Who are we?
We are Skin & Shape UK Ltd, located at [insert address here]. We act as the data controller for your personal data when you use our Platforms and Services.
Our Pharmacist Independent Prescriber & Superintendent Pharmacist is Zuhra Hamza, registered with the General Pharmaceutical Council (GPhC), registration number 2225385. The Pharmacy is regulated by the General Pharmaceutical Council.
Regulatory Authority Contact Information:
- The General Pharmaceutical Council
- 25 Canada Square, London, E14 5LQ
- For further details or to verify registration, you can check the prescriber status on the GPhC website at www.pharmacyregulation.org.
Why are you reading this?
This Privacy Notice explains how we protect your personal data and respect your privacy in accordance with data protection laws, including the UK GDPR.
Our Platforms connect customers with our registered Partner Prescribers (as defined in our Terms & Conditions). Please note that Partner Prescribers are separate and independent controllers of your personal data and will process data in line with their own privacy policies.
Does this apply to you?
If you access our Platforms or Services for any reason, this Privacy Notice applies to you. For the purposes of this Privacy Notice, “customers” also include potential customers who have started but not completed the online questionnaire on the Skin & Shape website (www.skinandshape.co.uk). This also applies if you or your employer has a business relationship with us.
Please take a moment to read this document.
B. Personal Data
How do we collect your personal data?
From the first moment you interact with Skin & Shape, we may collect personal data. This can happen in various ways:
- Data you voluntarily provide.
- Data automatically collected (e.g., through cookies).
- Data collected from third parties, such as Partner Prescribers.
What personal data do we collect?
- The type of data we collect depends on your relationship with us, but it may include:
- [List data types such as name, email, health information, etc.]
Why do we collect your personal data?
We process personal data for the following purposes and rely on these legal bases:
- To provide our services to you
- To offer and manage our services, including account registration, connecting you to Partner Prescribers, and providing advice.
- Legal basis: Contractual obligation, Consent (for health data processing).
- To fulfil your orders
- To process and deliver your prescriptions.
- Legal basis: Contract, Provision of health treatment.
- To communicate with you
- To manage communications about orders, services, or customer support queries.
- Legal basis: Contract, Legitimate interests.
- To send tailored marketing
- To send promotions or reminders you’ve requested or may find useful.
- Legal basis: Consent, Explicit Consent (for health data).
- To improve our services
- For analytics, research, and development purposes.
- Legal basis: Legitimate interests, Consent.
- To comply with legal obligations
- To meet legal or regulatory requirements, such as identity checks.
- Legal basis: Legal obligation.
- To manage our business relationships
- To handle contracts or professional relationships with you or your employer.
- Legal basis: Legitimate interests.
- To enforce our rights
- To investigate or act against fraud, protect our legal rights, and manage disputes.
- Legal basis: Legitimate interests.
Who do we share your data with?
- We may share your personal data with:
- Partner Prescribers for consultations.
- Your GP, where required and consented.
- Third-party service providers (e.g., IT, payment processors, delivery services).
- Regulatory authorities, where legally necessary.
- Other parties in the event of corporate transactions.
C. Your Rights
You have rights regarding your personal data, including:
- Access: Request a copy of the data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Portability: Receive your data in a transferable format.
- Erasure: Request data deletion, where applicable.
- Objection: Object to processing based on legitimate interests.
- Restriction: Limit how we use your data.
- Withdrawal of Consent: Revoke consent for data processing at any time.
- Lodge a Complaint: Contact the ICO via www.ico.org.uk if unsatisfied with our response.
- You can exercise your rights by contacting us at hi@skinandshape.co.uk.
D. General Provisions
Contact us
- If you have any questions, concerns, or complaints about this Privacy Notice or how we handle your data, please email us at hi@skinandshape.co.uk.
Changes
- We may update this Privacy Notice from time to time. Please check our website periodically to stay informed of any changes.
