Privacy
What we write down about you, and why.
A clinic has to keep notes. This page says exactly what those notes contain, who is allowed to see them, and how long they stay in the drawer.
Written in plain English on purpose. If a sentence here is unclear, call us and ask.
The Controller
This notice will be reviewed and countersigned by the clinic before launch. If anything in it does not match what actually happens in the room, tell us and we will correct the notice.
The records are ours. We are responsible for them.
SKiN at The Collective decides what is recorded about you and what happens to it. In data protection language that makes us the controller. It means the responsibility stops here and not with a supplier.
- Controller
- SKiN at The Collective
- Address
- 36 Engineer Lane, Gibraltar GX11 1AA
- Telephone
- +350 200 64464
- Ask for
- The clinic manager
What We Collect
Four things, and nothing beyond them.
Contact details. Your name, telephone number, email address and, if you give it, your date of birth. Enough to confirm an appointment and to know we are treating the right person.
Medical history. Taken at consultation, on paper or on screen, and reviewed each time you return. Medication, allergies, skin conditions, pregnancy, anything that changes whether a treatment is safe for you.
Treatment records. What was done, on what date, at what settings, by whom, and how your skin responded. This is the file that keeps a course of treatment safe over months.
Photographs. Only ever with separate written consent, given for a stated purpose. Clinical consent and marketing consent are two different signatures. You can decline either and still be treated.
We do not buy lists, we do not enrich your record from anywhere else, and we do not sell anything to anyone.
Lawful Basis
Health information sits in a stricter category than a phone number. It needs your explicit consent, and it gets it.
Why we are allowed to hold it.
Every piece of information has to earn its place under one of a short list of legal grounds. Here is the mapping, in full.
- Booking and delivering your treatment
- Contract
- Medical history and treatment records
- Explicit consent
- Photographs, clinical or otherwise
- Explicit consent
- Appointment reminders
- Legitimate interests
- Keeping the clinic’s own accounts
- Legal obligation
Consent given can be withdrawn. Withdrawing consent for photographs does not affect your treatment. Withdrawing consent for your medical history means we cannot safely treat you, and we will say so rather than proceed.
Who Sees It
The booking system, the clinic, and the law.
Our diary runs on Fresha. When you book, your name and contact details go into Fresha’s system, not ours. Fresha is a separate company acting as a processor on our instructions, with its own privacy notice, and you should read it if you want the detail of how it handles what you type into a booking form.
Your medical history and your treatment records are held by the clinic. They are not published, not shared with the salon next door, and not passed to anyone for marketing.
The clinicians and reception staff who need it to treat you, and no one else on the premises.
Fresha, as the booking system, for appointment and contact details only.
A doctor or hospital, if you ask us to send your records there, or if you need urgent care and we are asked for them.
A court, a regulator or the police, where the law requires it. That is the whole list.
How Long
Clinical records outlive the treatment.
We keep clinical records for at least eight years after your last appointment, in line with healthcare record-keeping expectations in Gibraltar.
That is longer than most people expect, and it is deliberate. A record of the settings used on your skin four years ago is what makes the next session safe.
We are confirming the exact figure with a Gibraltar adviser before launch and will publish it here once it is settled. If it changes, the change will be to a number, not to the principle.
Contact details you gave only for a booking are cleared sooner. Photographs held under marketing consent are removed as soon as you withdraw that consent.
Cookies
There is no banner on this site because there is nothing for you to agree to.
No advertising cookies. No banner.
This site sets no advertising cookies and no tracking cookies. We do not run pixels for social platforms and we do not build an audience out of the people who read these pages.
We do count visits, because we want to know which pages are useful. The analytics we use are privacy-preserving: they record the page, the country and the referring site in aggregate, without a cookie and without anything that identifies you. Nothing follows you off this domain.
A consent banner exists to obtain permission for tracking. We are not tracking you, so there is nothing to consent to, so there is no banner.
Your Rights
What you can ask us to do.
Ask in person, by telephone or in writing. We will not charge you for any of it, and we will answer within one month.
Access. Ask for a copy of everything we hold about you, including your treatment record. You do not have to give a reason.
Correction. Tell us anything that is wrong and we will correct it. In a clinical record we correct by adding a dated note rather than by erasing, because the history has to stay readable.
Erasure. Ask us to delete what we hold. We will, except where a clinical record-keeping duty says the file must be retained for the period above. In that case we will tell you plainly what we are keeping and why.
Objection. Tell us to stop contacting you, or to stop any use of your information that relies on legitimate interests. Reminders stop the moment you say so.
Withdrawal. Take back a consent you gave, photographs included, at any time and without explaining yourself.
Complaint. Raise it with us first if you can, through our complaints procedure. You are also entitled to complain to the Gibraltar Regulatory Authority, which oversees data protection here, and you do not need our permission to do it.
Signature
Ask us anything on this page and you will get a straight answer.
Call +350 200 64464 36 Engineer Lane, Gibraltar
Last reviewed: August 2026.