Privacy Policy

Last updated: 23/02/2026

Legacy Beauty & Skin Clinic Limited (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use and protect your information when you visit our website or use our services.

1. Who We Are

Legacy Beauty & Skin Clinic Limited
Registered Office:
1a Nags Corner, Wiston Road,
Nayland, Colchester,
England, CO6 4LT

Email: info@legacyskinclinic.co.uk

We are the “data controller” for the purposes of UK data protection law.

2. What Personal Data We Collect

Contact Form (Ninja Forms)

  • Name
  • Email address
  • Phone number
  • Any information you include in your message

This information is sent to us via email at info@legacyskinclinic.co.uk.

Appointment Bookings (Timely)

Appointments are managed using the Timely booking platform. When booking, you may provide:

  • Name
  • Contact details
  • Appointment details
  • Payment information (processed securely by Timely or its payment provider)

We do not store full payment card details on our website.

Website Analytics

Through Google Site Kit (Google Analytics and Google Search Console), we may collect:

  • IP address
  • Device type
  • Browser type
  • Pages visited
  • Time spent on site
  • General location (town/region level only)

This data is anonymised and used only to monitor website performance.

3. How We Use Your Data

  • Respond to enquiries
  • Manage and confirm appointments
  • Provide treatments and services
  • Process payments
  • Improve our website
  • Comply with legal obligations

We do not sell your data and we do not use your data for marketing emails.

4. Lawful Basis for Processing

  • Consent – when you contact us directly
  • Contract – when you book an appointment
  • Legitimate interests – to operate and improve our website
  • Legal obligation – where required for tax or regulatory purposes

5. Third-Party Providers

We may share data with trusted service providers who help operate our business:

  • Timely – booking system
  • Payment processors used by Timely
  • KnownHost – website hosting provider
  • Google – analytics and search console

These providers process data securely and in accordance with UK data protection law.

6. Data Security

We use appropriate technical and organisational measures to protect your personal data, including:

  • Secure hosting via KnownHost
  • SSL encryption
  • Secure booking platform
  • Password-protected email systems

We retain data only for as long as necessary to fulfil its purpose or meet legal obligations.

7. Your Rights

Under UK GDPR, you have the right to:

  • Request access to your data
  • Request correction
  • Request deletion
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise your rights, email: info@legacyskinclinic.co.uk

8. Complaints

If you are unhappy with how we handle your data, you may contact:

Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk

We would appreciate the opportunity to resolve concerns before you contact the ICO.


Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help improve functionality and performance.

Cookies We Use

Essential Cookies

These are required for the website to function properly.

Analytics Cookies

We use Google Analytics via Google Site Kit to understand how visitors use our website. This may collect anonymous usage data, device information and regional location data.

We do not use cookies for advertising.

Cookie Consent

We use a cookie consent tool provided through the Blocksy theme. You can accept or decline non-essential cookies when you first visit the website.

Managing Cookies

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect website functionality.

Policy Updates

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.