Privacy policy

Who we are

SkinOps is operated by [Company name to be confirmed] (“we”, “us”). We are the controller of the personal information described in this policy. Contact us at hello@skinops.co.uk. [Registered address and ICO registration number to be added.]

Using SkinOps without an account

You can search and browse SkinOps without creating an account or giving us your name.

• Searches. The procedure and location you type are included in the page address so results can be shown. We do not link searches to you.
• Location lookup. To find a town or postcode on the map, the location you type is sent to postcodes.io, a postcode lookup service built on Ordnance Survey and Office for National Statistics open data.
• Maps. Maps on provider pages only load if you choose “Show map”. The map is provided by OpenStreetMap, which then receives your IP address. See the OpenStreetMap Foundation privacy policy.
• Server logs. Our hosting provider, Vercel, processes technical information such as IP addresses and browser details to deliver the website and keep it secure.
• Visitor statistics. We use Vercel Web Analytics to count visits, such as which pages are viewed, which website sent you here, and your country and type of device. It does not use cookies and does not build a profile of you. We only see totals, not individual visitors.
• Google Analytics, only if you accept. If you choose Accept in the cookie banner, Google Analytics records the pages you view, how you arrived, your approximate location, your type of device, and clicks on a clinic's website, booking or phone links, using cookies. Google provides this service and may process the information outside the UK. We have switched off Google signals and advertising features. If you reject, or don't choose, Google Analytics does not load. You can change your choice in cookie settings.
• Directory statistics. We keep our own counts of how the directory is used, so we can improve it and show clinics how often they are found: which clinic pages are viewed and whether their prices are looked at, clicks on a clinic's website, booking or phone links, and what people search for. Searches are recorded only as the procedure and a postcode district (such as PO6) or town, with the approximate centre of that district or town, never a full postcode or your own location. These counts do not use cookies and do not include your IP address or anything else that identifies you. We keep the detailed counts for 13 months, then only monthly totals.

When you contact us

If you email us, we use your name, email address and message to reply and keep a record of the conversation. Please do not send us medical information.

Provider and administrator accounts

If you have a SkinOps account, we store your name, email address and account activity to run the account and keep an audit trail of changes. Accounts are managed with Supabase, and our database is hosted in London.

Information about providers

Our listings include business information about healthcare providers, such as clinic names, addresses and CQC registration details, from public sources and from providers themselves.

Updating a clinic listing

If you update a clinic's listing through a private SkinOps update link, we keep your name, role and email address with the details you sent, so we can check them and contact you about them. We only publish details after checking them.

Legal basis

[To be confirmed with legal advice. Expected to include legitimate interests for running the directory and keeping it secure, and contract for provider accounts.]

How long we keep information

[Retention periods to be confirmed.]

Who we share information with

We use service providers to run SkinOps, including Vercel (hosting), Supabase (database and accounts), postcodes.io (location lookup) and, if you accept analytics cookies, Google (Google Analytics). Some of these providers may process information outside the UK. [Details of international transfer safeguards to be confirmed.] We do not sell personal information.

Your rights

Under UK data protection law you can ask to access, correct or delete your personal information, and object to or restrict how we use it. Contact us to make a request. You can also complain to the Information Commissioner’s Office.

Cookies

We never use advertising cookies, and only use Google Analytics cookies if you accept them. Read our cookie policy.