Who we are
Skin Surgeons Edinburgh is a trading name of Nassar Healthcare Ltd, a company registered in Scotland (company number SC818971), registered office 29/10 Brighouse Park Cross, Cramond, Edinburgh EH4 6GW. Nassar Healthcare Ltd is the data controller for personal information collected through this website. We are registered with the Information Commissioner's Office (registration number ZC110678).
Contact for privacy questions: hello@skinsurgeons.co.uk · 0131 376 2744.
Consultations and treatment take place at Waterfront Private Hospital, Edinburgh. Our role is limited to handling your initial enquiry. Booking, payment, your clinical records and any complaints about your care are handled by Waterfront Private Hospital, which is the data controller for that information under its own privacy notice: https://www.waterfronthospital.co.uk/privacy-policy
What we collect
- Enquiry details you give us through our forms, email or phone: your name, email address, phone number, the treatment you're interested in, and any description or photographs of your skin concern.
- Health information. A description of a mole, cyst or other lesion is health information, which data protection law treats as special category data. Please share only what you are comfortable sharing; we'll ask for anything else we need at your consultation.
- Website usage data. See "Cookies and analytics" below.
- We do not collect payment details on this website. If you book through Waterfront Private Hospital's booking link, any payment details you enter there are handled by the hospital under its own privacy notice.
How and why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to your enquiry and arranging a consultation | Taking steps at your request before entering into a contract (Art. 6(1)(b)); for health information, the provision of health care by or under the responsibility of a health professional bound by confidentiality (Art. 9(2)(h) and DPA 2018 Sch. 1 para. 2) |
| In some cases, passing your enquiry to Waterfront Private Hospital so they can arrange your appointment. Usually we send you a link to book directly with the hospital instead | As above |
| Keeping records of enquiries and correspondence | Legitimate interests (Art. 6(1)(f)): running the practice and handling any follow-up or complaint |
| Website analytics (Google Analytics) | Your consent, given through the cookie banner (Art. 6(1)(a)) |
| Cookieless performance measurement (Cloudflare Web Analytics) | Legitimate interests: keeping the site working and fast. It sets no cookies and doesn't identify you |
We don't sell your information or use it for marketing without your consent. We don't make decisions about you by automated means.
Who we share it with
We use trusted service providers who process information on our behalf under contract:
- Typeform (Typeform S.L., Spain): hosts our enquiry forms and sends us your responses.
- Google (Google Workspace email; Google Analytics, only with your consent).
- Cloudflare: hosts the website and provides cookieless performance measurement.
- Trustindex: displays our verified review rating. On pages that show our reviews, the review widget loads from Trustindex's servers, which receive standard connection information such as your IP address. It sets no cookies.
- Waterfront Private Hospital, to book and deliver your care (see above).
We may also disclose information where the law requires it, or to other healthcare professionals involved in your care with your knowledge.
Some providers may process data outside the UK. Where they do, transfers are protected by UK adequacy regulations or approved contractual safeguards.
How long we keep it
- Enquiry information (form responses, related emails and any photographs you send us): 2 years from our last contact with you, then deleted. This applies whether or not you go on to have treatment.
- We don't keep clinical records. If you have treatment, your clinical records are held and retained by Waterfront Private Hospital under its own policy.
- Analytics data: Google Analytics retention set to 14 months.
Cookies and analytics
Google Analytics runs only if you accept analytics in the cookie banner, and you can change your choice at any time via our cookie settings. Google Signals and advertising features are switched off. Cloudflare Web Analytics measures page performance and traffic without cookies and without identifying you.
Your rights
You have the right to access, correct, erase or restrict the use of your personal information, to object to its use, to data portability, and to withdraw consent at any time. To exercise these rights, contact hello@skinsurgeons.co.uk. We'll respond within one month.
Complaints to the regulator
If you're unhappy with how we've handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint · 0303 123 1113.
Security
We use appropriate technical and organisational measures to protect your information, including encrypted connections and access-controlled accounts. No system is completely secure, so please don't send highly sensitive information by email if you'd rather discuss it at your consultation.
Changes
We'll post any changes on this page with a new "last updated" date.