Privacy Policy

Perfectly You Co is a trading name of Perfectly You Ltd, a company registered in England and Wales.

• Company number: 15009146
• Registered office: 57 Rodney Street, Liverpool, L1 9ER
• ICO registration number: 00015091074

Last updated: November 2026

This policy explains how we collect, use, store and protect your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

In this policy, “we”, “us” and “our” mean Perfectly You Ltd, trading as Perfectly You Co. We are the data controller for your personal information.

1. Contact us

• Email: info@perfectlyyouco.com
• Phone: 0151 662 1363
• Post: 57 Rodney Street, Liverpool, L1 9ER

2. Key terms

• Personal data: any information that can identify you, directly or indirectly.
• Special category data: more sensitive personal data, including health information and treatment records.
• Processing: anything we do with personal data, including collecting, storing, using, sharing and deleting it.
• Data controller: the organisation that decides how and why personal data is used.
• Data processor: an organisation that processes personal data on the controller’s behalf.

3. What personal data we collect

General personal data

• Identity details, such as your name and date of birth
• Contact details, such as your email address, phone number and address
• Emergency contact details
• Payment and transaction details
• Marketing preferences
• Technical data, such as your IP address, device and browser
• Website usage data

Special category data (health data)

• Medical history, health conditions and medications
• Contraindications and allergies
• Consultation and consent forms
• Treatment records and clinical notes, including the products used
• Clinical photographs

We need this information to assess whether treatment is suitable for you and to treat you safely.

4. Our legal basis for using your data

Where we rely on consent, you can withdraw it at any time. If you withdraw consent, we will still keep the clinical records we are legally required to retain.

5. How we collect your data

We collect data when you:

• book with us through Fresha, or contact us and we add your booking to Fresha for you
• complete consultation, medical or consent forms
• contact us by email, phone, social media or in person
• sign up to receive marketing (through MailerLite)
• use our website (through cookies and similar technologies)

6. How we use your data

• To assess your suitability for treatment and treat you safely
• To manage your bookings and appointments
• To take payments
• To keep accurate clinical records
• To contact you about your appointments and treatment
• To respond to complaints and concerns
• To improve our services
• To send you marketing, where you have agreed or where the law allows

7. Who we share your data with

We only share the information each organisation needs:

• Fresha: booking, client records, forms and payments
• Stripe: payment processing
• Our independent prescriber: for treatments involving prescription-only medicines
• Our insurer: where a complaint, incident or claim relates to your treatment
• Emergency services: if you become unwell during or after treatment
• The MHRA (Yellow Card scheme): when reporting suspected side effects
• Our alternative dispute resolution provider: if a complaint is referred to them
• MailerLite: email marketing
• Google Workspace: email and secure file storage
• Website, hosting and IT providers
• Analytics and advertising providers: Google Analytics and Meta Pixel, with your consent
• Professional advisers: accountants and lawyers
• Regulators and authorities: where the law requires it

We do not sell your data.

8. International transfers

Some of our providers, such as MailerLite, Meta and Google, may process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

9. How long we keep your data

We may keep data for longer if it is needed for a legal claim.

10. Keeping your data secure

We protect your data with:

• secure, access-controlled systems, including Fresha and Google Workspace
• access restricted to team members who need it
• encryption where available
• confidentiality obligations for all team members

11. Photographs

Clinical photographs are taken to assess your treatment and track your progress. They form part of your clinical record.

Marketing use. We will only use your photographs or videos in our marketing (website, social media or advertising) if you have given separate written consent. You can withdraw this consent at any time. Withdrawing it does not affect anything already published lawfully before you withdrew, but we will not use your images in new marketing.

All images are stored securely and treated as confidential clinical data. We do not treat facial images as anonymised.

You can refuse photography, although this may limit our ability to assess your results.

12. Your rights

You have the right to:

• access your personal data
• have inaccurate data corrected
• ask for your data to be deleted
• restrict how we use your data
• object to how we use your data
• receive your data in a portable format
• withdraw consent at any time

To use any of these rights, contact us using the details in section 1. We will respond within one month. Some rights are limited where we must keep clinical records by law.

13. Marketing

We will only send you marketing if:

• you have agreed to receive it, or
• you are an existing client and we are telling you about similar services (known as “soft opt-in”).

You can unsubscribe at any time using the link in any email or by contacting us.

14. Cookies and tracking

We use cookies and similar technologies, including:

• Google Analytics: to understand how our website is used
• Meta Pixel: to measure advertising and show relevant adverts

Analytics and advertising cookies only run if you agree to them through our cookie banner. You can change your choice at any time. See our Cookie Policy for details.

15. Age

Our services are only for people aged 18 and over. We do not knowingly collect data about anyone under 18.

16. Automated decisions

We do not make decisions about you using automated processing.

17. Data protection complaints

If you are unhappy with how we have used your personal information, please contact us using the details in section 1. We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome.

If you remain unhappy, you can complain to the Information Commissioner’s Office at ico.org.uk.

18. Links to other websites

Our website may link to other websites. We are not responsible for their privacy practices.

19. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.