GDPR Policy

GDPR Policy for SKXN Clinic

At SKXN Clinic, we are committed to protecting your personal data and ensuring that your privacy is respected in compliance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, use, store, and protect the personal data of our clients. By booking an appointment with SKXN Clinic, you consent to the terms outlined in this policy.

What Data We Collect

When you book an appointment with us, we may collect the following personal data:

Full name
Date of birth
Contact information (e.g., phone number, email address)
Appointment details (e.g., date, time, and type of treatment)
Relevant medical information necessary for providing treatments

How We Collect Data

We collect your data directly when you:

Book an appointment via our online booking system, email, or phone.
Provide medical or treatment information during consultations.

Why We Collect Your Data

We collect your personal data for the following purposes:

To manage and confirm your appointments.
To provide safe and effective treatments tailored to your needs.
To comply with legal and regulatory obligations.
To contact you regarding changes to your appointments or clinic policies.

Legal Basis for Processing Data

The legal basis for processing your personal data is:

Consent: By booking an appointment, you consent to the collection and use of your data as outlined in this policy.
Contract: Data processing is necessary to fulfill our service obligations when you book a treatment.
Legitimate Interest: We may process your data to improve our services and maintain communication with you.

How We Protect Your Data

We are committed to ensuring that your data is secure. We have implemented appropriate technical and organizational measures to safeguard your personal information from unauthorized access, alteration, disclosure, or destruction.

Data Retention

We retain personal data only for as long as necessary to:

Fulfill the purposes for which it was collected.
Comply with legal and regulatory requirements.
Resolve disputes and enforce our agreements.

Once your data is no longer required, it will be securely deleted or anonymized.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Erasure: You can request the deletion of your personal data, subject to legal obligations.
Right to Restrict Processing: You can request that we limit how your data is processed.
Right to Data Portability: You can request to receive your data in a commonly used format or have it transferred to another organization.
Right to Object: You can object to your data being processed for certain purposes.

To exercise any of these rights, please contact us using the methods provided when you booked your appointment.

Third-Party Sharing

We do not sell or share your personal data with third parties except:

When required by law or regulation.
To service providers who assist us in delivering treatments, under strict confidentiality agreements.

Changes to This Policy

We may update this GDPR policy from time to time to reflect changes in our practices or legal requirements. Any updates will be communicated to you and made available at the clinic and on our website.

If you have any questions or concerns about this policy or how your personal data is handled, please let us know when booking or during your visit.

​