Privacy Policy
We are committed to protecting your personal information and being transparent about how we collect, use and store your data.
Last Updated: 30/06/2026
At Grace Lunæ Skin, we are committed to protecting your personal information and being transparent about how we collect, use and store your data.
This Privacy Policy explains how we collect, use and protect your information when you visit our website, contact us or receive treatment.
Who We Are
Grace Lunæ Skin is an independent skincare clinic providing personalised facial treatments, advanced skin treatments and professional skincare advice.
Data Controller
Grace Lunæ Skin
Email: hello@gracelunaeskin.com
Website: gracelunaeskin.com
Information We Collect
Depending on how you interact with us, we may collect the following information:
Personal Information
Name
Email address
Telephone number
Date of birth
Emergency contact details (where appropriate)
Health Information
To provide treatments safely and appropriately, we may collect information relating to:
Medical history
Current medications
Allergies
Skin concerns
Lifestyle factors relevant to your treatment
Health information is classified as special category data and is only collected where necessary to provide safe and appropriate skincare treatments.
Website Information
When you visit our website, we may collect technical information including:
IP address
Browser type
Device type
Pages visited
Time spent on our website
Referring websites
Cookie information
How We Use Your Information
We use your information to:
Respond to enquiries
Arrange appointments
Carry out consultations and treatments safely
Maintain accurate treatment records
Create personalised treatment plans
Recommend appropriate homecare where suitable
Process payments
Meet our legal, insurance and professional obligations
Improve our website and services
We will never sell your personal information.
Lawful Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your information under one or more of the following lawful bases:
Your consent
Performance of a contract
Compliance with legal obligations
Legitimate interests
Health information is processed only where necessary to provide treatments safely and with your explicit consent where required.
How We Store Your Information
We take appropriate technical and organisational measures to keep your personal information secure.
Your information is stored securely and is only accessible by authorised individuals.
Treatment records are retained in accordance with professional, legal and insurance requirements.
Sharing Your Information
Your personal information will only be shared where necessary and with trusted service providers, including:
Online booking providers
Payment processors
Professional insurers
Legal or regulatory authorities where required by law
We never sell or rent your personal information to third parties.
Cookies & Website Analytics
Our website uses cookies and similar technologies to improve your browsing experience and help us understand how visitors use our website.
These technologies may collect information such as:
Pages visited
Time spent on the website
Device and browser type
General location (such as city or country)
How you found our website (for example, through a search engine or social media)
We use this information to improve the performance, functionality and overall user experience of our website. Wherever possible, this information is collected in an aggregated or anonymised form and is not used to identify individual visitors.
You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website.
Third-Party Services
To help operate and improve our website, we may use trusted third-party providers, including:
Squarespace – to host and manage our website.
Squarespace Analytics – to help us understand website performance and visitor behaviour.
Google Analytics (where enabled) – to collect anonymous website usage information, such as page views, visitor numbers and website performance.
Payment providers – to securely process payments.
Online booking software (where applicable) – to manage appointments and client communications.
These providers process information in accordance with their own privacy policies.
Marketing Communications
We will only send marketing communications where you have chosen to receive them.
You can withdraw your consent or unsubscribe at any time.
Your Rights
Under UK GDPR, you have the right to:
Request access to your personal information
Request correction of inaccurate information
Request deletion of your information where appropriate
Restrict how your information is processed
Object to processing
Request transfer of your data
Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details below.
Contact
If you have any questions about this Privacy Policy or how your personal information is handled, please contact:
Grace Lunæ Skin
Email: hello@gracelunaeskin.com
Website: gracelunaeskin.com
If you are not satisfied with how your information has been handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Website: https://ico.org.uk
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services.
The most recent version will always be available on this website.