Skin Medic Skin Care Limited (‘we’, ‘us’, ‘our’) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website or use our products and services. This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This website is not intended for children under the age of 18.

1. Who We Are

Skin Medic Skin Care Limited is the data controller responsible for your personal data.

Company: Skin Medic Skin Care Limited Company Number: 16504026 Address: 37 Portland Road, Hucknall, Nottingham, England, NG15 7SL Email: info@skinmedicskincare.com Phone: +44 7956 072102

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO) at www.ico.org.uk. We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us in the first instance.

2. The Data We Collect About You

We may collect, use, store and transfer the following kinds of personal data:

• Identity Data: name, title and date of birth
• Contact Data: address, email address and telephone numbers
• Financial Data: payment card details (processed securely — we do not store full card details)
• Transaction Data: details about payments and services you have obtained from us
• Technical Data: IP address, browser type and version, time zone, operating system and other technology on devices you use to access our website
• Usage Data: information about how you use our website and services
• Health and Skin Data: information about your skin conditions, concerns and health provided during consultations (Special Category Data under UK GDPR)
• Marketing and Communications Data: your preferences in receiving marketing from us

Special Category Data Information about your skin conditions or health provided during consultations constitutes Special Category Data under UK GDPR. We only process this data with your explicit consent and solely to provide appropriate skincare advice and product recommendations. This data is treated with the highest level of confidentiality.

If You Fail to Provide Personal Data Where we need to collect personal data by law or under our Terms and Conditions, and you fail to provide that data when requested, we may not be able to perform the services you have requested. We will notify you if this is the case.

3. How Your Personal Data Is Collected

We collect data through the following methods:

Direct Interactions — when you register an account, place an order, book a consultation, subscribe to our newsletter, give us feedback or contact us.

Automated Technologies — as you interact with our website, we may automatically collect Technical Data using cookies and similar technologies. Please see our Cookie Policy at www.skinmedicskincare.com/cookies for further details.

Third Parties — including analytics providers, payment processors and delivery services.

4. How We Use Your Personal Data

We only use your personal data when the law allows us to. The lawful bases we rely on are:

Legitimate Interest — the interest of our business in conducting and managing our operations to give you the best service and experience. We always consider and balance any potential impact on you before processing your data on this basis.

Performance of Contract — processing your data where it is necessary to perform a contract with you, or to take steps at your request before entering into a contract.

Legal Obligation — processing your data where it is necessary to comply with a legal or regulatory obligation.

Consent — where you have given us clear, specific and freely given consent — including for Special Category Data and marketing communications.

We use your personal data for the following purposes:

• To register you as a new client — Identity and Contact Data — Performance of Contract
• To process and deliver your order — Identity, Contact, Financial, Transaction Data — Performance of Contract and Legitimate Interests
• To provide skincare consultations and personalised plans — Identity, Contact, Health/Skin Data — Performance of Contract and Explicit Consent
• To send order confirmations and delivery updates — Identity, Contact, Transaction Data — Performance of Contract
• To manage our relationship with you — Identity, Contact, Marketing Data — Performance of Contract and Legitimate Interests
• To administer and protect our website — Identity, Contact, Technical Data — Legitimate Interests and Legal Obligation
• To send marketing and newsletters — Identity, Contact, Marketing Data — Consent
• To use data analytics to improve our website and services — Technical, Usage, Marketing Data — Legitimate Interests
• To comply with legal and regulatory obligations — All relevant data — Legal Obligation

Change of Purpose We will only use your personal data for the purposes for which we collected it. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

5. Newsletter and Marketing Communications

5.1 How We Obtain Your Consent We will only send you marketing emails if you have given us your explicit consent by ticking a clearly labelled opt-in checkbox on our website. We use a double opt-in process where possible.

5.2 What You Will Receive If you subscribe to our newsletter, you may receive expert skincare tips, information about new products, exclusive offers and real client results. We will never send unsolicited emails or share your email address with third parties for their own marketing purposes.

5.3 Consent Text The following consent language is displayed on our newsletter subscription form:

“By subscribing, you agree to receive marketing emails from Skin Medic Skin Care Limited, including expert skincare tips, exclusive offers and product updates. You can unsubscribe at any time by clicking the unsubscribe link in any email. We will never share your data with third parties for marketing purposes. View our Privacy Policy at www.skinmedicskincare.com/privacy-policy.”

5.4 Opting Out You can unsubscribe at any time by clicking the ‘Unsubscribe’ link in any marketing email, or by emailing info@skinmedicskincare.com with the subject line ‘Unsubscribe’.

5.5 Third Party Marketing We will obtain your express opt-in consent before sharing your personal data with any third parties for marketing purposes. We will never sell your personal data to third parties.

6. Disclosures of Your Personal Data

We do not sell your personal data. We may share your data with trusted third parties only where necessary:

• Payment processors — to handle transactions securely
• Delivery and courier services — to fulfil your orders
• Email service provider — to manage newsletter subscriptions, only where you have given consent
• Analytics providers — including Google Analytics, to improve our website
• Website hosting and technology providers
• Legal or regulatory authorities — where required by law
• Business purchasers — in the event of a sale or merger of our business

All third parties are required to process your data in accordance with applicable data protection law.

7. International Transfers

We do not routinely transfer your personal data outside the United Kingdom or the European Economic Area (EEA). If we need to transfer data internationally, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

8. Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data. Our website uses SSL encryption and we use PCI-DSS compliant payment processors. We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO where legally required.

9. Data Retention

We retain your personal data only for as long as necessary:

• Order and transaction records: 7 years
• Consultation and health records: 8 years
• Newsletter subscriber data: until you unsubscribe, plus 12 months
• Proof of consent records: duration of subscription plus 3 years
• Website analytics data: up to 26 months

10. Your Legal Rights

Under UK GDPR you have the following rights:

• Right of Access: request a copy of the personal data we hold about you
• Right to Rectification: request correction of inaccurate or incomplete data
• Right to Erasure: request deletion of your personal data in certain circumstances
• Right to Object: object to processing based on legitimate interests or for direct marketing
• Right to Restrict Processing: request that we suspend processing in certain circumstances
• Right to Data Portability: receive your data in a structured, machine-readable format
• Right to Withdraw Consent: withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us at info@skinmedicskincare.com. We will respond within one month. You also have the right to complain to the ICO at www.ico.org.uk or on 0303 123 1113.

11. Contact Us

Email: info@skinmedicskincare.com Phone: +44 7956 072102 Address: 37 Portland Road, Hucknall, Nottingham, England, NG15 7SL ICO: www.ico.org.uk

Skin Medic Skin Care Limited — Privacy Policy — May 2026