Privacy Policy

BARE by Marlese is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

BARE by Marlese
Email: marlese@barebymarlese.com

2. Information We Collect

We may collect and process the following information:

3. Special Category Data

Some information collected (including medical details and skin type) is classified as Special Category Data under UK GDPR. This information is collected solely for the purpose of ensuring safe and appropriate treatment.

4. Purpose of Processing

Your data is processed for the following purposes:

5. Legal Basis

We process your personal data based on:

6. Data Storage & Security

Data is stored securely and accessed only when necessary. Form submissions are processed via Formspree (a secure third-party form processor). Reasonable steps are taken to protect your information from unauthorised access. Personal data is only accessed by authorised personnel and is not shared with third parties except where necessary to provide services (such as payment processing or appointment scheduling).

7. Data Retention

Consultation and treatment records may be retained for up to 7 years in accordance with insurance and legal requirements for aesthetic and laser treatment providers. Enquiry-only submissions may be deleted after 12 months if no treatment occurs.

8. Your Rights

You have the right to:

To exercise your rights, contact: marlese@barebymarlese.com

9. Complaints

If you are unhappy with how your data is handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Online Booking (Google Calendar)

Online appointment bookings on this website are managed using Google Calendar appointment scheduling. When you choose to book an appointment, information such as your name, email address and appointment details may be processed by Google in order to manage and confirm your booking.

Google processes this information in accordance with its own privacy policy: https://policies.google.com/privacy.

BARE by Marlese only uses this information to manage appointments and communicate with clients regarding consultations and treatments.

11. Payments

Deposits and payments for consultations or treatments may be processed through a secure third-party payment provider (Revolut).

When you choose to make a payment, certain information such as your name, payment amount, and transaction details may be processed by Revolut in order to complete the payment. BARE by Marlese does not store or have access to your full payment card or banking details.

Revolut processes payment information in accordance with its own privacy policy: https://www.revolut.com/legal/privacy/ .

Payments are used solely for the purpose of securing consultation or treatment bookings and may be subject to the clinic's cancellation and booking policies.