Privacy Policy.

1. Information We Collect

We may collect and process the following data about you:

1.1 Personal Information

• Name
• Contact information (email address, phone number)
• Address
• Date of birth
• Medical history and other health information related to skin lesions
• Payment details (for processing transactions)

1.2 Non-Personal Information

• Browser, device type, operating system, and approximate location.
• Pages visited, visit timing, referral source, and approved campaign parameters.
• Use of enquiry, telephone, email, and directions links.
• Largest Contentful Paint, Interaction to Next Paint, and Cumulative Layout Shift measurements.

Google Analytics receives this information only after you accept analytics. Separately, Cloudflare Web Analytics receives limited, aggregated page and real-user performance metrics without cookies or local storage. We do not send enquiry answers, medical form fields, names, telephone numbers, or email addresses to either analytics service.

2. How We Use Your Information

2.1 Personal Information

• To provide you with information, products, or services that you request from us.
• To carry out our obligations arising from any contracts entered into between you and us.
• To notify you about changes to our service.
• To ensure that content from our site is presented in the most effective manner for you and for your computer.
• To provide you with personalised consultations and treatment plans.

2.2 Non-Personal Information

• To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical, and survey purposes.
• To improve our site to ensure that content is presented in the most effective manner for you and for your computer.
• As part of our efforts to keep our site safe and secure.
• With consent, to measure page performance and use of our contact options.

2.3 Google Analytics 4

We use GA4 web stream G-BPEE5TXBKH under your consent. The Google tag remains blocked until you accept analytics. Google Signals and advertising personalisation are disabled, and rejected analytics visits send no data to Google. You can change or withdraw this choice using the Analytics settings control displayed on every page.

2.4 Cloudflare Web Analytics

Cloudflare provides aggregated page traffic and real-user performance reporting without cookies or local storage. This measurement runs independently of optional GA4 consent and is not used for enquiry content, treatment records, profiling, or advertising.

3. Disclosure of Your Information

We may disclose your personal information to third parties:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If SkinSurgeons or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of SkinSurgeons, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
• With medical professionals involved in your care, if necessary, to provide you with treatment.

Google acts as an analytics service provider only after consent. The analytics implementation is limited to site usage and performance data described above; it is not used for enquiry content, treatment records, profiling, or personalised advertising. Cloudflare separately processes the limited, cookieless Web Analytics metrics described above and does not receive enquiry answers or medical form content.

4. Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing your personal data. However, please note that no system is completely secure, and we cannot guarantee the absolute security of your information transmitted to our site.

5. Your Rights

Under the Data Protection Act 2018 and the UK GDPR, you have the following rights in relation to your personal data:

• Right to Access: You have the right to request a copy of the information that we hold about you.
• Right to Rectification: You have the right to correct data that we hold about you that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you can ask for the data we hold about you to be erased from our records.
• Right to Restrict Processing: Where certain conditions apply, you have the right to restrict our processing of your data.
• Right to Data Portability: You have the right to have the data we hold about you transferred to another organisation.
• Right to Object: You have the right to object to certain types of processing, such as direct marketing.
• Right to Object to Automated Processing: You have the right to object to decisions being taken by automated means.

If you wish to exercise any of these rights, please contact us using the contact information provided below.

Where processing relies on consent, you may withdraw it at any time. For GA4, use the Analytics settings control available on every page.

6. Retention of Data

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

7. Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for the privacy practices or content of those other websites.

8. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Phone: 0131 376 2744
• Email: hello@skinsurgeons.co.uk
• Address: 1 Waterfront Park, Edinburgh, EH5 1SD

Thank you for visiting SkinSurgeons.