Welcome to the privacy statement of Skin Clinic (Edinburgh) Ltd (Company Number SC669495) trading as DRVICTORIA™. 
 
Skin Clinic (Edinburgh) Limited respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you. 
 
This privacy policy is provided in a layered format so you can click through to the specific areas set out below. Please also use the Glossary to understand the meaning of some of the terms used in this privacy policy.
 
  1. IMPORTANT INFORMATION AND WHO WE ARE
  2. THE DATA WE COLLECT ABOUT YOU
  3. HOW IS YOUR PERSONAL DATA COLLECTED? 
  4. HOW WE USE YOUR PERSONAL DATA
  5. COOKIES
  6. DISCLOSURES OF YOUR PERSONAL DATA
  7. INTERNATIONAL TRANSFERS 
  8. DATA SECURITY
  9. DATA RETENTION
  10. YOUR LEGAL RIGHT

Glossary

Lawful Basis

Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.
 
Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
 
Necessary for us to provide health care or treatment means processing your special categories of personal data (i.e. Data concerning your Sex Life, Health Data and Treatment Data) where it is necessary for the purposes of preventive or occupational medicine, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of EU or UK law or pursuant to contract with a health professional (subject to required conditions and safeguards).
 
Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

Third Parties

External Third Parties
  • Service providers acting as processors based within the USA and European Union who provide IT and system administration services.
  • Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in the United Kingdom who provide consultancy, banking, legal, insurance and accounting services.
  • HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom who require reporting of processing activities in certain circumstances.
  • Other healthcare professionals (including your pharmacist and pathology labs) outside the company where this is necessary for treatment purposes.
  • Financial organisations where you seek to apply for finance to pay for your treatment plans.
  • Inspecting regulatory bodies such as Healthcare Improvement Scotland, Nursing and Midwifery Council etc.