Privacy Policy Sophistique Beauty Specialists®
Last Updated: July 2026
1. Introduction
Sophistique Beauty Specialists® is committed to protecting your privacy and handling your personal information responsibly, securely and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy legislation.
Your privacy is important to us. This Privacy Policy explains what personal information we collect, why we collect it, how it is used, how it is stored, who it may be shared with and your rights regarding your personal data.
This policy applies to all clients, prospective clients and visitors to our website.
2. Data Controller
The Data Controller responsible for your personal information is:
Sophie Cakans, BA (Hons)
First-Class Honours Graduate in Aesthetics
Founder & Director
Sophistique Beauty Specialists®
If you have any questions regarding this Privacy Policy or your personal information, please contact the clinic using the contact details published on our website.
3. Information We Collect
Depending on the services you receive, we may collect:
Personal Information
Full name
Postal address
Telephone number
Email address
Date of birth
Health Information
To safely provide treatments we may collect:
Medical history
Current medications
Allergies
Previous treatments
Relevant health conditions
Lifestyle information relevant to treatment planning
This information is classified as Special Category Personal Data under UK GDPR and is processed only where necessary to provide safe and appropriate treatment.
Treatment Information
We may also record:
Consultation notes
Treatment records
Patch test results
Consent forms
Treatment plans
Progress notes
Appointment history
Clinical Photography
Clinical photographs may be taken before, during and after treatment where appropriate.
These photographs are primarily taken:
to monitor treatment progress
to maintain accurate clinical records
to satisfy professional and insurance requirements
to demonstrate treatment outcomes where separate marketing consent has been provided.
Clinical photographs will never be used for marketing purposes without your separate written consent.
4. Map My Mole™ Skin Lesion Assessments
Where you choose to receive a Map My Mole™ Skin Lesion Assessment, additional information may be collected, including:
Clinical photographs
Dermoscopic images
Relevant medical history
Information relating to the skin lesion
This information is securely submitted through the official Map My Mole™ platform to consultant dermatologists for professional assessment.
Only the information necessary to provide this service will be shared.
5. How We Collect Information
Information may be collected when you:
Complete consultation forms
Book appointments
Contact us by telephone
Contact us by email
Contact us via WhatsApp Business
Book online
Attend appointments
Purchase products or services
Complete consent forms
6. How We Use Your Information
We process your information to:
Provide safe treatments
Assess treatment suitability
Deliver professional consultations
Maintain clinical records
Contact you regarding appointments
Send appointment reminders
Process payments
Respond to enquiries
Comply with legal and insurance obligations
Improve our services
We will only process your information where a lawful basis exists.
7. Lawful Basis for Processing
Depending on the circumstances, we process your personal information under one or more of the following lawful bases:
Consent
Performance of a contract
Compliance with legal obligations
Legitimate interests
Provision of health care services
Where consent is required, you may withdraw that consent at any time.
Withdrawal of consent does not affect processing already carried out lawfully.
8. Online Booking
Appointments are managed using Timely.
When you book an appointment online, relevant personal information is securely processed through Timely to allow us to manage appointments, treatment records and client communications.
9. Communications
We may contact you by:
Email
Telephone
SMS
WhatsApp Business
These communications may include:
Appointment confirmations
Appointment reminders
Changes to appointments
Treatment aftercare
Responses to enquiries
Information relevant to your treatment
Where you have given consent, we may also send occasional clinic news or promotional information. You may opt out of marketing communications at any time.
10. Payments
Payments may be made by:
SumUp
Bank Transfer
Cash
We do not store your full payment card details.
Payments processed through SumUp are handled in accordance with their own privacy and security policies.
11. CCTV
For the security of clients, visitors and the premises, CCTV operates externally around the clinic building.
CCTV is used solely for crime prevention, public safety and property protection.
Images are only viewed where necessary and may be shared with law enforcement where legally required.
No CCTV operates within treatment rooms.
12. Sharing Your Information
Your information will never be sold.
Information may only be shared where necessary with trusted providers including:
Timely
Map My Mole™
Consultant dermatologists providing Map My Mole™ assessments
SumUp
Professional insurers where required
Regulatory authorities where legally required
HMRC or law enforcement where legally required
Only the minimum information necessary is shared.
13. Data Security
Sophistique Beauty Specialists® takes appropriate technical and organisational measures to protect personal information.
These include:
Password-protected systems
Encrypted digital records where applicable
Secure online booking systems
Locked storage for paper records
Restricted access to personal information
Regular software updates
Secure disposal of confidential records
14. Data Retention
Treatment records are retained for seven years following your last appointment, or longer where required by law, insurance requirements or professional guidance.
Once retention periods have expired, records are securely destroyed.
15. International Transfers
Some of the service providers used by Sophistique Beauty Specialists® may process information outside the United Kingdom.
Where international transfers occur, appropriate safeguards will be implemented in accordance with UK GDPR to ensure your personal information remains protected.
16. Your Rights
Under UK GDPR you have the right to:
Be informed
Access your information
Correct inaccurate information
Request erasure where appropriate
Restrict processing
Data portability
Object to processing
Withdraw consent where consent is relied upon
Requests will normally be responded to within one calendar month.
17. Subject Access Requests
You may request a copy of the personal information held about you.
Requests should be submitted in writing.
Identification may be requested before information is released.
18. Data Breaches
Sophistique Beauty Specialists® has procedures in place for identifying, investigating and responding to personal data breaches.
Where required by law, breaches will be reported to the Information Commissioner's Office (ICO) and affected individuals within the required timescales.
19. Cookies
Our website may use cookies necessary for the operation of the website.
Where optional cookies are introduced in the future, appropriate consent mechanisms will be implemented.
20. Changes to this Policy
This Privacy Policy may be updated from time to time to reflect changes in legislation, services or business practices.
The latest version will always be available on our website.
21. Contact
If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact:
Sophistique Beauty Specialists®
Website: www.s-beauty-s.co.uk
If you remain dissatisfied with how your information has been handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Sophistique Beauty Specialists®
Where Skin Confidence Begins