Book now Privacy Policy
At SwissLaser, we respect your privacy and are committed to handling your personal information responsibly, transparently and securely. This Privacy Policy explains what information we collect, how and why we use it, who we may share it with, how long we keep it and the rights available to you.
Who we are
Belgravia Business Solutions Ltd (company number 14191923), trading as SwissLaser UK, is responsible for the personal information described in this Privacy Policy and acts as the data controller for information processed in connection with the SwissLaser clinic, website, enquiries, bookings and treatments.
Our registered office is Cobalt Square, 83 Hagley Road, Birmingham, England, B16 8QG. Our clinic is located at Floor 5, Cobalt Square, 83-85 Hagley Road, Birmingham B16 8QG.
If you have any questions about this Privacy Policy or the way we use your personal information, you can contact us at mail@swisslaseruk.com or by telephone on 0333 038 6624.
Information we collect
We collect personal information that is reasonably necessary to operate the clinic, manage bookings and provide laser hair removal services.
This may include your name, date of birth, contact details, appointment and booking information, correspondence, treatment preferences, transaction and payment references, marketing preferences and information you provide when contacting the clinic.
Where necessary to assess whether treatment is suitable and safe for you, we may also collect information about your health, medical history, medication, skin conditions, allergies, previous treatments, contraindications, skin phototype, hair characteristics and other treatment-related information.
We may maintain consultation notes, patch-test records, treatment settings, practitioner notes, treatment history and photographs where photographs are appropriately taken as part of your treatment record. Any separate use of photographs for marketing, advertising or social media requires appropriate permission.
When you use our website, technical information may also be collected, including IP address, browser and device information, security logs, website interactions and cookie or similar technology data.
Where information comes from
Most personal information is provided directly by you, for example when you contact us, attend a consultation, complete a treatment or medical questionnaire, book an appointment or purchase a treatment.
We may also receive relevant information through services used to manage your booking or payment, including Fresha, and from service providers acting on our behalf where this is necessary to provide our services or administer your account.
How we use your information
We use personal information to respond to enquiries, arrange consultations and patch tests, manage appointments, assess treatment suitability, provide and personalise treatments, maintain treatment records, process payments, communicate with you about your appointments and provide customer support.
We may also use information to manage complaints, investigate incidents, maintain appropriate business and financial records, protect our legal rights, prevent fraud or misuse, maintain website and information security, comply with legal and regulatory obligations and improve the operation of our services.
Where permitted by law, we may use contact details to send information about SwissLaser services, offers or appointments. You can opt out of direct marketing at any time.
Our lawful bases
We process ordinary personal information only where we have a lawful basis to do so.
We rely on contractual necessity where processing is required to take steps at your request before entering into a contract or to provide treatments, bookings or other services you have purchased.
We rely on legal obligations where information must be processed or retained to comply with applicable law, accounting, tax, regulatory or other legal requirements.
We rely on legitimate interests where necessary to operate and administer the clinic, answer enquiries, maintain appropriate business and treatment records, protect our systems, prevent fraud, manage complaints, establish or defend legal rights and improve customer service, provided those interests are not overridden by your rights and interests.
We rely on consent where the law requires consent, including for certain marketing activities, non-essential cookies and similar technologies and other processing for which you have been specifically asked to provide consent.
Health and treatment information
Information about your health is special-category personal data and receives additional protection under UK data-protection law.
We use health and treatment-suitability information so that we can assess contraindications, determine whether treatment is appropriate, choose suitable treatment parameters, maintain an accurate treatment history and manage your safety throughout your treatment journey.
Where explicit consent is the appropriate legal condition, we process this information under Article 9(2)(a) of the UK GDPR. Where necessary for the establishment, exercise or defence of legal claims, we may process relevant special-category information under Article 9(2)(f).
You may withdraw consent where processing relies on consent. Withdrawal does not affect processing that was lawful before withdrawal. If information is necessary to assess or provide treatment safely, withdrawing or withholding that information may mean that we cannot provide or continue treatment.
Who we share information with
We share personal information only where there is a legitimate and lawful reason to do so.
This may include booking and appointment platforms such as Fresha; website and hosting providers such as Framer; payment processors; communications, email and IT providers; secure data-storage providers; professional advisers; accountants; insurers; and other suppliers who support the operation of the clinic.
We may also disclose information where required by law, to regulators or public authorities, or where reasonably necessary to establish, exercise or defend legal claims.
Service providers are given access only to information reasonably required for the services they provide and must process information in accordance with applicable data-protection requirements. Some providers may also process information as independent data controllers under their own privacy terms.
We do not sell your personal information.
International transfers
Some technology, booking, communications or infrastructure providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we use an available lawful transfer mechanism where required. This may include transfers to countries covered by UK adequacy regulations or the use of approved contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum, as appropriate.
You may contact us at mail@swisslaseruk.com if you would like more information about safeguards relating to international transfers of your personal information.
How long we keep information
We keep personal information only for as long as it is reasonably required for the purpose for which it was collected and to meet applicable legal, insurance, accounting and record-keeping requirements.
Consultation and treatment records are normally retained for eight years following the last treatment or final entry in the treatment record, unless a longer period is reasonably required because of an ongoing complaint, claim, legal requirement or other documented reason.
Financial and transaction records are normally retained for up to six years, or for any longer period required by applicable tax, accounting or legal obligations.
Enquiry records that do not result in treatment are normally retained for up to 24 months after the last meaningful contact, unless there is a legitimate reason to retain them for longer.
Marketing information is retained until you withdraw consent, opt out or the information is no longer required. We may retain a minimal suppression record after an opt-out so that we can respect your preference and avoid contacting you again for marketing.
Cookies and website technologies
Our website may use cookies and similar storage or access technologies to operate correctly, maintain security, remember choices and understand website use.
Strictly necessary technologies may be used where they are required to provide the website or a service you request. Non-essential analytics, advertising or tracking technologies are used only where the required consent has been obtained.
You can use the cookie controls provided on the website to accept, reject or change your choices for non-essential technologies.
If you follow a link to a third-party service such as Fresha, that service may use its own cookies and similar technologies in accordance with its own privacy and cookie information.
Marketing
We may send marketing by email, text message or similar electronic communication where you have given valid consent or where another lawful marketing permission, such as the applicable customer soft opt-in, is available.
Where the customer soft opt-in is used, it is limited to marketing our own similar services and is used only where you were given a clear opportunity to opt out when your contact details were collected.
Every electronic marketing communication will include a simple way to opt out. You can also ask us to stop marketing at any time by contacting mail@swisslaseruk.com.
Agreeing to receive marketing is not a condition of receiving treatment.
Your data-protection rights
Depending on the circumstances and the lawful basis being used, UK data-protection law may give you the right to request access to your personal information, correct inaccurate information, request deletion, restrict processing, receive certain information in a portable format and object to particular types of processing.
You have the right to object at any time to personal information being used for direct marketing. Where we rely on legitimate interests, you may also have the right to object to that processing.
Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise a data-protection right, contact mail@swisslaseruk.com. We may need to confirm your identity before responding to a request.
Information required from you
Certain personal information is necessary for us to arrange appointments, enter into or perform a contract with you and determine whether laser treatment can be provided safely.
If information required for treatment suitability or safety is not provided, is incomplete or is inaccurate, we may be unable to provide treatment or may need to postpone an appointment.
Automated decision-making
SwissLaser does not use your personal information to make decisions based solely on automated processing that produce legal effects or similarly significant effects on you.
Treatment suitability and treatment parameters are determined through practitioner-led assessment rather than solely automated decision-making.
Security
We use appropriate organisational and technical measures designed to protect personal information against accidental loss, unauthorised access, alteration, disclosure or misuse.
Access to personal information is limited to people and service providers who reasonably require it for their role or service.
Complaints
If you have a concern about how your personal information has been handled, please contact us first at mail@swisslaseruk.com so that we can investigate it.
You also have the right to complain to the Information Commissioner's Office, the UK's data-protection regulator.
You can find information about making a complaint at ico.org.uk.
Changes to this policy
We may update this Privacy Policy where our services, technology, providers, business practices or legal obligations change.
The latest version will be published on this website. Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to the attention of affected individuals where required.
Last updated: 27 August 2026.