Privacy Policy

Last updated: 5 April 2026 - Jacalyn James Ltd

1. Who We Are
Jacalyn James Ltd (“we”, “us”, “our”) operates the Jacalyn James Skin Clinic and the Jacalyn James Skin School, based in The Peach Rooms 95-96 Christian Mill Business Park, Crownhill, Plymouth, Devon, PL6 5DS, United Kingdom. Our website is JacalynJames.co.uk.

We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any questions about this policy or how we handle your data, please contact us at:

Jacalyn James Ltd
Based within The Peach Rooms 95-96 Christian Mill Business Park, Crownhill, Plymouth, Devon, PL6 5DS, United Kingdom
Email: [email protected] / [email protected]
Phone: 01752 426123

2. What Personal Data We Collect
We may collect and process the following personal data:

  • Your name, email address, and phone number when you make a booking or enquiry
  • Appointment history and treatment records
  • Health information relevant to your treatments, including skin concerns and any conditions or allergies you disclose during consultation
  • Payment information (processed securely via our payment provider; we do not store card details)
  • Photographs and videos taken for clinical and insurance purposes before, during, or after treatment
  • Communications you send to us by phone, email, or through our website or social media
  • Website usage data collected via cookies (see Section 8)

3. How We Use Your Personal Data
We use your personal data for the following purposes:

  • To book, confirm, and manage your appointments
  • To provide and tailor skin treatments to your individual needs
  • To send appointment reminders and relevant notifications
  • To maintain clinical records and ensure the continuity of your care
  • To process payments
  • To comply with our legal and insurance obligations
  • To contact you regarding your enquiries or concerns
  • To improve our services and client experience

4. Legal Basis for Processing
We rely on the following legal bases to process your personal data:

  • Contract: to fulfil your bookings and provide the treatments you have requested
  • Legitimate interests: to manage our business, communicate with clients, and maintain clinical records
  • Legal obligation: to comply with applicable laws and regulatory requirements
  • Consent: where you have specifically agreed, for example to receive marketing communications or to have your photographs shared on social media

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of any processing carried out before withdrawal.

5. Photographs and Videos
Photographs and videos may be taken for clinical record-keeping and insurance purposes. We may also use before and after images to document your treatment progress.

If you are happy for your images to be shared on our social media channels or website, we will ask for your explicit consent before doing so. You may withdraw this consent at any time by contacting us directly. Images used for clinical purposes only will never be shared publicly.

6. Sharing Your Personal Data
We do not sell your personal data. We will only share it with third parties in the following circumstances:

  • With our booking system and payment processing providers, who are bound by their own data protection obligations
  • With Klarna or Clearpay where you choose to use these payment services
  • Where required by law, regulation, or a court order
  • With professional advisers such as accountants or insurers, where necessary

All third parties are required to handle your data securely and only for the specified purpose.

7. How Long We Keep Your Data
We retain your personal data only for as long as necessary. In general:

  • Client and treatment records are retained for a minimum of 7 years in line with standard clinical and legal requirements
  • Appointment and booking data is retained for 3 years following your last appointment
  • Marketing consent records are kept for as long as you remain on our mailing list, plus 1 year after unsubscribing
  • When data is no longer required, it is securely deleted or anonymised.

8. Cookies
Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device. We use:

  • Essential cookies: required for the website to function correctly
  • Analytics cookies: to understand how visitors use our site, helping us improve it
  • You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect website functionality.

9. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:

  • The right to access the personal data we hold about you
  • The right to request correction of inaccurate or incomplete data
  • The right to request deletion of your data, subject to legal obligations
  • The right to restrict or object to certain types of processing
  • The right to data portability in certain circumstances
  • The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details in Section 1. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Data Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Client records are stored securely and access is limited to Jacalyn James Ltd only.

Where data is transmitted electronically (for example via our booking system), it is protected using industry-standard encryption.

11. Third-Party Links
Our website may contain links to third-party websites, including our social media profiles. This privacy policy applies only to our website and services. We are not responsible for the privacy practices of any third-party sites and encourage you to review their policies before sharing personal data with them.

12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website.

We will notify you of any significant changes where we are able to do so.

13. Contact Us
If you have any questions about this privacy policy or how your data is handled, please contact:

Jacalyn James Ltd
The Peach Rooms 95-96 Christian Mill Business Park, Crownhill, Plymouth, Devon, PL6 5DS, United Kingdom
Email: [email protected] / [email protected]
Phone: 01752 426123
Website: JacalynJames.co.uk