Last updated: September 2026
At CM Beauty & Skin, your privacy and the security of your personal information are important. This notice explains what information I collect about you, why I need it, how it is used and stored, and your rights regarding your information.
Who is responsible for your information?
CM Beauty & Skin is responsible for the personal information collected and used in connection with your treatments and services.
Contact: c.m_beauty@hotmail.com
Information I may collect
To provide safe, appropriate and personalised treatments, I may collect information including:
● Your name and contact details
● Date of birth where required
● Appointment and booking information
● Treatment history
● Consultation and consent records
● Relevant medical conditions and health information
● Allergies and sensitivities
● Medication and supplements where relevant to treatment
● Pregnancy or breastfeeding information where relevant
● Current skincare and prescription skin products
● Previous skin or aesthetic treatments
● Information about your skin concerns and treatment goals
● Patch-test records and results
● Treatment notes and products used
● Relevant product, device and batch/lot information
● Before-and-after or clinical photographs where appropriate
● Payment and transaction information
● Communications relating to your appointments, treatments or aftercare
● Adverse reaction or incident records where applicable
I only ask for health information that is relevant to determining treatment suitability, providing treatments safely and maintaining an appropriate professional treatment record.
Why I use your information
Your information may be used to:
● Assess whether a treatment is appropriate for you
● Identify potential contraindications or precautions
● Personalise your treatment and homecare recommendations
● Maintain accurate consultation, consent and treatment records
● Monitor your skin and treatment progress
● Manage appointments and payments
● Provide appropriate pre-care and aftercare
● Record patch tests where required
● Respond to questions or concerns following treatment
● Manage and document any adverse reaction or treatment incident
● Meet professional, insurance, legal and regulatory obligations
● Establish, exercise or defend legal claims where necessary
Health information
Some of the information you provide, such as medical conditions, medication and other health information, is classed as special-category personal data and receives additional protection under UK data-protection law.
CM Beauty & Skin will only collect and use this information where there is an appropriate lawful basis and special-category condition for doing so.
Photographs
Clinical photographs may be taken where appropriate to document your skin, monitor progress and support treatment planning.
Permission to use photographs for social media, website or marketing purposes is separate.
Your images will not be used for marketing simply because you have agreed to clinical photography.
Where marketing consent is requested, you are free to say no and this will not affect the treatment or service you receive.
Where your information is kept
Client information and treatment records may be securely held using professional systems including Fresha and Jotform.
Records are accessed using security-protected devices. My clinic iPad is protected by password/passcode and Face ID.
I take reasonable steps to protect client information against unauthorised access, loss or misuse.
Where service providers process personal information on behalf of CM Beauty & Skin, their own security and data-protection arrangements may also apply.
How long information is kept
CM Beauty & Skin generally retains client consultation, consent and treatment records for 7 years in accordance with the clinic’s record-retention policy and relevant professional/insurance requirements.
Certain information may need to be retained for a different period where required for legal, insurance or other legitimate purposes.
When information is no longer required, it will be securely deleted or disposed of where appropriate.
Marketing communications
I will only send marketing communications where I am permitted to do so.
Where marketing relies on your consent, you can change your mind and unsubscribe at any time.
Opting out of marketing will not prevent me from contacting you with necessary information relating to your appointments, treatments, payments or aftercare.
Sharing your information
Your personal information is not sold.
Information may be shared where reasonably necessary with service providers used to operate CM Beauty & Skin, such as booking, form, payment or technology providers.
Information may also be disclosed where required by law, where necessary for insurance or legal purposes, or where necessary to protect someone’s vital interests.
I will not routinely disclose your health or treatment information to other people without an appropriate reason for doing so.
Your data-protection rights
Depending on the circumstances and the lawful basis being used, you may have rights including the right to:
● Request access to personal information held about you
● Ask for inaccurate information to be corrected
● Request deletion of information in certain circumstances
● Request restriction of processing in certain circumstances
● Object to certain uses of your information
● Request transfer of certain information where applicable
● Withdraw consent where processing is based on consent
These rights are not absolute in every circumstance. For example, CM Beauty & Skin may need to retain certain treatment records despite a request for deletion where there is an appropriate legal reason to do so.
To make a request or ask a question about your information, contact:
c.m_beauty@hotmail.com
Complaints
If you have a concern about how CM Beauty & Skin handles your personal information, please contact me first so that I have the opportunity to investigate and respond.
You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
Changes to this notice
This Privacy Notice may be updated from time to time to reflect changes to the clinic, services, systems or data-protection requirements.
The latest version will always show the date it was last updated.