Legal

Privacy Policy

How Lumina Laser Clinic collects, uses, protects and manages your personal information. Last updated: 14 October 2026

Privacy questions? Contact us

1. Introduction

This Privacy Policy explains how Lumina Laser Clinic collects, uses and protects personal information when you visit our website, contact us or book an appointment with us.

Lumina Laser Clinic is operated by Roya Nasiri, a sole trader, trading as Lumina Laser Clinic (also known as Lumina Skin Clinic), 8 Victoria Parade, Urmston, Manchester M41 9BP. For the purposes of UK data protection law, Roya Nasiri is the controller of the personal information described in this policy.

To be confirmed: Please confirm the legal trading details above and whether the business is registered with the Information Commissioner’s Office (ICO). If registered, add the ICO registration number here.

2. Personal information we collect

We only collect the information we need. Depending on how you interact with us, this may include:

  • Enquiry form: your full name, email address, phone number (optional), the service you are interested in, your preferred contact method (optional) and your message.
  • Phone calls, emails and social media messages: your contact details and the content of your messages to us.
  • Appointments: if you book online, the booking is handled by our booking provider, TapToBook, which collects the details needed to make your booking. We receive the booking details so we can provide your appointment.
  • Technical information: when you visit our website, our hosting provider’s servers automatically record technical information such as your IP address, browser type and the pages requested, in server logs used for security and to keep the site running.

Please do not send us medical or other sensitive information through the website enquiry form.

To be confirmed: Confirm whether the clinic collects any health or medical information (for example, consultation or patch-test forms for laser treatments) at the clinic. If it does, this section and section 12 must explain how that information is collected, used and protected.

3. How we use personal information

We use personal information to:

  • respond to your enquiries and questions;
  • arrange, manage and provide your appointments and treatments;
  • contact you about your booking, for example to confirm or change an appointment;
  • keep our website secure and working properly;
  • meet our legal, accounting and insurance obligations.

We do not use your information for marketing unless you have separately agreed to receive marketing from us, and we do not sell your personal information.

4. Lawful bases for processing

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we must have a lawful basis for using personal information. The bases we rely on are:

  • Contract: where we need your information to arrange or provide a treatment you have asked for, or to take steps at your request before booking.
  • Legitimate interests: to respond to general enquiries, run and improve our business, and keep our website secure. We only rely on this where our interests are not outweighed by your rights.
  • Legal obligation: where we must keep records, for example for tax and accounting purposes.
  • Consent: only where we specifically ask for it, for example if we ever send marketing messages. You can withdraw consent at any time.
To be confirmed: Confirm these lawful bases match how the clinic actually uses information. If any health information is collected, an additional condition for special category data must be identified.

5. Sharing personal information

We only share personal information where necessary, with:

  • Our booking provider (TapToBook), which processes booking information when you book online;
  • Our website hosting provider, which stores the website and its data;
  • Email providers that deliver enquiry form messages and our email correspondence;
  • Professional advisers such as accountants or insurers, where required;
  • Authorities where the law requires us to share information.

Some of these providers may process information outside the UK. Where that happens, we expect them to use appropriate safeguards required by UK data protection law.

To be confirmed: Confirm the website hosting provider for the live site and the email service used for clinic correspondence.

6. Cookies and similar technologies

Cookies are small files stored on your device. Our website does not currently use analytics, advertising or tracking cookies.

  • Essential cookies: WordPress may set cookies needed for the website to function, for example for logged-in site administrators. These are not used to track visitors.
  • Google Fonts: our website loads fonts from Google’s servers, which means your IP address is shared with Google when the fonts are requested.
  • Google Maps: our homepage includes an embedded Google map. On our Contact page, the map only loads if you choose to show it. When a Google map is loaded, Google may set cookies and collect information in line with its own privacy policy.
  • Links to other websites: links to Instagram, Facebook, Google and TapToBook take you to those websites, which have their own cookie policies.

You can block or delete cookies using your browser settings. Blocking some cookies may affect how websites work.

To be confirmed: If analytics, advertising pixels or other non-essential cookies are added in future, a cookie consent mechanism must be added and this section updated. Consider loading Google Fonts locally and making the homepage map click-to-load to reduce third-party data sharing.

7. How long we keep information

We keep personal information only for as long as we need it for the purposes described in this policy, including to meet legal, accounting and insurance requirements. When it is no longer needed, we delete it or make it anonymous.

Enquiry form submissions are delivered by email and a copy is stored in our website’s database.

To be confirmed: Decide and state specific retention periods, for example for enquiry form submissions, emails, and booking and treatment records. The website currently keeps form submissions until they are deleted manually.

8. Keeping your information secure

We take appropriate technical and organisational measures to protect personal information, such as using secure connections (HTTPS) on our website, limiting access to the people who need it and keeping software up to date. However, no method of sending or storing information is completely secure, so we cannot guarantee absolute security.

9. Your rights

Under UK data protection law you have rights over your personal information. Depending on the circumstances and the lawful basis we rely on, these include the right to:

  • access the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase your information;
  • ask us to restrict how we use your information;
  • object to us using your information, including for direct marketing;
  • data portability, where processing is based on consent or contract and carried out by automated means;
  • withdraw consent at any time, where we rely on consent.

To make a request, contact us using the details in section 14. We will respond within one month, although this can be extended in some circumstances. We may need to confirm your identity before responding.

10. Complaints

If you have a concern about how we handle your personal information, please contact us first so we can try to put things right.

You also have the right to complain to the UK Information Commissioner’s Office (ICO). You can contact the ICO through its website at ico.org.uk/make-a-complaint (opens in a new tab) or by calling 0303 123 1113.

11. Third-party websites and services

Our website links to and uses third-party services, including TapToBook for online booking, Google Maps, Google Fonts, Instagram and Facebook. These services are run by other organisations and have their own privacy policies. We are not responsible for how they handle your information, so we recommend reading their privacy policies when you use them.

12. Children and sensitive information

Our website is intended for adults. Some of our services, such as children’s haircuts, may be booked for young people; in these cases, we expect a parent or guardian to make the booking and provide contact details.

Our website enquiry form is not designed to collect health or other sensitive information, and we ask you not to include it.

To be confirmed: Confirm the clinic’s policy for treating under-18s and whether any consultation or medical history forms are used at the clinic.

13. Changes to this policy

We may update this Privacy Policy from time to time, for example if we change how we use personal information. The latest version will always be published on this page with the date it was last updated.

14. Contact us

If you have any questions about this policy or want to exercise your rights, please contact us:

Lumina Laser Clinic (Roya Nasiri)
8 Victoria Parade, Urmston, Manchester M41 9BP
Phone: 07846 489586
Email: salam_roya@yahoo.co.uk
Scroll to Top