PRIVACY POLICY & GDPR NOTICE
Last updated: 25 September 2026
Data Controller: Deluxe Dermis Ltd. T/A Näkemiin
Website: www.nakemiin.com
Booking System: Fresha
Contact Email: info@nakemiin.com
Business Address: 72 High Street, Harrold, Bedfordshire, MK43 7BH.
1. Introduction
At Näkemiin, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how Deluxe Dermis Ltd. T/A Näkemiin collects, uses, stores and protects your personal data when you visit our website, contact us, book an appointment or receive a treatment.
We process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable data-protection legislation.
2. Personal Data We Collect
Website Information
When you visit our website, IONOS and permitted website tools may collect information including:
- your IP address
- browser and device information
- cookie preferences
- pages visited and website interactions
Bookings and Payments
When you book through Fresha, information collected may include:
- your name
- email address
- telephone number
- appointment and purchase history
- booking preferences
- payment information
Payments are processed securely by Fresha and its payment providers. Näkemiin does not have access to your complete card details. Fresha’s own Privacy Policy also applies when you use its services.
Consultation and Treatment Information
To assess treatment suitability and provide services safely, we may collect:
- medical history and relevant health information
- medications, allergies and contraindications
- skin conditions and treatment concerns
- consultation forms and treatment notes
- patch-test records
- treatment progress and outcomes
Health information is classed as special-category personal data and is given additional protection.
Communications
We may collect personal information that you provide when contacting us through:
- telephone or text message
- website contact forms
- social-media messages
- Photographs
With your knowledge, we may take photographs for treatment assessment, progress monitoring, record keeping or insurance purposes.
Photographs will only be used for marketing where you have given separate, explicit consent. You may withdraw marketing consent at any time, although this will not affect any lawful use that took place before consent was withdrawn.
3. How We Use Your Data
We may use your personal data to:
- manage bookings, appointments, cancellations and payments
- provide treatments and assess whether they are suitable for you
- maintain consultation, consent, patch-test and treatment records
- contact you about appointments, enquiries or changes to our services
- provide aftercare and respond to treatment concerns
- meet our legal, regulatory and insurance obligations
- establish, exercise or defend legal or insurance claims
- maintain the security and performance of our website
- improve our services and client experience
- send marketing communications where you have consented or where otherwise permitted by law
We do not sell or trade your personal data.
4. Our Lawful Bases for Processing
We rely on the following lawful bases under the UK GDPR:
Contract — where processing is necessary to manage your booking, take payment and provide the treatment or service you have requested.
Legal obligation — where we must retain or disclose information to meet legal, tax, accounting or regulatory requirements.
Legitimate interests — where necessary to operate and protect our business, maintain appropriate records, manage enquiries and complaints, prevent fraud, improve our services and establish or defend legal or insurance claims. We consider and balance these interests against your rights and freedoms.
Consent — for marketing communications, marketing photographs and non-essential website cookies where consent is required. You may withdraw your consent at any time.
Health and Special-Category Information
Health and medical information is special-category personal data.
Our Article 6 lawful basis is normally that the processing is necessary to provide the treatment or service you have requested. Where required, we also rely on your explicit consent under Article 9(2)(a) of the UK GDPR to process relevant health information for consultation, treatment suitability, safety and record-keeping purposes.
If you do not provide information that is necessary to assess treatment suitability, we may be unable to provide the treatment safely.
5. How We Store and Protect Your Data
Client details, bookings, consultation information and treatment records may be stored securely through Fresha and other authorised business systems.
Our website is hosted by IONOS, which may process limited website and technical information on our behalf.
We take appropriate steps to protect personal data, including:
- restricting access to authorised team members
- using password-protected accounts and devices
- using secure booking and payment providers
- keeping systems and devices updated where reasonably possible
- storing paper records securely where these are used
- securely deleting or disposing of information when it is no longer required
Payments are processed by authorised payment providers. Näkemiin does not store or have access to complete payment-card details.
Although we take reasonable precautions, no electronic system or method of transmission can be guaranteed to be completely secure.
6. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, regulatory, insurance and record-keeping requirements.
Our usual retention periods are:
- consultation forms, treatment notes and patch-test records: up to seven years after the last treatment, or longer where required by law, our insurer or an ongoing claim
- booking and transaction records: for the period required for accounting, tax and business-record purposes
- general enquiries and correspondence: normally up to 12 months after the matter has concluded, unless further retention is necessary
- marketing contact details: until you unsubscribe or withdraw consent
- marketing photographs: until consent is withdrawn or the images are no longer required
- website and analytics information: according to our cookie settings and the retention periods used by the relevant provider
When information is no longer required, it will be securely deleted, anonymised or destroyed.
7. Who We Share Your Data With
Where necessary, we may share personal data with:
- Fresha for booking, client-record and payment management
- payment providers, including SumUp and payment services connected to Fresha
- IONOS for website hosting and related website services
- authorised members of the Näkemiin team who require the information to perform their role
- our accountant, professional advisers and IT-support providers
- our insurer where information is required for advice, notification or a claim
- regulators, law-enforcement agencies, courts or other authorities where disclosure is legally required
- prospective professional advisers or parties involved in the sale, restructuring or transfer of the business, subject to appropriate confidentiality protections
These providers may only use personal data for the relevant service or lawful purpose.
Where a provider processes personal data outside the United Kingdom, we will rely on appropriate safeguards as required by data-protection law.
We do not sell or trade personal data.
8. Your Data-Protection Rights
Depending on the circumstances, you may have the right to:
- request access to the personal data we hold about you
- ask us to correct inaccurate or incomplete information
- request deletion of your personal data where legally permissible
- request restriction of processing
- object to processing based on legitimate interests or direct marketing
- request the transfer of certain personal data to you or another provider
- withdraw consent at any time where processing relies on consent
- complain to the Information Commissioner’s Office
Some rights are not absolute, and we may need to retain certain information to meet legal, insurance or record-keeping obligations.
To exercise your rights, contact info@nakemiin.com. We may ask for information to verify your identity before fulfilling a request.
You can also contact the Information Commissioner’s Office through www.ico.org.uk if you are unhappy with how your personal data has been handled.
9. Cookies and Website Tracking
Our website may use:
- strictly necessary cookies required for security, website operation and remembering your cookie choices
- analytics cookies that help us understand how visitors use the website and improve its performance
Strictly necessary cookies may be used without consent. Analytics and other non-essential cookies will only be used where you have given consent through our cookie banner.
You can accept or reject non-essential cookies and change your preferences through the cookie settings available on our website. You may also manage cookies through your browser settings.
For further details, please read our separate Cookie Policy.
10. Children’s Privacy
Some of our treatments and services are subject to minimum-age requirements.
Where we provide an age-appropriate service to a client under 16, consent from a parent or legal guardian may be required. We may collect limited personal and health information about the young person where necessary for booking, consultation, treatment safety and record keeping.
Parents or guardians should contact us before booking a treatment for anyone under 16 so that we can confirm suitability, consent requirements and any service-specific age restrictions.
We do not knowingly use a child’s personal data for marketing without the appropriate consent.
11. Changes to This Privacy Policy
We may update this Privacy Policy when our services, suppliers, business practices or legal obligations change.
The latest version will be published on our website, and the “Last updated” date at the top of the policy will be revised. Where a change significantly affects how we use personal data, we will take reasonable steps to bring it to the attention of affected clients.
12. Contact Information
For questions about this Privacy Policy, how we use your personal data or to exercise a data-protection right, please contact:
Data Controller: Deluxe Dermis Ltd. T/A Näkemiin
Trading Address: 72 High Street, Harrold, Bedfordshire, MK43 7BH
Email: info@nakemiin.com
Telephone: 07572 730948
You also have the right to raise a concern with the Information Commissioner’s Office through www.ico.org.uk.
Last Updated: [25/09/2026]