Privacy Policy
Last updated: 11 July 2026
Laserderm Cambridge, respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share your personal information when you:
- visit our website
- contact us
- create or use a customer account
- book, change or cancel an appointment
- attend a consultation
- receive treatment
- make a payment
- communicate with our doctors or administrative team
- subscribe to marketing communications
- otherwise interact with Laserderm Cambridge
It also explains your rights under UK data protection law.
1. Who we are
Laserderm Cambridge, is responsible for deciding how and why personal information relating to Laserderm Cambridge patients, prospective patients and website visitors is used.
Treatments are provided by doctors registered with the General Medical Council.
Laserderm Cambridge does not provide treatments to anyone under 18.
For privacy enquiries or data protection requests, please use our contact page:
Contact Laserderm Cambridge
Please state that your message concerns a Privacy Request or Data Protection Request.
In this policy, “we”, “us” and “our” refer to “Laserderm Cambridge”.
2. Information we collect
The information we collect depends on how you interact with us and the services you request.
Identity and contact information
We may collect:
- your name
- title
- date of birth
- address
- email address
- telephone number
- emergency contact details
- customer account information
- information used to verify your identity or age
Appointment information
We may collect:
- the consultation or treatment requested
- your selected or preferred doctor
- appointment dates and times
- booking status
- booking history
- cancellation and rescheduling information
- deposits and prepayments
- treatment packages
- appointment notes and requests
- confirmation and reminder records
- customer account activity
The treatments available at Laserderm Cambridge may change over time. You can view our current services on our:
Health and clinical information
We collect relevant health and clinical information to assess whether a consultation or treatment is safe, suitable and in your best interests.
This may include:
- your medical history
- current or previous medical conditions
- symptoms or concerns
- allergies and sensitivities
- medicines and supplements
- pregnancy or breastfeeding status
- previous treatments or procedures
- skin type and skin condition
- treatment areas
- contraindications and risk factors
- consultation and assessment notes
- clinical observations
- consent forms
- treatment plans
- treatment settings and parameters
- treatment dates and outcomes
- aftercare information
- adverse reactions or complications
- communications concerning your care
- information received from another healthcare professional
- clinical photographs
Health and clinical information is sensitive personal information and is given additional protection.
Clinical photographs
Our doctors may take photographs where reasonably necessary for:
- assessing your condition
- planning treatment
- recording the treatment area
- monitoring progress
- comparing treatment outcomes
- maintaining an accurate clinical record
- protecting patient safety
- managing an adverse event, complaint or legal claim
Clinical photographs form part of your confidential patient record.
We will not use identifiable clinical photographs on our website, social media, advertisements, testimonials, case studies or other promotional materials unless you have given separate and specific permission.
Declining promotional use of your photographs will not affect your access to consultation or treatment.
Enquiries and communications
We may collect information provided through:
- website contact forms
- appointment forms
- telephone conversations
- letters or correspondence
- online or electronic messages
- consultation discussions
- feedback and complaints
- customer service communications
Please avoid including unnecessary medical information in a general website enquiry. Relevant health information should be provided through the appropriate consultation and assessment process.
Payment and transaction information
We may collect:
- deposit and payment amounts
- payment dates and status
- refunds
- invoice and receipt details
- transaction references
- billing information
- failed, cancelled or disputed payment information
Card and online payments are processed securely through an external payment service.
We do not normally receive or retain your complete payment card number, card security code or online banking credentials.
Website and technical information
When you use our website, we may collect:
- your IP address
- device and browser information
- operating system
- pages visited
- links selected
- date and time of access
- referring website
- approximate geographic area
- cookie and privacy preferences
- website security and error information
- information used to prevent spam, fraud and misuse
Please read our Cookie Policy for further information.
Website analytics
We may use website analytics to understand how people find and use our website.
Analytics information may include:
- pages viewed
- time spent on the website
- general interaction patterns
- browser and device information
- approximate geographic information
- referral sources
- website performance and errors
Analytics technologies that require consent will not be activated until you have made an appropriate choice through our cookie consent system.
Marketing information
Where you choose to receive marketing, we may collect:
- your marketing preferences
- your preferred communication method
- the date and method of your consent
- records of withdrawal or objection
- engagement with communications
- services in which you have expressed an interest
Marketing consent is optional and is not a condition of receiving treatment.
We will not use confidential health or clinical information to target promotional communications without an appropriate lawful basis and any additional permission required by law.
3. How we collect information
We may collect personal information:
- directly from you
- through our website
- through our appointment and customer account system
- during consultations and treatments
- through telephone calls and correspondence
- from a person authorised to act for you
- from payment and transaction records
- from another healthcare professional where appropriate and lawful
- through cookies, analytics and website security technologies
- from publicly available sources where relevant and lawful
Where another person contacts us on your behalf, we may ask them to confirm or demonstrate that they have your authority.
4. Why we use your information
We may use personal information to:
- respond to enquiries
- arrange consultations and treatments
- create and manage appointments
- administer customer accounts
- process deposits, payments and refunds
- send appointment confirmations and reminders
- manage cancellations and rescheduling
- assess whether a treatment is safe and suitable
- identify contraindications and treatment risks
- provide consultations and treatments
- obtain and record informed treatment consent
- maintain accurate clinical records
- provide preparation and aftercare information
- monitor treatment progress and results
- manage adverse reactions and patient safety concerns
- communicate with other healthcare professionals where appropriate
- investigate complaints and concerns
- maintain financial and administrative records
- meet applicable legal, medical, professional and insurance obligations
- prevent fraud, misuse, spam and security incidents
- protect patients, staff, systems and business operations
- improve our website, treatments and customer service
- establish, exercise or defend legal claims
- send marketing communications where permitted
- respond to privacy and data protection requests
We will not use personal information for a materially different or incompatible purpose without explaining that purpose and identifying an appropriate legal basis.
5. When information is required
You are not legally required to provide information when making a general enquiry.
However, we may be unable to arrange or provide a consultation or treatment unless you provide the identity, contact, health and consent information reasonably required to:
- manage the appointment
- assess your medical suitability
- obtain informed consent
- provide treatment safely
- maintain an appropriate clinical record
- process the required deposit or payment
Providing incomplete or inaccurate health information could affect our ability to assess or treat you safely.
6. Our legal grounds for using information
We use personal information only when UK data protection law allows us to do so.
The legal ground depends on why the information is being used.
Providing services and performing a contract
We use information where necessary to:
- take steps at your request before providing a service
- create and manage your booking
- provide a consultation or treatment
- administer your customer account
- process a deposit, payment, cancellation or refund
- manage a treatment package or purchased service
Meeting legal obligations
We use information where necessary to comply with applicable obligations concerning:
- patient and public safety
- health and safety
- accounting and taxation
- consumer protection
- safeguarding
- responding to lawful requests
- maintaining records required by law
Legitimate interests
We may use information where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and interests.
These interests may include:
- operating and improving the clinic
- responding to enquiries
- managing patient and customer relationships
- maintaining appropriate business and clinical records
- protecting our website and systems
- preventing fraud and misuse
- recovering lawful debts
- handling complaints
- defending legal claims
- improving service quality
- communicating with existing customers where legally permitted
Where we rely on legitimate interests, we consider whether the use is necessary and proportionate and whether it could have an unjustified effect on you.
Consent
We may rely on your consent for optional activities such as:
- certain marketing communications
- optional analytics or advertising technologies
- publishing identifiable photographs
- publishing testimonials or case studies
- another optional purpose explained when permission is requested
You may withdraw your consent at any time.
Withdrawing consent does not affect processing that was lawful before your consent was withdrawn.
Protecting vital interests
In a genuine emergency, we may use information where necessary to protect someone’s life or physical safety.
7. Health and clinical information
Information concerning your health is special category personal data.
We process relevant health information where it is necessary and where UK data protection law permits us to do so, including for:
- providing healthcare by registered medical professionals
- assessing medical suitability and treatment risks
- maintaining appropriate clinical records
- protecting patient safety
- establishing, exercising or defending legal claims
- meeting applicable legal or professional obligations
- protecting vital interests in a genuine emergency
We collect and use only the health information reasonably necessary for consultation, assessment, treatment, aftercare, clinical governance and patient safety.
Consent to medical treatment and consent under data protection law are separate matters.
Your doctor may need your informed consent before performing a treatment. However, necessary clinical information may still need to be retained after treatment has ended or after treatment consent has been withdrawn.
8. Appointment and customer accounts
We use an online system to support:
- appointment availability
- treatment and doctor selection
- bookings
- customer accounts
- deposits and payments
- appointment confirmations
- reminders
- cancellations and rescheduling
- access to the customer panel
- internal appointment administration
Information submitted through this system is used only where reasonably necessary to manage your appointment, account and requested services.
9. Payments
Payments and deposits are processed through a secure payment service.
Information used during the payment process may include:
- your name
- contact details
- billing details
- transaction amount
- payment status
- transaction references
- information required to prevent fraud
The organisation processing the transaction may have its own legal and regulatory responsibilities for payment security, fraud prevention and financial record keeping.
You should review any privacy information presented during the payment process.
10. Who may receive your information
We do not sell your personal information.
Where necessary and lawful, relevant information may be disclosed to:
- doctors and authorised clinic personnel
- organisations supporting appointments and customer accounts
- organisations processing payments
- organisations supporting website operation, communications, storage and security
- professional advisers and insurers where necessary
- other healthcare professionals where appropriate for your care
- courts, legal representatives, law enforcement bodies, regulators or public authorities where disclosure is legally required or authorised
- parties involved in a genuine business sale or restructuring, subject to appropriate confidentiality and legal safeguards
Only information reasonably necessary for the relevant purpose will be disclosed.
Where another organisation processes personal information on our behalf, it must comply with appropriate confidentiality, security and data protection requirements.
11. Medical confidentiality
Health and clinical information is confidential.
Access is restricted to doctors and authorised personnel who reasonably require it for:
- your care
- appointment administration
- patient safety
- clinical governance
- legal or professional compliance
- complaint handling
- insurance or legal claims
We will not disclose confidential information to relatives, partners, employers or other people merely because they request it.
We may disclose confidential information where:
- you have authorised us to do so
- disclosure is necessary for your care and is legally permitted
- we have a legal or professional obligation
- safeguarding requirements apply
- disclosure is necessary to prevent a serious risk of harm
- disclosure is necessary to establish, exercise or defend a legal claim
12. Marketing communications
We may send information about Laserderm Cambridge treatments, services, events or offers where:
- you have agreed to receive it; or
- another legal permission allows us to contact you
Marketing is optional and is not a condition of receiving consultation or treatment.
You can stop receiving marketing at any time by:
- selecting the unsubscribe option in a message; or
- submitting a request through our contact page
Stopping marketing will not prevent us from sending essential service communications concerning:
- an appointment
- a payment
- a cancellation or rescheduling request
- treatment preparation
- aftercare
- safety information
- another service you requested
We may keep limited information recording your decision not to receive marketing so that we can respect your preference.
13. Cookies and analytics
Our website uses cookies and similar technologies.
Some technologies are necessary for:
- operating and protecting the website
- appointment booking
- customer account access
- payment processing
- remembering privacy choices
Other technologies may support analytics, performance, personalisation or marketing.
Where consent is required, optional technologies will not be activated until you have made a choice through our cookie banner or preference centre.
You can change your choices through the Cookie Settings control on our website.
Please read our Cookie Policy for more information.
14. International processing
Some information may be stored or processed outside the United Kingdom as part of the technology and services used to operate our website and business.
Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal transfer mechanism and safeguards are in place where required.
15. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
The appropriate period depends on:
- the type and sensitivity of the information
- the purpose for which it is used
- patient safety and continuity of care
- legal and professional responsibilities
- insurance requirements
- taxation and accounting obligations
- limitation periods for legal claims
- whether a complaint or adverse event remains unresolved
- whether legal or regulatory proceedings are anticipated or ongoing
Enquiries
General enquiries that do not lead to a consultation or treatment will normally be deleted when they are no longer needed to respond to the enquiry or maintain an appropriate business record.
Appointment and account records
Appointment and customer account information will be retained for as long as necessary to administer the customer relationship and meet relevant legal, financial and operational requirements.
Where appointment information forms part of a clinical record, the clinical retention period will apply.
Please read our Booking Policy for more information.
Clinical records
Clinical records, including consultation notes, consent records, treatment information, aftercare records and clinical photographs, will be retained in accordance with applicable legal, medical, professional and insurance requirements.
The appropriate period may depend on:
- the treatment provided
- the date of the last clinical contact
- the clinical significance of the record
- potential legal limitation periods
- insurance requirements
- any complaint, complication or adverse event
Records may be retained for longer where necessary for patient safety, continuity of care, a legal claim or another justified purpose.
Financial records
Payment, invoice, refund and taxation records will be retained for the period required by applicable financial and tax obligations.
Complaints and incidents
Complaints, adverse events and related correspondence will be retained for as long as reasonably necessary to investigate and resolve the matter and meet applicable clinical, legal and insurance requirements.
Marketing records
Marketing details will be retained until you unsubscribe, withdraw consent or object.
Limited information may then be retained to ensure that your preference continues to be respected.
Website and security information
Routine technical and security records will be retained for a limited period appropriate to their purpose.
Information may be retained for longer where necessary to investigate fraud, misuse, a security incident or a legal claim.
Anonymised information
Information that has been irreversibly anonymised and can no longer identify you may be retained and used for statistical, service improvement or business purposes.
When personal information is no longer required, it will be securely deleted, destroyed or anonymised.
16. How we protect information
We use proportionate technical and organisational safeguards designed to protect personal information against:
- unauthorised access
- accidental or unlawful loss
- inappropriate alteration
- misuse
- unauthorised disclosure
- destruction or damage
Our safeguards include access restrictions, secure systems, confidentiality obligations and procedures for responding to security incidents.
Access to clinical information is limited to people who reasonably require it for an authorised purpose.
No electronic or online system can be guaranteed to be completely secure. We review our safeguards and respond to identified risks.
17. Your data protection rights
Depending on the circumstances, you may have the following rights.
The right to be informed
You have the right to receive clear information about how and why we use your personal information.
The right of access
You may ask whether we hold personal information about you and request a copy.
The right to correction
You may ask us to correct inaccurate information or complete information that is incomplete.
Clinical records are not normally altered by deleting an original accurate entry. Where a correction is appropriate, an amendment or explanatory note may be added while preserving the integrity of the original record.
The right to deletion
You may ask us to delete personal information in certain circumstances.
This right is not absolute. We may need to retain information where it is required for:
• an appropriate clinical record
• patient safety
• legal or professional obligations
• financial record keeping
• insurance purposes
• establishing, exercising or defending legal claims
The right to restrict processing
You may ask us to limit how your information is used in certain circumstances.
The right to object
You may object where information is used on the basis of legitimate interests.
You have the right to object at any time to the use of your information for direct marketing.
The right to data portability
Where the legal conditions apply, you may ask to receive certain information in a structured, commonly used and machine readable format.
The right to withdraw consent
Where we rely on consent, you may withdraw it at any time.
Withdrawal will not affect processing that was lawful before consent was withdrawn.
Rights relating to automated decisions
You may have rights concerning decisions made solely through automated processing where those decisions produce legal or similarly significant effects.
We do not ordinarily make clinical or treatment decisions solely through automated processing.
Some rights are subject to legal conditions and exemptions.
18. Making a privacy request
To exercise a data protection right or ask a question about your information, please use:
Laserderm Cambridge contact page
Please include:
- your full name
- enough information to help us identify the relevant records
- a clear description of your request
- the words Privacy Request or Data Protection Request
We may ask for reasonable evidence of identity before providing personal information.
Please do not include unnecessary medical details in your initial contact form submission. We will arrange an appropriate communication method where sensitive information is required.
We will respond without undue delay and ordinarily within one month. Where permitted by law, additional time may be required for a complex request or several related requests.
19. Access to clinical records
Requests involving health and clinical records may require review by an appropriate doctor.
Information may be withheld or restricted where a legal exemption applies, including where disclosure would:
- reveal confidential information about another person
- disclose legally privileged information
- create a serious risk of harm in circumstances recognised by law
- conflict with another applicable legal restriction
An exemption will be used only where legally justified.
20. People under 18
Laserderm Cambridge does not provide treatments to people under 18.
We may collect limited information where someone under 18:
- contacts the clinic
- attempts to make a booking
- is mentioned in correspondence
- is involved in a safety or safeguarding concern
The information will be used only where reasonably necessary and handled with appropriate care.
A booking identified as relating to someone under 18 may be declined or cancelled.
21. Information about another person
Please do not provide personal or medical information about another person unless:
- they have authorised you
- you have legal authority to act for them
- disclosure is necessary to protect someone’s vital interests
- another lawful reason permits it
We may ask for evidence of your authority before discussing or releasing another person’s information.
22. External websites
Our website may contain links to external websites or services.
Those organisations may collect and use information under their own privacy policies.
We are not responsible for the privacy practices of an independent third party after you leave our website or choose to use its service.
23. Personal data breaches
We maintain procedures for identifying, assessing and responding to personal data breaches.
Where a breach is likely to create a risk to people’s rights and freedoms, we will report it to the Information Commissioner’s Office where legally required.
Where a breach is likely to result in a high risk to an affected individual, we will also notify that person unless a lawful exception applies.
24. Changes to this policy
We may update this Privacy Policy when:
- our treatments or services change
- our systems or business operations change
- legal or professional requirements change
- our information handling practices change
The latest version will be published on this page with a revised update date.
Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected people.
25. Questions and complaints
We would appreciate the opportunity to address any concern about your personal information.
Please submit your question or complaint through our:
Please describe the matter as a Privacy Request or Data Protection Complaint.
You also have the right to complain to the UK Information Commissioner’s Office if you are dissatisfied with how your personal information has been handled.
Information about contacting the Information Commissioner is available through its official website.
26. Related information
Please also read our:
