Privacy Policy
Seven Skin | Liverpool & Wirral
1. Introduction
At Seven Skin, your privacy and the protection of your personal information are important to us.
This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, make an enquiry, book an appointment or receive treatment at Seven Skin.
Seven Skin is operated by Chlöe Loraine, a sole trader providing professional skin and laser treatments in Liverpool and Wirral.
For the purposes of UK data protection law, Chlöe Loraine, trading as Seven Skin, is the data controller responsible for your personal information.
Contact: hello@sevenskinclinic.com
2. Information we collect
To provide a professional, personalised and safe service, Seven Skin may collect and process the following personal information:
Personal and contact information
Your name, email address, telephone number and other contact details provided when making an enquiry, booking an appointment or attending the clinic.
Appointment and booking information
Details of your appointments, treatment enquiries, booking history, payments and preliminary suitability information submitted through our online booking system, Acuity Scheduling.
Medical and consultation information
Relevant medical history, medications, allergies, skin concerns, previous treatments, contraindications and other health-related information necessary to assess treatment suitability and provide appropriate care. Detailed consultation and consent records are collected in clinic and maintained through Jotform.
Treatment records and photographs
Information relating to treatments provided, treatment progress, professional assessments and before-and-after photographs taken for clinical documentation. Treatment photographs are stored within a separate Seven Skin iCloud account. Photographs are only used for promotional purposes where separate, appropriate permission has been obtained.
Website and communication information
Information submitted through our website contact forms, correspondence with Seven Skin and certain technical information collected when visiting our website, including through cookies and website analytics where applicable.
Marketing preferences
Where you choose to subscribe to marketing communications, we may collect your contact details and preferences to send relevant updates, treatment information and promotional communications.
3. How we collect your information
Seven Skin collects personal information directly from you when you interact with our website, communicate with us, book an appointment or attend the clinic.
Website enquiries
When you contact Seven Skin through our Squarespace website, we collect the information you choose to provide so we can review and respond to your enquiry.
Online bookings and preliminary screening
When you arrange an appointment through Acuity Scheduling, we collect your booking details and responses to preliminary suitability questions. This allows us to identify potential treatment considerations before your appointment and contact you where further guidance or rescheduling may be necessary.
In-clinic consultations
During your consultation, we collect relevant medical and treatment information through our Jotform consultation and consent forms. This information supports professional assessment, treatment planning, informed consent and ongoing clinical recordkeeping.
Treatment documentation
During your appointments, we may record treatment details, observations and progress photographs where appropriate. Clinical photographs are maintained as part of your treatment records, with separate permission sought for promotional use.
Direct communication
We may also collect information you provide when contacting us by email, telephone or other communication channels.
Website usage
Certain technical information may be collected automatically when you visit our website, including through Squarespace Analytics and cookies, subject to applicable privacy settings and consent requirements.
4. How we use your information
Seven Skin uses personal information only where there is a legitimate and appropriate purpose for doing so.
We may use your information to:
Respond to enquiries and provide guidance
Review your questions, discuss available treatment options and provide relevant information before you decide whether to book an appointment.
Manage appointments and bookings
Arrange, confirm, reschedule and manage appointments, process payments and communicate important information relating to your visit.
Assess treatment suitability
Review relevant medical information, medications, contraindications and treatment history to determine whether a consultation, patch test or treatment may be appropriate.
Provide personalised treatments
Develop individual treatment plans, document procedures, monitor progress and make informed recommendations based on your assessment and treatment history.
Maintain clinical records
Retain appropriate consultation forms, consent documentation, treatment notes and clinical photographs to support continuity of care, professional accountability and the management of any concerns or complaints.
Communicate important information
Provide appointment reminders, preparation instructions, aftercare guidance and other communications directly related to your appointments or treatments.
Improve our website and services
Understand how visitors interact with our website, evaluate our services and make improvements where appropriate, subject to applicable cookie and privacy requirements.
Send marketing communications
Where permitted by applicable law, send information about Seven Skin treatments, services, availability and promotions by email or SMS. You can opt out of marketing communications at any time.
Meet legal and professional obligations
Maintain records, respond to legitimate requests and fulfil applicable legal, regulatory and professional responsibilities.
5. Our legal basis for processing personal information
Seven Skin processes personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We rely on different lawful bases depending on the nature of the information and the purpose for which it is processed.
Contractual Necessity
We process personal information where necessary to arrange appointments, manage bookings, provide agreed services and administer payments, including taking steps requested by clients before entering into a treatment agreement.
Legitimate Interests
We may process personal information where necessary to respond to enquiries, manage our business, maintain appropriate administrative records and handle client concerns or complaints, provided these interests do not override your rights and freedoms.
Legal Obligations
Certain information may be processed or retained where necessary to comply with applicable legal or regulatory requirements.
Consent
Where consent is required, we will request it separately and explain how your information will be used. This includes optional promotional photography and certain marketing communications.
You may withdraw consent at any time by contacting hello@sevenskinclinic.com. Withdrawal does not affect processing already carried out lawfully before your request.
Medical and Health Information
To assess treatment suitability, identify contraindications, plan treatments and maintain clinical records, Seven Skin collects relevant medical and health information.
This is classified as special category personal data under UK GDPR and requires additional protection and a separate legal condition for processing.
Where explicit consent is relied upon, it is requested through our consultation and preliminary screening forms. Withdrawal requests will be considered alongside any applicable legal requirements and lawful grounds for retaining existing records.
Clinical Photography
Clinical photographs may be collected where appropriate for treatment assessment, planning, monitoring progress and maintaining accurate treatment records.
These photographs form part of confidential clinical documentation and will not be used for marketing or promotional purposes without separate permission.
6. How long we keep your information
Seven Skin retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing treatments, maintaining appropriate clinical records, meeting insurance requirements and complying with applicable legal obligations.
Consultation and Treatment Records
Medical histories, consultation forms, consent records, treatment notes and associated clinical photographs are generally retained for a minimum of five years following the client's last treatment, in accordance with our insurer's recordkeeping requirements.
For clients treated under the age of 18, records are retained for at least five years after they reach the age of 18.
Records may be retained for longer where reasonably necessary to comply with applicable legal obligations or to establish, exercise or defend legal claims.
Appointment and Enquiry Information
Booking details, preliminary screening information and enquiries are retained only for as long as necessary to manage appointments, respond to communications and maintain appropriate business records.
Marketing Information
Where you have opted to receive marketing communications, your contact details and preferences will be retained until you unsubscribe, withdraw your consent or the information is no longer required for that purpose, subject to retaining limited records where necessary to respect your preferences.
Secure Storage and Deletion
Personal information is stored using the systems described in this Privacy Policy, including Squarespace, Acuity Scheduling, Jotform and secure clinical record storage.
When information is no longer required, Seven Skin will take appropriate steps to securely delete or anonymise it, subject to any applicable legal, insurance or recordkeeping requirements.
You may request the deletion of your personal information by contacting hello@sevenskinclinic.com. Each request will be assessed in accordance with your rights under UK GDPR, as some information may need to be retained where a valid lawful basis applies.
7. How we store and protect your information
Seven Skin takes appropriate technical and organisational measures to protect personal information, including confidential medical histories, consultation records and clinical photographs.
Access to client information is restricted to authorised individuals for legitimate business and treatment-related purposes. Security measures include account access controls and two-factor authentication on supported systems.
Secure Information Storage
Personal information is managed through third-party platforms used to operate Seven Skin, including Squarespace for website enquiries, Acuity Scheduling for appointments and preliminary screening, and Jotform for consultation and consent documentation.
Clinical photographs are stored separately as part of confidential treatment records.
Confidentiality and Access
Client information is treated confidentially and accessed only where necessary to manage appointments, assess treatment suitability, provide treatments or maintain appropriate records.
Information is not shared with unauthorised third parties. Where service providers process information on our behalf, we take appropriate steps to ensure suitable data protection arrangements are in place.
Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse or disclosure.
Although we take appropriate precautions, no electronic storage or transmission system can be guaranteed to be completely secure.
Third-Party Providers
Some of the platforms we use may process or store personal information outside the United Kingdom. Where international transfers take place, we take steps to ensure appropriate safeguards are in place in accordance with applicable data protection legislation.
8. Who we share your information with
Seven Skin respects the confidentiality of your personal and medical information. We do not sell your personal information and only share it where necessary to provide our services, operate our business or meet applicable legal obligations.
Third-Party Service Providers
We use carefully selected third-party platforms to support the operation of Seven Skin. These include:
Squarespace: To operate our website, manage enquiries and provide website functionality.
Acuity Scheduling: To manage appointments, bookings, preliminary consultation information and appointment communications.
Jotform: To collect and securely manage consultation forms, medical histories, treatment consent and associated documentation.
Square: To process booking payments, deposits and related transactions.
Apple iCloud: To store and manage confidential clinical photographs.
These providers may process personal information on our behalf or act as independent data controllers for certain activities, in accordance with their respective responsibilities and privacy arrangements.
Professional and Legal Disclosures
Where reasonably necessary and legally permitted, we may share relevant information with insurers, professional advisers, regulatory authorities or other authorised parties, including where required to investigate complaints, manage insurance claims, comply with legal obligations or establish, exercise or defend legal claims.
Clinical Information and Confidentiality
Medical histories, treatment records and clinical photographs are treated as confidential information. They are not shared with unrelated third parties for marketing or promotional purposes.
Clinical photographs will only be used for marketing where separate permission has been obtained.
Your Privacy
We limit the information shared to what is necessary for the relevant purpose and take appropriate steps to ensure personal information is handled in accordance with applicable data protection legislation.
9. Your data protection rights
Under the UK General Data Protection Regulation (UK GDPR), you have certain rights regarding the personal information Seven Skin holds about you.
Depending on the circumstances and the applicable legal requirements, these rights include:
Right of Access
You may request confirmation of whether we hold your personal information and ask for a copy of that information.
Right to Rectification
You may request that inaccurate personal information is corrected or incomplete information is updated.
Right to Erasure
You may request the deletion of your personal information in certain circumstances. This right is not absolute, and some information may need to be retained where a valid legal basis applies, including where necessary for legal claims or applicable recordkeeping obligations.
Right to Restrict Processing
You may request that we limit how your personal information is used in certain circumstances, including while concerns about its accuracy or the lawfulness of processing are being reviewed.
Right to Data Portability
Where applicable, you may request to receive certain personal information you have provided to us in a structured, commonly used and machine-readable format, or request its transfer to another provider where technically feasible.
Right to Object
You may object to certain processing of your personal information, including processing based on legitimate interests. You also have the right to object to direct marketing at any time.
Right to Withdraw Consent
Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
How to Exercise Your Rights
To make a request or raise a concern about how your personal information is handled, please contact:
Chlöe Loraine, trading as Seven Skin
Email: hello@sevenskinclinic.com
We may need to verify your identity before responding to certain requests to protect the confidentiality of your information.
We will respond to requests within the timeframes required by applicable data protection legislation, generally within one calendar month.
Your Right to Complain
If you are unhappy with how your personal information has been handled, we encourage you to contact us so we can address your concerns.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Website: https://ico.org.uk/make-a-complaint/
10. Cookies and website analytics
The Seven Skin website uses cookies and similar technologies to support website functionality, understand how visitors interact with our website and improve the overall browsing experience.
What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help websites function correctly, remember certain preferences and provide information about how the website is used.
Essential Cookies
Some cookies are necessary for the website to operate correctly, including those supporting security, navigation and essential website functionality. These cookies do not require consent where they are strictly necessary to provide the service requested.
Analytics and Optional Cookies
Seven Skin uses Squarespace's built-in analytics to understand website activity, such as page visits, traffic sources and general visitor interactions.
Where analytics or other non-essential cookies require consent, they will only be used in accordance with your cookie preferences and applicable data protection requirements.
We do not currently use Google Analytics or Meta Pixel for website tracking.
Managing Your Cookie Preferences
When you first visit our website, you can manage your preferences through our cookie banner.
You can choose to accept or decline non-essential cookies and review your preferences using the Manage Cookies option available on our website.
You can also control or delete cookies through your browser settings, although disabling certain cookies may affect website functionality.
Third-Party Services
Our website may include third-party services, including Acuity Scheduling for appointment bookings. These services may use their own cookies or similar technologies when you interact with them.
Where applicable, information about these technologies and your available choices is provided through the relevant privacy or cookie notices.
11. International data transfers
Seven Skin uses trusted third-party service providers to support website functionality, appointment scheduling, payment processing and the secure management of client information.
Some of these providers may store, access or process personal information outside the United Kingdom, including within the European Economic Area (EEA) and other countries.
Where personal information is transferred internationally, Seven Skin takes appropriate steps to ensure that transfers are carried out in accordance with applicable UK data protection legislation.
Depending on the destination and circumstances, these safeguards may include UK adequacy regulations, approved international data transfer agreements, the UK Addendum to the European Commission's Standard Contractual Clauses, or other legally recognised transfer mechanisms.
We take reasonable steps to ensure that third-party providers offer appropriate protections for personal information, particularly where confidential medical histories, consultation records and clinical photographs are involved.
For further information about how your personal information is handled or transferred internationally, please contact hello@sevenskinclinic.com.
12. Changes to this privacy policy
Seven Skin may update this Privacy Policy from time to time to reflect changes to our services, business practices, third-party providers or applicable data protection legislation.
Any updates will be published on this page, with the date of the latest revision clearly displayed.
Where changes significantly affect how we collect, use or protect your personal information, we will take appropriate steps to inform you where required by law.
We encourage you to review this Privacy Policy periodically to remain informed about how your personal information is handled.
Last updated: 15 October 2026