Privacy Policy

Effective Date: 04/08/2025

This Privacy Policy outlines how Shak Smith Aesthetics (“we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you visit our website, book a service, subscribe to marketing content, or interact with us online or in person. We are committed to maintaining your trust and respecting your privacy.

1. Who We Are

Shak Smith Aesthetics is a nurse-led aesthetics clinic based in Tilbury, Essex, UK. We offer non-surgical cosmetic treatments, skin services, medical-grade skincare advice, and educational training. We operate under UK GDPR and other applicable UK data protection laws.

2. Information We Collect

We may collect personal information in the following ways:

a) Information you give us directly:

Full name
Date of birth
Email address
Phone number
Address (if required for consultation/treatment)
Medical history or medications (for clinical safety)
Photos (for before-and-after documentation, with consent)
Treatment goals and preferences
Payment and transaction information (via secure third-party processors)

b) Information we collect automatically:

IP address and browser type
Device information
Referral URL
Pages viewed and time on site
Cookie data (used to enhance website experience)

3. How We Use Your Information

We process your personal data only when we have a legal basis to do so, including:

To book and manage appointments
To assess medical suitability for treatments
To deliver treatment plans, aftercare, or advice
To send appointment confirmations, reminders, and follow-up messages
To send marketing emails, promotions, or skin tips (with your consent)
To fulfil product or service orders
To issue invoices or receipts
To comply with regulatory or legal obligations (e.g., medical records retention)
To personalise your experience based on treatment history or preferences
To improve our website or customer service

4. Marketing & Communications

We only send marketing messages (e.g., newsletters, offers, content downloads) if:

You have opted in through our forms
You are an existing client and have not opted out
You have requested a lead magnet or joined our mailing list

You can unsubscribe or manage your preferences at any time via email footer or by contacting us directly.

5. How We Store & Protect Your Data

We take your privacy and data security seriously. Your data is:

Stored securely in encrypted systems
Accessed only by authorised staff
Hosted on GDPR-compliant platforms (e.g., Brevo, Stripe, Wix, Google Workspace)
Retained for a minimum of 7 years for medical/legal compliance (in the case of treatments)

We use security features such as:

SSL encryption on our website
Password-protected data access
Firewalls and secure logins

6. Data Sharing & Third Parties

We never sell or share your personal data for marketing purposes.

We may share your data with trusted third-party providers only when required to deliver our services:

Booking platforms (e.g., That-time)
Email and SMS platforms (e.g., Brevo)
Payment processors (e.g., Stripe)
Cloud storage (e.g., Google Drive or Wix-hosted content)

All providers are GDPR-compliant and only process data on our behalf with strict safeguards.

7. Use of Cookies

Our website uses cookies to enhance user experience, analyse traffic, and improve functionality.

You can manage cookie preferences through your browser settings. Continued use of our website implies consent to cookie use as per Wix [Cookie Policy].

8. Your Rights Under UK GDPR

You have the right to:

✅ Access the data we hold about you
✅ Correct inaccuracies in your data
✅ Request deletion of your personal data
✅ Restrict or object to data processing
✅ Withdraw marketing consent at any time
✅ Request a copy of your data in a portable format
✅ Lodge a complaint with the Information Commissioner’s Office (ICO)

To make any requests, email us at: info@shaksmithaesthetics.com

9. Data Retention

For marketing: we retain your details until you unsubscribe or request removal.
For medical treatments: we retain your data for 7 years post-treatment, in line with UK medical regulations.
For enquiries or leads who don’t become clients: data may be stored for up to 12 months unless deletion is requested.

10. Children’s Privacy

This website and our services are not intended for individuals under the age of 18. We do not knowingly collect data from minors.

11. Links to Other Websites

Our site may contain links to other websites (e.g., Instagram, Stripe, booking system). We are not responsible for the content or privacy practices of those external sites. Please review their privacy policies before submitting any personal information.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will always be posted here with the revised effective date.

Last Updated: 04/08/2025

13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, you can reach us here:

📧 Email: info@shaksmithaesthetics.com
📍 Clinic Location: Tilbury, Essex, UK
📱 Instagram: @shaksmithaesthetics_