Last updated: 02/06/2026
Rewind & Renew Skin Clinic respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, book an appointment, complete an enquiry form, interact with our social media advertising, or receive treatment or consultation services from us.
This policy applies to personal data collected through our website, social media pages, Meta/Facebook/Instagram adverts, online forms, email, telephone, WhatsApp, in-clinic consultations and appointment bookings.
1. Who we are
For the purposes of UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, the data controller is:
Rewind & Renew Skin Clinic
Website: rewindandrenewskinclinic.co.uk
Email: Nicola@rewindandrenewskinclinic.co.uk
Address: Tan and Beauty Hub, Stanier Square Centre, Queensway, Bletchley, MK2 2FY
Telephone: 07498541360
Please contact us using the details above if you have any questions about how we handle your personal data.
2. What personal information we collect
We may collect and process the following types of personal information:
Contact and identity information
This may include your name, email address, telephone number, postal address, date of birth, social media profile name, and other details you provide when contacting us or booking an appointment.
Appointment and enquiry information
This may include your preferred appointment date, treatment interests, consultation notes, messages you send to us, and records of communication between you and the clinic.
Health, skin and treatment-related information
As part of consultations or treatment suitability checks, we may collect information about your skin concerns, medical history, allergies, medication, pregnancy or breastfeeding status, previous treatments, contraindications, photographs, consent forms, aftercare notes and treatment records.
This type of information may include special category data under UK data protection law and is treated with extra care.
Payment and transaction information
We may collect payment status, invoice details, booking deposit information and transaction records. We do not normally store full card details ourselves if payment is processed by a third-party payment provider.
Marketing and advertising information
If you interact with our adverts, sign up through a Meta lead form, subscribe to updates, request an offer, or consent to marketing, we may collect information about your preferences and the services you are interested in.
Website and technical information
When you visit our website, we may collect information such as your IP address, device type, browser type, pages visited, approximate location, referral source, interactions with adverts, and cookie or tracking preferences.
3. How we collect your information
We may collect your personal information when you:
We may also receive limited information from third-party platforms or service providers, such as Meta, booking systems, payment providers, website analytics tools and advertising platforms.
4. How we use your personal information
We use your personal information to:
5. Our lawful basis for using your data
Under UK GDPR, we must have a lawful basis for using your personal data. Depending on the situation, we may rely on one or more of the following:
Contract
We may use your information to provide services you have requested, such as booking or delivering a consultation or treatment.
Consent
We may rely on your consent for certain uses, such as email or SMS marketing, optional cookies, testimonials, before-and-after photos, or certain health and treatment information where appropriate.
Legitimate interests
We may use your information where it is necessary for our legitimate business interests, such as responding to enquiries, improving our services, managing our customer relationships, preventing fraud, and running limited advertising or analytics activity.
Legal obligation
We may use your information where required to comply with legal, tax, accounting, regulatory, health and safety, insurance or professional obligations.
Special category data
Where we process health, skin, medical or treatment-related information, we will do so only where we have an appropriate lawful basis and an additional condition under UK GDPR. This may include your explicit consent, the provision of health or treatment-related services, legal claims, insurance requirements, or another lawful condition that applies to our services.
6. Meta, Facebook and Instagram advertising
We may advertise our services through Meta platforms, including Facebook and Instagram.
If you click on one of our adverts, complete a Meta lead form, send us a message, or visit our website after seeing an advert, we may collect and use the information you provide to respond to your enquiry, contact you about the service or offer you requested, and measure the effectiveness of our advertising.
We may also use Meta Business Tools, such as the Meta Pixel or similar technologies, to understand how visitors interact with our website and to show relevant adverts. Meta’s Business Tools requirements state that businesses should clearly disclose how they use cookies and how website data may be shared with third parties.
We do not intentionally share sensitive medical or treatment information with Meta. We also do not use Meta Business Tools to send Meta information that is prohibited or considered sensitive under Meta’s terms and policies. Meta states that advertisers should not share prohibited or sensitive information through Meta Business Tools.
You can control how Meta uses your information through your Facebook or Instagram privacy and ad settings.
7. Cookies and tracking technologies
Our website may use cookies, pixels and similar technologies to:
Where required by law, we will ask for your consent before setting non-essential cookies, including advertising or analytics cookies.
You can change your cookie preferences through our website cookie banner or your browser settings. Blocking some cookies may affect how the website works.
8. Marketing communications
We may send you marketing messages about our treatments, offers, events or clinic updates if you have opted in or if we are otherwise legally allowed to contact you.
You can opt out of marketing at any time by:
We may still send you non-marketing messages, such as appointment confirmations, treatment information, aftercare advice, payment information or important service updates.
9. Sharing your personal information
We may share your information with trusted third parties where necessary, including:
We only share personal information where there is a valid reason to do so and we require service providers to protect your data appropriately.
We do not sell your personal information.
10. How long we keep your information
We keep your personal information only for as long as necessary for the purposes described in this policy.
The length of time we keep information may depend on the type of data, the reason it was collected, legal or insurance requirements, and whether we need it to respond to complaints, claims or regulatory obligations.
As a general guide:
You can contact us if you would like more information about our retention periods.
11. How we protect your information
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
These may include access controls, password protection, secure systems, staff confidentiality, data minimisation, secure storage, and limiting access to those who need the information to provide services or manage the business.
12. International transfers
Some of our service providers, such as website, email, analytics, booking, payment or advertising platforms, may process personal data outside the UK.
Where this happens, we will take steps to ensure your personal data is protected in accordance with UK data protection law, such as using appropriate safeguards, contractual protections or approved transfer mechanisms where required.
13. Your data protection rights
Under UK data protection law, you may have the right to:
To exercise your rights, please contact us at Nicola@rewindandrenewskinclinic.co.uk.
We may need to verify your identity before responding to your request.
14. Withdrawing consent
Where we rely on your consent, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of anything we did before you withdrew consent.
For example, you can withdraw consent for marketing, optional cookies, or the use of certain photographs or testimonials by contacting us.
15. Complaints
If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve your concern.
You also have the right to complain to the UK Information Commissioner’s Office, which is the UK regulator for data protection matters.
ICO website: ico.org.uk
16. Links to other websites
Our website may contain links to third-party websites, booking systems, payment providers, social media platforms or other external services. We are not responsible for the privacy practices or content of those websites. Please read their privacy policies before providing personal information to them.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date shown at the top.