Privacy policy | The Skincare Concierge

This policy explains what personal information we collect when you visit this website, open an account, buy from us or have a skin consultation, why we collect it, who we share it with and the choices you have.

Who we are

The Skincare Concierge, by Tanisha Allen is a trading name of Chichester Beauty Aesthetics Limited. The company is the data controller for the personal information described in this policy.

Company: Chichester Beauty Aesthetics Limited
Trading as: The Skincare Concierge, by Tanisha Allen
Registered office: 13 Market Road, Chichester PO19 1JW
Company number: 12870854 (England and Wales)
ICO registration: ZB413824
Privacy questions: chichester@thebeautyaestheticsgroup.co.uk
Phone: 01243 697979

What we collect

Order details: your name, email address, phone number, delivery address, what you buy and, if you choose click and collect, the clinic you collect from.
Your account: your email address and, if you add them, your name, phone number and birthday (day and month only, for birthday points). An order opens an account for you automatically, so your order and points are kept together.
Inner Circle points: the points you earn and use, and why (for example an order, a skin check-in or a review), your tier, and whether you joined through a friend's link.
Payment: a record that you have paid and how. Card details are handled by Stripe and never stored by us; we never see your full card number.
Consultation details: the skin information you share with us at a consultation, such as your skin concerns, the products you use, allergies, medicines or skin conditions, and the routine we recommend for you.
Messages: anything you tell us when you contact us by email or phone.
Your basket: saved in your own browser, not sent to us (see Cookies and your browser).

Some of the skin information you share at a consultation can be health information. This is a special category of personal information, and we take particular care with it. We only ask for what we need to give you safe, suitable advice.

How we use it, and our legal reasons

To process your order, take payment, post it or have it ready to collect, and handle returns: to carry out our contract with you.
To keep tax and accounting records: because the law requires us to.
To give you a consultation and recommend products: to provide the service you have asked for. We only use health information you share with your explicit consent. You can withdraw your consent at any time; we will then stop using that information, although we may no longer be able to advise you.
To run your account and your Inner Circle points: to provide the account and rewards you have joined, under our terms.
To check that orders for ranges sold after a consultation follow one: our legitimate interest in meeting the conditions those brands set for authorised providers.
To answer your questions: our legitimate interest in replying to people who contact us.
To improve our service and deal with complaints or claims: our legitimate interests.

We do not use your information for advertising, and we never sell it.

We only share your information when we need to. We use these service providers, who act on our instructions:

Stripe: payments at checkout. Stripe processes your payment details for us; you can read Stripe's privacy policy.
Supabase: stores your account, orders and points for us, on servers in London.
Fresha: our clinics' booking system, used when you book your free consultation. Fresha's own terms and privacy notice apply to your booking.
Microsoft: our email system.
Resend: sends our emails from this website, such as your sign-in code, using your email address.
Netlify: hosts this website, so it sees basic technical information, such as your IP address, needed to show you the site.
Our delivery service: your name and address, to post your order to you.

If you choose to pay with Klarna or Clearpay, they use your information under their own privacy policies to offer and manage your payment plan.

We may also share information with our insurers or legal advisers if there is a claim, and with regulators or the police where the law requires it.

Some of these providers store information outside the UK. Where they do, it is protected by safeguards approved under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement.

How long we keep it

Order and payment records: 6 years, for tax and accounting, as the law requires.
Your account and points: while your account is open. If you ask us to close it, or there is no order, consultation or sign-in for 3 years, we delete it, apart from the order records we must keep.
Consultation notes and routines: 8 years after your last consultation with us.
Messages that do not lead to an order or consultation: up to 12 months.

Your rights

You have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct anything that is wrong or incomplete;
ask us to delete your information, where we no longer need to keep it;
ask us to limit how we use it, or object to how we use it;
ask for information you gave us in a format you can take elsewhere;
withdraw your consent at any time, where we rely on it.

To use any of these rights, email chichester@thebeautyaestheticsgroup.co.uk or call 01243 697979. We will reply within one month. There is usually no charge.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at www.ico.org.uk or on 0303 123 1113.

Cookies and your browser

This website does not use advertising or analytics cookies at present, and we do not track you across other websites.

Your basket is saved only in your own browser (in its local storage), so it is still there if you come back. It stays on your device until you order or empty it, and you can clear it at any time in your browser settings.
When you sign in, small cookies keep you signed in on that device until you sign out. They are strictly needed for your account to work.
If you follow a friend's refer-a-friend link, a cookie remembers their code for 30 days, so you both get your points when you place your first order.
The fonts on this website are served from this website itself, so loading a page does not send your information to a font provider.
Payment takes place on Stripe's secure checkout page, and consultation booking on Fresha's website. Each has its own privacy and cookie policies.

If we add any cookies that are not strictly needed for the website to work, we will ask for your consent first and update this policy.

Keeping your information safe

We limit access to your information to the people who need it, and keep it in secure, password-protected systems.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.

See also our terms and conditions and delivery and returns.