Privacy Policy

1. Who we are

LiShic Beauty is run by Jenny Ho and is based within Ishoka, 11 Albyn Terrace, Aberdeen AB10 1YP. When this policy says "we", "us" or "our", it means LiShic Beauty.

We are responsible for the personal information you give us. Data protection law calls this being the "data controller". We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have a question about this policy or about your information, contact Jenny:

• Email: [email protected]
• Phone: +44 7716 081772
• Address: LiShic Beauty, within Ishoka, 11 Albyn Terrace, Aberdeen AB10 1YP

2. The information we collect

We collect information when you book online, fill in a consultation or consent form, message us, or come in for a treatment.

• Contact details. Your name, phone number and email address, plus your address and date of birth where our records need them.
• Booking details. The appointments and treatments you book, and the booking fees and payments you make. Card payments are handled securely by our payment provider, so we do not see or store your full card number.
• Health information. The answers you give on consultation forms, such as medical conditions, allergies, medication, pregnancy and skin concerns, and the results of any patch test.
• Treatment records. What was carried out and when, the products or pigments used, your signed consent forms and the aftercare advice you were given.
• Photos. Before and after photos taken for your treatment record.
• Messages. Emails, texts, calls and social media messages between us.
• Website information. Basic details about how the website is used. See the Cookies section below.

3. Why we use it

We only use your information when the law allows us to. Here is what we use it for, and why we are allowed to.

Booking your appointments, taking payment and sending confirmations and reminders

We need it to provide the service you have booked. This is our contract with you.

Checking a treatment is safe and suitable for you

You give us your clear consent when you complete a consultation form.

Keeping treatment and consent records

Licensing, insurance and legal rules require it, and the records let us answer any questions or claims later.

Replying to your enquiries and aftercare questions

It is in both our interests that we can answer you. The law calls this "legitimate interests".

Keeping accounts and tax records

The law requires it.

Sending you news and offers

Only if you have asked to receive them. You can unsubscribe at any time.

Sharing photos of your results on our website or social media

Only with your separate written consent, which you can withdraw at any time.

4. Health information and photos

Health information has extra protection in law, where it is called "special category" information. We treat it with extra care.

• We only ask for what we need to treat you safely.
• It is kept in secure systems or locked storage, and is only seen by the people who need it to carry out or support your treatment.
• It is never used for marketing.

You can choose not to share health information. If you do, we may not be able to carry out a treatment, because we cannot be sure it is safe for you.

Your photos

Before and after photos are part of your treatment record. We will never post a photo of you on our website or social media unless you have agreed in writing. You can say no and still have your treatment.

If you change your mind later, tell us. We will remove the photo from our own pages and stop using it.

5. Who we share it with

We never sell your information. We share it only when it is needed, with:

• the companies that run our website, online booking and reminder messages
• our payment provider, to take booking fees and payments
• a prescriber or other medical professional, where a treatment requires one
• our insurer and professional advisers, if there is a claim or complaint
• our accountant and HMRC, for accounts and tax
• the local council, regulators or the police, where the law requires it

These companies and organisations may only use your information for the job they do for us. Some of them store information outside the UK. Where that happens, it is protected by safeguards recognised under UK data protection law.

6. How long we keep it

We keep your information only for as long as we need it.

• Treatment records, consultation and consent forms, and treatment photos: 7 years after your last treatment. Insurance and licensing rules require us to keep these.
• Booking and payment records: 6 years, for tax purposes.
• Enquiries that do not lead to a booking: up to 12 months.
• Details used to send you news and offers: until you unsubscribe.
• Photos you agreed we could share publicly: until you withdraw your consent.

After these periods your information is securely deleted or destroyed.

7. Keeping it safe

We look after your information carefully. Digital records are kept in password protected systems, access is limited to those who need it, and paper forms are locked away.

If something ever goes wrong that puts your information at risk, we will tell you and the Information Commissioner's Office where the law requires us to.

8. Your rights

You have the right to:

• be told how your information is used, which is what this policy is for
• see a copy of the information we hold about you
• have anything that is wrong or out of date corrected
• ask us to delete your information, where we do not have a legal reason to keep it
• ask us to limit how we use it, or object to how we use it
• receive your information in a format you can pass to another provider
• withdraw your consent at any time, for example for photos or marketing

To use any of these rights, email or call Jenny using the details at the top of this page. It is free, and we will reply within one month. We may ask you to confirm who you are first, so nobody else can get your information.

9. Cookies

Cookies are small files that a website stores on your phone or computer. Our website uses the cookies it needs to work properly, including for the online booking calendar.

If we use any cookies that are not essential, for example to measure visits or for advertising, we will ask for your permission first.

You can block or delete cookies in your browser settings, although the booking calendar may not work properly without them.

10. Children

Our website is not aimed at children. If you are under 18, please ask a parent or guardian to contact us for you.

11. Questions and complaints

If you are unhappy with how we have handled your information, please contact Jenny first and we will do our best to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. You can do this at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. Any changes will be shown on this page.