Privacy Policy

1. Who We Are

Dermabelles Aesthetics is the controller of the personal information described in this policy. If you have questions about this policy or your personal data, contact us at hello@dermabelles.com.

2. Information We Collect

We may collect the following information depending on how you use the platform:

• Identity and contact details, such as name, email address and phone number.
• Account details, including login information and profile preferences.
• Appointment details, including treatment selections, booking times and notes.
• Skin profile information you choose to provide, such as skin concerns, allergies, sensitivities and routine preferences.
• Order and delivery information when shopping is enabled, such as addresses, products, order status and payment references.
• Messages you send through contact forms or support channels.
• Technical information, such as device, browser, IP address and website usage data.

3. How We Use Your Information

We use personal information to:

• create and manage your account;
• manage bookings, appointment reminders and client records;
• respond to enquiries and provide customer support;
• process orders, payments, delivery and refunds when the shop is available;
• send transactional emails such as confirmations and important service updates;
• improve our website, services, product range and client experience;
• protect the platform from fraud, abuse and security risks;
• comply with legal, regulatory, tax and accounting obligations.

4. Our Lawful Bases

We rely on different lawful bases under UK data protection law, including:

• Contract: to provide appointments, accounts, orders and services you request.
• Consent: where you choose to receive marketing or provide optional information.
• Legal obligation: where we need to keep business, tax, health, safety or regulatory records.
• Legitimate interests: to run, secure and improve our business, provided those interests are not overridden by your rights.

Information about allergies, sensitivities or treatment suitability may be more sensitive. We only ask for it where relevant to your care, safety or requested service.

5. Payments, Email and Service Providers

We use trusted service providers to operate the platform, including hosting, database, authentication, payment, analytics and email providers. These providers only receive the information needed to perform their services. Card payments are processed by our payment provider; we do not store full card details on our systems.

6. Marketing

We only send marketing emails where we have permission or another lawful basis to do so. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us. We will still send essential service messages, such as booking, payment or account notifications.

7. Cookies and Similar Technologies

We may use cookies and similar technologies to keep the site working, remember preferences, secure sessions and understand website performance. You can control cookies through your browser settings. Some essential features may not work correctly if cookies are disabled.

8. How Long We Keep Information

We keep personal information only for as long as needed for the purposes described in this policy, including service delivery, legal compliance, dispute resolution and business records. Retention periods vary depending on the type of information and our legal or operational obligations.

9. Your Rights

You may have rights to access, correct, delete, restrict or object to our use of your personal information, and to request a copy of your data. Where we rely on consent, you can withdraw it at any time.

You also have the right to complain to the Information Commissioner’s Office. We would appreciate the chance to help first, but you can contact the ICO at ico.org.uk/make-a-complaint.

10. Contact

To ask about this Privacy Policy or your personal data, email hello@dermabelles.com.