Who we are
Skinsight is a personalised skincare analysis service operating at skinsight.clinic. When you use our service, Skinsight acts as the data controller responsible for your personal data.
If you have any questions about how we handle your data, contact us at support@skinsight.clinic.
What data we collect
When you use Skinsight, we collect the following information:
- Photos of your face — submitted by you to enable skin analysis
- Questionnaire answers — including your age, gender, skin concerns, lifestyle factors, and budget
- Your email address — used to deliver your personalised routine
- Payment information — processed securely by Stripe. We do not store your card details.
A note on facial photos. Photos of your face may constitute sensitive personal data under UK GDPR. We collect these solely for the purpose of providing your skincare analysis. We do not use your photos for any other purpose, share them with third parties, or use them to train AI models.
How we use your data
We use your data only to provide the service you have paid for:
- To analyse your skin and produce your personalised skincare routine
- To deliver your routine to your email address
- To respond to any follow-up queries you send us
We do not use your data for marketing, advertising, or any purpose beyond delivering your routine unless you have explicitly asked us to contact you.
Lawful basis for processing
We process your personal data on the basis of contract performance — you have paid for a service and we need your data to deliver it. For facial photos, we rely on your explicit consent, which you provide by submitting the form.
Who we share your data with
We do not sell or share your personal data with third parties for marketing purposes. We use the following trusted service providers to operate the service:
- Tally — to collect your form submission
- Stripe — to process your payment securely
- SendGrid — to deliver your routine by email
Each of these providers is bound by their own privacy policies and GDPR-compliant data processing agreements.
How long we keep your data
We retain your submission (photos, answers and routine) for 90 days after delivery, in case you have questions or need a follow-up. After that, your data is permanently deleted. You can request deletion at any time by emailing us.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of any inaccurate data
- Request deletion of your data at any time
- Withdraw consent for processing of your photos
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email us at support@skinsight.clinic and we will respond within 30 days.
Cookies
Our website uses no tracking cookies and does not use third-party analytics tools. We do not track your behaviour across other websites.
Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
For any privacy-related questions, email us at support@skinsight.clinic.