Privacy Policy

Skin Lab by Dr Shaymaa provides medical aesthetic and hair restoration services, including Biofiber Hair Implantation consultations and treatments.

For the purposes of applicable data protection law, the organisation responsible for your personal information is Skin Lab by Dr Shaymaa.

If you have any questions about this Privacy Policy or how your information is handled, please contact our team.

Depending on how you interact with us, we may collect the following information.

Contact and Enquiry Information

When you submit an enquiry through our website, landing page, Meta Instant Form, Facebook, Instagram or another advertising platform, we may collect:

• Full name
• Telephone number
• Email address
• Preferred call time
• Treatment or service you are interested in
• Information included in messages or enquiries you send to us

Appointment Information

If you arrange a consultation or treatment, we may collect information such as:

• Appointment date and time
• Treatment preferences
• Consultation notes
• Communications relating to your booking
• Relevant payment or transaction information, where applicable

Health and Treatment Information

If you proceed to a consultation or treatment assessment, we may need to collect information relevant to determining treatment suitability, including:

• Relevant medical history
• Current or previous medical conditions
• Medications
• Allergies
• Previous treatments or procedures
• Hair and scalp information
• Treatment goals
• Clinical photographs, where appropriate and with the appropriate permissions
• Consultation, treatment and aftercare records

Health information is considered special-category personal data and receives additional protection under data protection law.

We only process this information where necessary and where an appropriate legal basis and special-category condition applies.

When you visit our website, certain technical information may be collected automatically, including:

• IP address
• Browser type
• Device information
• Pages visited
• Time spent on the website
• Referral source
• Advertising campaign information
• Cookie and similar technology identifiers

This information may be used to operate the website, understand how visitors use it and measure the effectiveness of our advertising.

If you respond to one of our advertisements or complete an Instant Form on Facebook or Instagram, the information you choose to submit may be provided to Skin Lab by Dr Shaymaa by Meta.

This may include your:

• Name
• Email address
• Telephone number
• Preferred call time
• Answers to questions included in the form

We use this information to respond to your request, contact you about the treatment or service you enquired about and, where appropriate, arrange a consultation.

Meta may separately process information about your use of Facebook, Instagram and its advertising services according to Meta's own privacy policies and terms.

Once your enquiry information is received by Skin Lab by Dr Shaymaa, our processing of that information is governed by this Privacy Policy.

We may use your personal information to:

• Respond to enquiries
• Contact you after you request a call
• Contact you at or around your preferred call time
• Provide information about Biofiber Hair Implantation or other requested services
• Arrange, confirm and manage consultations
• Assess potential treatment suitability
• Create personalised treatment plans where appropriate
• Provide treatments and aftercare
• Maintain appropriate patient and clinical records
• Respond to questions and customer service requests
• Send appointment reminders and important service communications
• Process transactions where applicable
• Improve our website and services
• Measure advertising and marketing performance
• Prevent fraud, misuse or security threats
• Meet legal, regulatory, professional and insurance requirements

We will not use your personal information for purposes that are incompatible with the purpose for which it was originally collected unless permitted by law.

Under UK data protection law, we must have a valid reason for processing your personal information.

Depending on the circumstances, we may rely on:

Consent

Where you have specifically agreed to a particular use of your information, such as certain types of marketing communication.

You may withdraw your consent at any time.

Steps Before Entering Into a Contract or Performance of a Contract

Where processing is necessary to respond to a treatment enquiry, arrange an appointment or provide services you have requested.

Legitimate Interests

We may process certain information where it is reasonably necessary to operate and improve our business, respond to enquiries, provide customer service, protect our systems or understand the effectiveness of our services and advertising.

We consider your privacy rights before relying on legitimate interests.

Legal Obligation

We may process or retain information where necessary to comply with laws, professional requirements, regulatory obligations, tax obligations or other legal responsibilities.

Health and Special-Category Information

Where we process health or other special-category information, we will also rely on an appropriate condition permitted under Article 9 of the UK GDPR, such as processing necessary in connection with the provision of healthcare by an appropriate professional subject to confidentiality obligations, or explicit consent where required.

Submitting an enquiry or requesting a consultation does not automatically mean that you have agreed to receive unrelated promotional marketing.

We may contact you regarding the specific enquiry, consultation or service you requested.

Where required by law, we will obtain appropriate consent before sending promotional communications by email, SMS, telephone or other electronic channels.

You may opt out of marketing communications at any time by using the unsubscribe option provided or by contacting us.

Opting out of marketing does not prevent us from sending necessary communications relating to an existing appointment, treatment or enquiry.

Our website may use cookies and similar technologies to help the website function, understand visitor behaviour and measure advertising performance.

These technologies may include:

• Essential website cookies
• Analytics technologies
• Advertising measurement tools
• Meta advertising technologies
• Conversion tracking technologies

Where required, non-essential cookies or advertising technologies will only be activated after obtaining appropriate consent.

You can manage your cookie preferences through the cookie controls provided on our website or through your browser settings.

We may use Meta advertising services to promote Skin Lab by Dr Shaymaa and understand the effectiveness of our advertising.

Where enabled and permitted by law, technologies such as the Meta Pixel or similar conversion measurement tools may help us understand whether someone visited our website or completed an action after interacting with an advertisement.

Information used for advertising measurement may be processed by technology providers acting under their own terms and privacy policies.

Where consent is legally required for these technologies, we will seek that consent before activating them.

We do not sell your personal information.

Where necessary, information may be shared with carefully selected service providers who help us operate our business, including:

• Website and hosting providers
• Customer relationship management systems
• Appointment and booking platforms
• Email and communication providers
• Payment processors
• IT and security providers
• Analytics providers
• Advertising platforms such as Meta
• Professional advisers, accountants, insurers or legal advisers
• Healthcare professionals involved in your care where appropriate
• Regulators, courts, law enforcement or public authorities where legally required

Service providers are only permitted to process personal information for authorised purposes and are expected to protect it appropriately.

Some of the technology providers we use may process information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the information receives an appropriate level of protection in accordance with applicable data protection law.

This may include relying on recognised adequacy regulations or appropriate contractual safeguards.

We only keep personal information for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, insurance and professional requirements.

As a general guideline:

Information will be securely deleted, anonymised or otherwise disposed of when it is no longer required.

We take reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access
• Accidental loss
• Misuse
• Unauthorised disclosure
• Alteration
• Destruction

Access to personal and clinical information is limited to people who reasonably require it for their role.

However, no internet-based system can be guaranteed to be completely secure.

Depending on the circumstances and applicable law, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Request restriction of certain processing
• Object to certain uses of your personal information
• Request transfer of certain information to you or another organisation
• Withdraw consent where processing is based on consent
• Object to direct marketing at any time
• Make a complaint about how your information has been handled

Some rights are subject to legal conditions and exemptions.

To exercise any of these rights, please contact our team directly through our website enquiry channels or phone support.

We may need to verify your identity before completing certain requests.

You have the right to object to the processing of your personal information where we rely on legitimate interests in certain circumstances.

You also have an absolute right to object to the use of your personal information for direct marketing.

To exercise this right, contact us using the details provided in this Privacy Policy.

If you have concerns about how Skin Lab by Dr Shaymaa handles your personal information, please contact us first so we have the opportunity to address your concerns.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Our website may contain links to third-party websites, booking platforms, social media services or other external services.

We are not responsible for the privacy practices of those third parties. We recommend reviewing their privacy policies before providing personal information.

Our website and Biofiber Hair Implantation services are not intended to collect personal information from children through our advertising enquiry forms.

If we become aware that information has been submitted by a child in circumstances where parental or guardian involvement is required, we will take appropriate steps in accordance with applicable law and professional requirements.

We may update this Privacy Policy periodically to reflect changes in our services, technologies, business practices or legal requirements.

The latest version will be published on this page with the updated date shown at the top.

We encourage you to review this Privacy Policy periodically.

For questions about this Privacy Policy, your personal information or your data protection rights, please contact Skin Lab by Dr Shaymaa through our enquiry or support channels.

© 2026 Skin Lab by Dr Shaymaa. All rights reserved.