Who we are
Last updated: 07/10/2026
This policy explains how elixSKIN Clinic collects, uses and protects your personal information when you visit www.elixskinclinic.co.uk, contact us, book an appointment or have a treatment with us.
elixSKIN Clinic is run by Elixir By Saarah LTD, a company registered in England and Wales (company number 10703593), registered office 6 Princess Road West, Leicester, LE1 6TP. We are the “controller” of your personal information, which means we decide how and why it is used. We are registered with the Information Commissioner’s Office (ICO), registration number ZA897335.
Contact us about your information:
- Email: info@elixskinclinic.co.uk
- Phone: 07538 882863
- Post: elixSKIN Clinic, 6 Princess Road West, Leicester, LE1 6TP
The information we collect
Information you give us
- Contact details: your name, email address, phone number and, if needed, your address. You give us these when you book, call, email, message us on WhatsApp or Instagram, or register interest as a treatment model.
- Booking details: the treatment you choose, appointment dates and times, and any notes you add when booking.
- Payment details: deposits and payments are taken by our booking and payment providers. We see a record of the payment but not your full card details.
- Health and skin information: before treatment we ask for your medical history, current medications, allergies, pregnancy or breastfeeding status, skin type and skin concerns. We also keep notes of each treatment and how your skin responds. This is needed to check a treatment is safe for you.
- Photographs: we take photos of the treatment area before, during and after treatment to plan your care and track your progress. These are kept in your client record.
- Clients aged 15–17: for treatments we offer to under-18s, we also record the name and contact details of the parent or guardian who comes with them and gives consent.
Information collected when you use our website
- Technical information: your IP address, browser and device type, pages visited and how you arrived at the site.
- Cookies: only the cookies needed for the site to work are set automatically. Analytics and advertising cookies are only set if you accept them. See our Cookie Policy.
Health information is “special category” data
UK data protection law gives extra protection to health information. We only collect what we need to treat you safely, we ask for your explicit consent on your consultation form, and only the practitioners treating you can see it.
How we use your information
The law requires us to have a valid reason (a “lawful basis”) for each way we use your information.
| What we do | Lawful basis |
|---|---|
| Take and manage your bookings, send appointment confirmations and reminders, and take payments | Contract: we need it to provide the treatment you’ve booked |
| Assess whether a treatment is safe for you, plan your treatment, keep treatment records and photos, and provide aftercare | Contract, plus your explicit consent for health information and photos |
| Reply to your enquiries by phone, email, WhatsApp or Instagram | Legitimate interests: responding to people who contact us |
| Keep records needed for accounts, tax, insurance and to defend any claims | Legal obligation and legitimate interests |
| Use treatment photos in our marketing, website or social media | Your separate, written consent only. You can withdraw it at any time, and we will never identify you without permission. |
| Send news and offers by email or text | Your consent, or if you’re an existing client, our legitimate interests (you can opt out at any time) |
| Measure how our website and Google Ads perform | Your consent through our cookie banner |
| Keep our website secure and working properly | Legitimate interests |
Treatment models: if you register interest as a model for a training course, your details and treatment records may be shared with Elixir Skin Training, our training provider, so the trainee and supervising trainer can treat you safely. We’ll confirm this with you before your appointment.
We do not sell your information, and we do not make decisions about you using fully automated processes.
Who we share it with
We only share your information with companies that help us run the clinic and website. They may only use it to provide their service to us.
| Service | What it does | Information involved |
|---|---|---|
| Acuity Scheduling (Squarespace) | Online booking, deposits and appointment reminders | Contact and booking details, payment records, any notes you add when booking |
| Payment provider Acuity, Square and PayPal | Processes card payments | Payment details |
| Where consultation forms and treatment notes are stored – Acuity scheduling consultation forms and paper records in a locked cabinet at the clinic | Client records | Health information, treatment notes and photos |
| IONOS | Hosts our website | Technical information from website visits |
| Google (Analytics, Ads, Tag Manager, Search Console) | Measures website visits and advertising results | Website usage information, only after you accept cookies |
| Meta (WhatsApp, Instagram) | Messages you send us; the Instagram feed on our website | Messages and contact details you share; the feed only loads after you accept cookies |
| Trustindex | Shows our Google reviews on the website | Technical information from website visits |
| Complianz | Manages our cookie banner and records your cookie choices | Your cookie preferences |
| Our accountant, insurer and professional advisers | Accounts, insurance and legal advice | Only what they need |
We may also share information if the law requires it, for example with HMRC or the police, or to protect someone’s safety. If we ever need to share health information for your care, for example with your GP after a reaction, we’ll talk to you first unless it’s an emergency.
Cookies
We use a cookie banner so you can choose which cookies to allow. Analytics and advertising cookies stay off unless you click Accept, and you can change your choice at any time using the “Manage consent” tab on our website. Full details are in our Cookie Policy.
Transfers outside the UK
Some of our providers, including Google, Meta and Acuity Scheduling, may store or access information in the United States or elsewhere outside the UK. Where this happens, we rely on the safeguards UK law requires, such as the UK–US Data Bridge or the UK’s approved contract clauses (the International Data Transfer Agreement or Addendum).
How long we keep your information
| Information | How long we keep it |
|---|---|
| Client records: consultation forms, treatment notes and photos (adults) | 8 years after your last treatment |
| Client records for clients treated aged 15–17 | Until their 25th birthday, or 8 years after their last treatment if that is later |
| Booking and payment records | 6 years after the end of the tax year they relate to |
| Enquiries from people who don’t book | 12 months after our last contact |
| Treatment model registrations | Until the course ends, or 12 months if you’re not treated |
| Marketing consent and photos used in marketing | Until you withdraw consent |
| Website analytics | Up to 14 months, set in Google Analytics |
We keep treatment records for these periods in case of a complaint, a later reaction or an insurance claim. After that, we delete or securely destroy them.
How we keep it safe
Online records are kept in password-protected systems, and paper records are locked away at the clinic. Only staff who need your information can see it. Our website uses an encrypted (HTTPS) connection.
Your rights
You have the right to:
- Access the information we hold about you and get a copy, including your treatment records and photos
- Correct information that is wrong or incomplete
- Delete your information, unless we need to keep it, for example treatment records for insurance and legal reasons
- Restrict or object to how we use your information, including at any time for marketing
- Move information you’ve given us to another provider, where it’s held electronically
- Withdraw consent at any time, for example for marketing photos or cookies. This doesn’t affect anything we did before you withdrew it.
To use any of these rights, email info@elixskinclinic.co.uk or speak to us at the clinic. We may ask you to confirm your identity. We’ll reply within one month, and it’s free in most cases.
Complaints
If you’re unhappy with how we’ve handled your information, please contact us first at info@elixskinclinic.co.uk. We’ll acknowledge your complaint within 30 days and tell you what we’re doing about it.
You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this policy
We’ll update this policy when the way we use information changes. The date at the top shows when it was last updated.
