Privacy Policy

Last updated: 26 September 2026

At Lush Laser & Skin Clinic, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, contact us, book a consultation or treatment, purchase a product, or otherwise interact with our clinic.

By using our website or providing your personal information to us, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

This website is operated by:

Lush Laser & Skin Clinic
[Registered Business Name, if different]
[Business Address]
[City, Postcode, United Kingdom]
Email: [Privacy / Contact Email]
Phone: [Phone Number]

For privacy-related questions, please contact us using the details above.

2. Information We Collect

Depending on how you interact with us, we may collect:

Personal details

• Full name
• Email address
• Telephone number
• Billing and delivery address
• Account or customer information

Appointment and consultation information

• Treatment or service you are interested in
• Appointment preferences
• Consultation responses
• Information you voluntarily provide about your skin, hair, treatment history or treatment goals
• Relevant health or medical information where necessary to safely assess or provide a treatment

Order and payment information

• Products or services purchased
• Order history
• Payment status
• Billing information

Payment card information may be processed directly by our payment providers and is not necessarily stored by us.

Website and technical information

• IP address
• Browser type
• Device information
• Pages viewed
• Referral source
• Approximate location
• Cookie and analytics information
• Website interaction and usage data

Communications

• Contact form messages
• Emails
• Telephone enquiries
• Reviews or feedback you choose to provide
• Customer service communications

3. How We Use Your Information

We may use your information to:

• Process and manage appointments and consultations
• Respond to enquiries and contact requests
• Assess suitability for treatments
• Provide requested treatments, services or products
• Process and fulfil orders
• Manage payments, refunds and transactions
• Send appointment confirmations and service-related communications
• Provide customer support
• Maintain appropriate treatment and client records
• Improve our website, services and customer experience
• Prevent fraud, misuse and security incidents
• Meet legal, regulatory, tax and accounting requirements
• Send marketing communications where you have consented or where otherwise permitted by law

We do not use your personal information for purposes that are unrelated to our services without an appropriate legal basis.

4. Health and Treatment Information

Certain treatments may require us to collect information concerning your health, medical history, skin condition, medications or previous treatments.

This information may be considered sensitive personal information and will only be collected where reasonably necessary to:

• Assess whether a treatment is suitable for you
• Protect your health and safety
• Provide appropriate treatment
• Maintain accurate consultation and treatment records
• Meet professional or legal obligations

We take additional care when handling this type of information and restrict access to authorised personnel.

5. How We Collect Information

We may collect information when you:

• Browse our website
• Complete a contact form
• Book a consultation or treatment
• Complete a consultation or consent form
• Purchase a product or service
• Subscribe to our mailing list
• Create an account
• Contact us by email, telephone or social media
• Leave a review or provide feedback
• Interact with cookies and website technologies

We may also receive limited information from service providers that help us operate our website, payments, bookings or marketing.

6. Shopify

Our online store may be hosted using Shopify.

Shopify may process certain personal information in order to provide ecommerce functionality, including information associated with:

• Website visits
• Orders
• Customer accounts
• Checkout
• Payments
• Fraud prevention

Shopify and its service providers may process information in accordance with their own privacy practices.

7. Payments

Payments may be processed by Shopify Payments or other third-party payment providers made available through our website.

These providers may collect payment information directly from you. We generally receive transaction details such as payment status, order value and limited billing information rather than your complete card details.

8. Appointment and Booking Services

If we use a third-party booking or appointment platform, certain information may be shared with that provider in order to:

• Schedule appointments
• Send booking confirmations
• Manage availability
• Send reminders
• Process deposits or appointment payments

The information shared will be limited to what is reasonably required to provide the booking service.

9. Cookies

Our website may use cookies and similar technologies to:

• Keep the website functioning correctly
• Remember preferences
• Maintain shopping cart or account functionality
• Understand website traffic and performance
• Improve user experience
• Measure marketing effectiveness
• Provide relevant advertising where applicable

Where required, you will be given choices regarding non-essential cookies.

You can also control cookies through your browser settings, although disabling certain cookies may affect website functionality.

10. Marketing Communications

Where permitted, we may send you information about:

• New treatments
• Products
• Clinic updates
• Special offers
• Promotions
• Events
• Skincare or treatment information

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting us directly.

Stopping marketing communications will not prevent us from sending important transactional or appointment-related messages.

11. Who We Share Information With

We may share information with trusted service providers where necessary to operate our business, including:

• Shopify and ecommerce providers
• Payment processors
• Appointment and booking systems
• Email and communication providers
• Website hosting and technology providers
• Analytics providers
• Delivery and fulfilment partners
• Professional advisers such as accountants, insurers or legal advisers
• Regulators, authorities or law enforcement where legally required

We do not sell your personal information to third parties.

12. International Data Transfers

Some technology and service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are used where required.

13. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:

• Provide services
• Maintain treatment records
• Complete transactions
• Handle customer enquiries
• Meet tax, accounting, insurance or legal requirements
• Resolve disputes
• Protect our legitimate business interests

Different categories of information may be kept for different periods.

14. How We Protect Your Information

We use reasonable administrative, technical and organisational measures designed to protect personal information against:

• Unauthorised access
• Loss
• Misuse
• Alteration
• Disclosure
• Destruction

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

15. Your Privacy Rights

Depending on applicable data protection law, you may have rights including the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of certain information
• Ask us to restrict certain processing
• Object to certain uses of your information
• Withdraw consent where processing relies on consent
• Request transfer of certain information
• Object to direct marketing

To exercise a privacy right, contact us at:

[Privacy Email Address]

We may need to verify your identity before completing your request.

16. Children

Our website and clinic services are not intended to encourage children to provide personal information without appropriate involvement from a parent or legal guardian.

Where treatment of a person under 18 is permitted, additional consent or safeguarding requirements may apply.

17. Third-Party Links

Our website may contain links to third-party websites, apps or social media platforms.

We are not responsible for the privacy practices or content of third-party services. We recommend reviewing their privacy policies before providing personal information.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our services
• Changes to technology
• Changes to our business practices
• Legal or regulatory requirements

The latest version will be published on this page with an updated revision date.

19. Contact Us

If you have questions about this Privacy Policy or how your personal information is handled, please contact:

Lush Laser & Skin Clinic
[Full Business Address]
Email: [Email Address]
Phone: [Phone Number]

If you are in the United Kingdom and believe your data protection concerns have not been resolved, you may also have the right to raise a concern with the Information Commissioner’s Office (ICO).