Your data

Privacy Notice

SKN BY STAS is committed to protecting your privacy. This notice explains what personal information we collect when you book and have a treatment with us, why we collect it, and your rights over it.

Who is responsible for your data

SKN BY STAS is the "data controller" for the information we hold about you. For any questions or requests about your data, contact us at annastersia@icloud.com.

What we collect

  • Your contact details — name, phone number, email.
  • Health and skin information — your skin concerns, medical history, medications, allergies and anything relevant to treating you safely. This is "special category" data and we treat it with extra care.
  • Photographs — before/after and treatment-record images (see "Photos" below).
  • Booking and payment information. Card payments are handled by our payment provider, Square; we don't store your full card details.

Why we collect it

To provide your treatment safely and keep proper records; to manage your bookings and send confirmations and reminders; and to meet our professional, insurance and legal obligations as a nurse-led practice. For health information, we rely on your explicit consent and the provision of health care. We will only use photographs for marketing where you have given separate, specific consent — you can say no, and it won't affect your treatment.

Photos

We may take clinical photographs as part of your treatment record, which helps us track your skin and plan your care. Using any image for marketing is a separate choice: we will only do so where you have actively opted in, and you can withdraw that consent at any time. We do not use images of clients under 18 for marketing.

Who we share it with

We don't sell your data or share it for advertising. We use trusted providers to run the practice — Square for booking, reminders and payments — who process data on our behalf under their own data protection terms. We may share information where the law requires it, for example a safeguarding or medical concern.

How long we keep it

We keep your treatment and personal records for 12 months after your most recent appointment, unless we are required to keep them longer. Marketing consents are kept until you withdraw them.

Your rights

You can ask us to show you the information we hold about you, correct anything that's wrong, delete it (where we're not required to keep it), or withdraw your consent — including for marketing photos — at any time. To do any of these, email annastersia@icloud.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

← Back to policies