Last updated: 30 September 2026

At Derma Design, your privacy is important to us. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, make a booking, complete a consultation form, purchase a treatment or product, or visit our clinic.

We only collect information that we need and use your information in a responsible and transparent way.

Derma Design is a sole trader business owned and operated by Katy Stewart.

Derma Design
Lichfield, Staffordshire, UK

Telephone: 07539 553385
Email: dermadesign@outlook.com
Website: www.dermadesign.co.uk

For data protection purposes, Katy Stewart trading as Derma Design is the data controller responsible for your personal information.

If you have any questions about this Privacy Policy or how your information is used, please contact us using the details above.

Depending on how you interact with Derma Design, we may collect the following information:

This may include:

• Your name
• Telephone number
• Email address
• Address, where required
• Date of birth or age, where relevant to a treatment
• Appointment details
• Treatment history
• Booking and cancellation information

Before providing certain treatments, we may need information about your health and medical history to assess your suitability for treatment and provide your treatment safely.

This may include:

• Medical conditions
• Allergies
• Medication
• Skin conditions
• Previous treatments
• Previous reactions or complications
• Pregnancy or breastfeeding information where relevant
• Information about healing or your skin
• Other information relevant to your treatment or safety

Some of this information may be considered special category health data under UK data protection law and is therefore subject to additional protection.

We may take photographs before and after treatments to:

• Record your treatment
• Assess and monitor results
• Assist with treatment planning
• Maintain accurate treatment records
• Compare treatment progress

Photographs may also be used for our website, social media and advertising only where you have given permission for marketing use.

You can receive treatment from us without agreeing to your photographs being used for marketing.

When you visit our website, some technical information may be collected automatically, such as:

• IP address
• Browser and device information
• Pages visited
• Website usage information
• Information about how you interact with the website
• Information collected through cookies and similar technologies

This information may be used to maintain and improve our website, understand how visitors use it and support our advertising and marketing activities where appropriate.

We may use your personal information to:

• Respond to enquiries
• Manage your appointments and bookings
• Provide treatments and services
• Complete consultation and suitability assessments
• Maintain treatment records
• Contact you about appointments
• Send appointment reminders
• Provide treatment and aftercare information
• Process payments
• Manage product purchases
• Deal with questions, complaints or concerns
• Improve our services
• Meet legal, insurance and regulatory requirements
• Maintain appropriate business records
• Protect the safety and security of our clients and business
• Send marketing communications where permitted
• Manage and improve our website
• Measure and improve our advertising and marketing

We will not use your personal information for purposes that are incompatible with those explained in this Privacy Policy unless we are legally required or permitted to do so.

Data protection law requires us to have a lawful basis for collecting and using your personal information.

Depending on the circumstances, we may rely on:

We may need to use your information to arrange and provide a treatment or service that you have requested.

We may need to retain or use information to meet legal, regulatory, accounting or insurance requirements.

We may use information where it is reasonably necessary to operate and improve Derma Design, manage our client relationships, maintain appropriate records, protect our business and prevent fraud or misuse.

We will only rely on legitimate interests where it is appropriate and your rights do not override those interests.

Where appropriate, we may ask for your consent, for example for:

• Marketing communications
• Use of before-and-after photographs for promotional purposes
• Certain cookies or tracking technologies

Where we rely on consent, you can withdraw that consent at any time.

Some of the information collected during consultations and treatments relates to your health.

This information is collected because it may be necessary to determine whether a treatment is suitable for you and to provide your treatment safely.

We treat this information as confidential and take additional care with its storage and use.

We will only collect health information that is relevant to your treatment, safety, aftercare or our legal and professional responsibilities.

Special category data requires an additional legal condition under UK data protection law as well as a lawful basis for processing.

Derma Design uses Vagaro to manage appointments, bookings, client information and consultation forms.

Information that you provide through Vagaro may include your contact details, appointment information and information contained within your consultation and treatment records.

Vagaro acts as a third-party service provider for these business functions.

Your information may therefore be processed through Vagaro's systems in accordance with the services it provides and its own privacy and security arrangements.

We do not sell or rent your personal information.

We may share relevant information with trusted third-party service providers where this is necessary to operate Derma Design and provide our services.

These may include:

• Vagaro – bookings, appointments, consultation forms and client management
• Payment providers
• Website hosting and technical providers
• Email and SMS communication providers
• Cloud storage and IT providers
• Professional advisers such as accountants, insurers or legal advisers
• Regulators, law enforcement or other authorities where we are legally required to do so

We only share information where there is a legitimate reason to do so and, where appropriate, we take steps to ensure that third-party providers have suitable data protection and security arrangements.

We may contact existing and potential clients about Derma Design services, treatments, products, offers, availability, clinic news and other relevant information.

Our email and marketing communications are managed through Vagaro.

Where consent is required for email or SMS marketing, we will obtain the appropriate consent.

Where the law permits marketing to existing customers without separate consent, we will only use this route where the relevant legal requirements are met, including providing a clear opportunity to opt out.

UK electronic marketing is governed by both data protection law and the Privacy and Electronic Communications Regulations (PECR).

Every marketing communication will provide a straightforward way to unsubscribe or opt out.

You can also contact us at any time at dermadesign@outlook.com to ask us to stop sending marketing communications.

Opting out of marketing will not prevent us from contacting you about an existing appointment, treatment, payment, aftercare or another matter directly relating to a service you have requested.

We understand that photographs showing your face, skin, eyebrows, lips or other treatment areas are personal.

Photographs taken as part of your treatment may form part of your client treatment record.

We will only use photographs for promotional purposes, including:

• The Derma Design website
• Instagram
• Facebook
• Other social media platforms
• Meta advertising
• Other Derma Design promotional materials

where you have given permission for this use.

You are never required to agree to marketing use of your photographs in order to receive treatment.

If you have previously agreed to marketing use and later change your mind, please contact us and we will stop using the photograph for future marketing where reasonably practicable.

Derma Design uses Meta platforms, including Facebook and Instagram, for advertising and marketing.

We may use Meta's advertising and measurement technologies, such as the Meta Pixel or Meta Dataset, on our website where these have been implemented.

These technologies may allow us to understand how visitors interact with our website and measure the effectiveness of our advertising.

They may also allow Meta to receive information about website activity for advertising and measurement purposes.

We do not intentionally send your consultation forms, medical history, treatment records or other health information to Meta for advertising purposes.

Where cookies or similar technologies require your consent, we will request consent in accordance with applicable privacy and electronic communications requirements.

Our website may use cookies and similar technologies.

Some cookies are necessary for the website to function correctly.

Other cookies may be used to:

• Understand how visitors use our website
• Improve website performance
• Measure advertising
• Support marketing
• Provide relevant website functionality

Where cookies are not strictly necessary for the website to operate, we will seek consent where required.

You can manage your cookie preferences through the cookie settings available on our website.

The ICO states that visitors should be informed about cookies and that non-essential cookies generally require the user's agreement before they are used.

We take reasonable technical and organisational measures to protect your personal information against:

• Unauthorised access
• Loss
• Misuse
• Unauthorised disclosure
• Accidental destruction
• Unauthorised alteration

Access to client information is limited to people and service providers who need access for legitimate business or treatment purposes.

However, no electronic storage or transmission system can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Some information may need to be retained for longer because of:

• Treatment and client-record requirements
• Legal obligations
• Insurance requirements
• Accounting requirements
• Regulatory requirements
• The establishment, exercise or defence of legal claims

Different types of information may therefore be kept for different periods.

We regularly review the information we hold and securely delete or destroy information when it is no longer required.

Depending on the circumstances, you have rights under UK data protection law, including the right to:

• Ask what personal information we hold about you
• Request a copy of your personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to delete information where there is no longer a lawful reason for us to keep it
• Ask us to restrict how we use your information in certain circumstances
• Object to certain types of processing
• Withdraw consent where we rely on consent
• Request transfer of your information in certain circumstances

These rights are subject to certain legal exceptions and may not apply in every situation.

If you wish to exercise any of your rights, please contact:

Email: dermadesign@outlook.com
Telephone: 07539 553385

We may need to verify your identity before providing personal information or making changes to your records.

If you have concerns about how Derma Design has handled your personal information, please contact us first so that we have an opportunity to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has not been handled in accordance with data protection law.

You can find information about the ICO and how to make a complaint on the ICO website.

We may update this Privacy Policy from time to time to reflect changes to our business, treatments, technology or legal requirements.

The most recent version will always be available on the Derma Design website.

We recommend checking this page occasionally for any updates.

Last updated: 30 September 2026

Derma Design
Katy Stewart – Sole Trader
Lichfield, Staffordshire, UK

Telephone: 07539 553385
Email: dermadesign@outlook.com
Website: www.dermadesign.co.uk