ask us to restrict how we use your information in certain circumstances.
• Object to certain types of processing.
• Request a copy of certain information in a portable format where applicable.
• Withdraw consent where we rely on consent.
These rights are subject to legal requirements and exemptions. For example, we may need to retain certain records to meet legal obligations or establish, exercise or defend legal claims.
To exercise your rights, contact hello@dermabrightaesthetics.co.uk. We may need to verify your identity before responding.
We will respond within the time required by applicable data protection law.
13. Cookies and Website Technologies
Our website may use cookies and similar technologies to help it function, understand website usage or improve the user experience.
The information collected depends on the website features and technologies in use. Where required, we will provide appropriate information and obtain consent before using non essential cookies or similar technologies.
You may be able to manage cookie preferences through the website or your browser settings.
14. Children’s Information
Selected skincare services may be available to clients aged 16 or 17 by prior agreement and subject to suitability and appropriate consent.
Where we collect personal information from clients under 18, we take care to handle it appropriately and explain how it is used in a clear and accessible way.
We only collect information that is relevant to providing the service and meeting our legal obligations.
15. Third Party Websites
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites.
We recommend reviewing the privacy policy of any external website you visit.
16. Complaints
If you have a concern about how we collect or use your personal information, please contact us in the first instance:
Email: hello@dermabrightaesthetics.co.uk
Post: Dermabright Aesthetics, 1B Brockhampton Lane, Havant, PO9 1LU.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services or legal obligations.
The latest version will be published on our website. We encourage you to review it periodically.
If you have any questions about this Privacy Policy or how your information is handled, please contact hello@dermabrightaesthetics.co.uk.