Privacy Policy

We are committed to protecting your personal information and being transparent about how we collect, use and store your data.

Last Updated: 30/06/2026

At Grace Lunæ Skin, we are committed to protecting your personal information and being transparent about how we collect, use and store your data.

This Privacy Policy explains how we collect, use and protect your information when you visit our website, contact us or receive treatment.

Who We Are

Grace Lunæ Skin is an independent skincare clinic providing personalised facial treatments, advanced skin treatments and professional skincare advice.

Data Controller
Grace Lunæ Skin

Email: hello@gracelunaeskin.com

Website: gracelunaeskin.com

Information We Collect

Depending on how you interact with us, we may collect the following information:

Personal Information

Name

Email address

Telephone number

Date of birth

Emergency contact details (where appropriate)

Health Information

To provide treatments safely and appropriately, we may collect information relating to:

Medical history

Current medications

Allergies

Skin concerns

Lifestyle factors relevant to your treatment

Health information is classified as special category data and is only collected where necessary to provide safe and appropriate skincare treatments.

Website Information

When you visit our website, we may collect technical information including:

IP address

Browser type

Device type

Pages visited

Time spent on our website

Referring websites

Cookie information

How We Use Your Information

We use your information to:

Respond to enquiries

Arrange appointments

Carry out consultations and treatments safely

Maintain accurate treatment records

Create personalised treatment plans

Recommend appropriate homecare where suitable

Process payments

Meet our legal, insurance and professional obligations

Improve our website and services

We will never sell your personal information.

Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your information under one or more of the following lawful bases:

Your consent

Performance of a contract

Compliance with legal obligations

Legitimate interests

Health information is processed only where necessary to provide treatments safely and with your explicit consent where required.

How We Store Your Information

We take appropriate technical and organisational measures to keep your personal information secure.

Your information is stored securely and is only accessible by authorised individuals.

Treatment records are retained in accordance with professional, legal and insurance requirements.

Sharing Your Information

Your personal information will only be shared where necessary and with trusted service providers, including:

Online booking providers

Payment processors

Professional insurers

Legal or regulatory authorities where required by law

We never sell or rent your personal information to third parties.

Cookies & Website Analytics

Our website uses cookies and similar technologies to improve your browsing experience and help us understand how visitors use our website.

These technologies may collect information such as:

Pages visited

Time spent on the website

Device and browser type

General location (such as city or country)

How you found our website (for example, through a search engine or social media)

We use this information to improve the performance, functionality and overall user experience of our website. Wherever possible, this information is collected in an aggregated or anonymised form and is not used to identify individual visitors.

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website.

Third-Party Services

To help operate and improve our website, we may use trusted third-party providers, including:

Squarespace – to host and manage our website.

Squarespace Analytics – to help us understand website performance and visitor behaviour.

Google Analytics (where enabled) – to collect anonymous website usage information, such as page views, visitor numbers and website performance.

Payment providers – to securely process payments.

Online booking software (where applicable) – to manage appointments and client communications.

These providers process information in accordance with their own privacy policies.

Marketing Communications

We will only send marketing communications where you have chosen to receive them.

You can withdraw your consent or unsubscribe at any time.

Your Rights

Under UK GDPR, you have the right to:

Request access to your personal information

Request correction of inaccurate information

Request deletion of your information where appropriate

Restrict how your information is processed

Object to processing

Request transfer of your data

Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details below.

Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

Grace Lunæ Skin

Email: hello@gracelunaeskin.com

Website: gracelunaeskin.com

If you are not satisfied with how your information has been handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Website: https://ico.org.uk

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services.

The most recent version will always be available on this website.