Privacy Policy
We are committed to protecting your personal information and being transparent about how we collect, use and store your data.
Last updated: 11 August 2026
At Grace Lunæ Skin, we are committed to protecting your personal information and being transparent about how we collect, use and store your data.
This Privacy Policy explains how we handle your personal information when you visit our website, contact us, book an appointment, purchase products from us or receive a consultation or treatment.
Who We Are
Grace Lunæ Skin is an independent skincare clinic providing personalised facial treatments, advanced skin treatments and professional skincare and homecare advice.
Data Controller:
Grace Lunæ Skin
Email: hello@gracelunaeskin.com
Website: gracelunaeskin.com
Information We Collect
Depending on how you interact with Grace Lunæ Skin, we may collect the following information.
Personal Information
This may include:
Your name
Email address
Telephone number
Date of birth
Emergency contact details, where appropriate
Appointment and booking information
Payment and transaction information
Consultation & Health Information
To provide treatments safely and appropriately, we may collect information relating to:
Medical history
Current medications
Allergies
Skin conditions and concerns
Previous treatments and relevant aesthetic procedures
Pregnancy or breastfeeding status where relevant to treatment
Lifestyle factors relevant to your skin or treatment
Treatment history, consultation notes and treatment plans
Photographs of your skin where required for consultation, treatment planning or progress monitoring
Health information is considered special category personal data under UK data protection law. We only collect and use this information where it is necessary and appropriate for the safe provision of our services.
Website Information
When you visit our website, certain technical information may be collected automatically, including:
IP address
Browser and device type
Pages visited
Time spent on the website
Referring websites
General location information
Cookie and analytics information
How We Use Your Information
We may use your personal information to:
Respond to enquiries
Arrange, manage and confirm appointments
Carry out consultations and treatments safely
Assess your suitability for treatments
Maintain accurate consultation and treatment records
Create personalised treatment plans
Monitor your skin and treatment progress
Provide appropriate aftercare
Recommend professional homecare suited to your skin
Manage in-clinic product purchases
Process treatment, booking or product payments
Communicate important information relating to your appointments or treatments
Meet our legal, insurance and professional obligations
Improve our website, treatments and services
We will never sell your personal information.
Our Lawful Basis for Using Your Information
Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may process your information because:
It is necessary to provide a service or treatment you have requested or to take steps before providing that service.
We have a legal or regulatory obligation to retain or process certain information.
We have a legitimate business interest in operating and improving Grace Lunæ Skin, provided those interests do not override your rights and freedoms.
You have provided your consent where consent is required.
Health information and other special category information is subject to additional protections. Where required, we will obtain your explicit consent to collect and use this information for your consultation, treatment planning and safe provision of treatments.
Where our processing of your information relies on consent, you have the right to withdraw that consent at any time.
Treatment Photography
Where appropriate, photographs may be taken to document your skin, support consultation and treatment planning, monitor progress and maintain accurate treatment records.
Clinical photographs forming part of your treatment record will be stored securely.
We will not use identifiable photographs for marketing, social media, website content or promotional purposes without obtaining your separate permission.
How We Store and Protect Your Information
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse or disclosure.
Your information is stored securely and is only accessible to authorised individuals or trusted service providers where access is necessary.
We will retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable professional, insurance, legal and regulatory requirements.
Different types of information may therefore be retained for different periods.
Sharing Your Information
We only share personal information where necessary to operate Grace Lunæ Skin, provide your services or comply with our legal obligations.
This may include trusted providers such as:
Appointment and booking software providers
Payment processors
Website hosting and analytics providers
Professional insurers or advisers
IT and technology providers where required to operate our systems
Legal, regulatory or public authorities where disclosure is required by law
We do not sell or rent your personal information to third parties.
Where third-party providers process information on our behalf, we take reasonable steps to ensure that appropriate data protection and security measures are in place.
Cookies & Website Analytics
Our website uses cookies and similar technologies to operate correctly, improve your browsing experience and help us understand how visitors interact with the website.
Depending on your cookie preferences, this may include information such as:
Pages visited
Time spent on the website
Device and browser type
General location, such as city or country
How you found our website, for example through a search engine or social media
Where required, non-essential cookies and similar technologies will only be used in accordance with your cookie preferences.
You can manage your cookie preferences through the options provided on our website and through your browser settings. Disabling certain cookies may affect some website functionality.
Third-Party Services
To operate our website and services, we may use trusted third-party providers.
These may include:
Squarespace – to host and manage the Grace Lunæ Skin website.
Squarespace Analytics – to help us understand website performance and how visitors interact with the website.
Booking software – to manage appointments, client information and appointment-related communications.
Payment providers – to securely process payments for appointments, treatments and in-clinic product purchases where applicable.
These providers may process personal information in accordance with their own privacy policies and applicable data protection requirements.
We do not currently sell skincare products directly through our website. As an authorised professional stockist of Nimue Skin Technology, Nimue products are recommended and supplied following a professional skin consultation, allowing us to ensure that the products selected are appropriate for your individual skin classification, concerns and goals.
Marketing Communications
We may occasionally send information about Grace Lunæ Skin treatments, services, products, events or other relevant updates where you have agreed to receive marketing communications or where we are otherwise permitted to contact you under applicable law.
You can unsubscribe or change your marketing preferences at any time using the unsubscribe option provided or by contacting us.
Appointment confirmations, reminders, aftercare information and other communications necessary to provide a service you have requested are not considered marketing communications.
Your Data Protection Rights
Depending on the circumstances, UK data protection law gives you rights in relation to your personal information, including the right to:
Request access to the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your information where applicable
Request restriction of how your information is processed
Object to certain types of processing
Request transfer of your information where applicable
Withdraw consent where processing is based on consent
Some of these rights are subject to legal exceptions. For example, we may need to retain certain treatment records even if you request their deletion where we have a legal, professional or insurance requirement to do so.
To exercise your rights, please contact us using the details below.
Contact Us
If you have any questions about this Privacy Policy or how your personal information is handled, please contact:
Grace Lunæ Skin
Email: hello@gracelunaeskin.com
Website: gracelunaeskin.com
If you are not satisfied with how we have handled your personal information, you also have the right to make a complaint to the Information Commissioner's Office (ICO).
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, third-party providers or legal requirements.
The most recent version will always be available on our website.