Privacy notice
This notice explains what happens to your information when you get in touch with Purefade, book a treatment or pay a deposit. Purefade is the trading name of PUREFADELTD LTD (company no. 17566011). We decide how your information is used, so we are its "controller" under UK data protection law (the UK GDPR and the Data Protection Act 2018), which applies in Wales as across the UK. You can reach us about anything in this notice at hello@purefadeltd.com.
What we collect
- When you get in touch: your name, email address, any phone number you include, the treatment you are interested in, the times that suit you, and the emails you send us and our replies.
- When you book: your appointment dates and times, the treatment and area, how many sessions your course has and how many you have had, and any notes our team needs to arrange your visits.
- When you pay: the amount, the date and the payment reference. Card payments are taken by Stripe, so we never see or keep your full card number.
Please don't email us medical history, photos of your skin or other health details. Before a laser treatment we will need to ask you some health questions to check the treatment is safe for you. We will do that separately, explain how those answers are kept, and only use them to look after you.
Why we use it, and our legal reasons
- To answer your questions, offer and arrange appointments, and keep in touch about a booking you have asked for. This is needed to provide the treatment you have asked for (a contract with you, or steps you asked us to take before one).
- To take deposits and payments, and to keep our business and tax records. We have to do this by law.
- To keep a copy of emails to and from hello@purefadeltd.com so the team can see what was agreed, and to keep our systems secure. This is in our legitimate interests in running the clinic properly, and we keep it to what is needed.
- Health information from a consultation is only used with your explicit consent, to decide whether a treatment is safe for you.
We will never sell your details. We won't send you marketing unless you have said yes, and you can change your mind at any time.
Who else sees it
A few trusted companies help us run the business. They only handle your details on our instructions:
- Resend, which receives and sends our emails.
- Cloudflare, which hosts this website and our private booking system, and keeps them secure.
- Stripe, which takes card payments if you pay a deposit or balance online.
Laser clinics in Wales are regulated by Healthcare Inspectorate Wales (HIW). HIW inspectors can look at consultation and treatment records during an inspection, and we must share information with them when the law requires it. We may also share information with our accountant, our insurer if there is a claim, or HMRC and other authorities when the law requires it. Some of these companies may handle data outside the UK. When they do, they use legal safeguards approved under UK data protection law.
Only Purefade staff can see your booking and email records. They sign in with their own accounts and a second check, and our booking system is not open to the public.
How long we keep it
- Emails to and from hello@purefadeltd.com are kept for 12 months, then deleted automatically. Our email provider keeps its own copy for about 30 days.
- Consultation and treatment records (including any health answers and patch-test results) are kept for eight years after your last treatment, in line with guidance for health records in Wales.
- Bookings and payment records are kept for six years after your last appointment, because UK tax law requires us to keep business records.
- Enquiries that don't lead to a booking are only kept as emails, so they are deleted after 12 months.
Deleted information can stay in our hosting provider's backups for up to 30 days before it is gone for good.
Your rights
You can ask us for a copy of the information we hold about you, ask us to correct it, delete it or limit how we use it, object to how we use it, or ask for it in a format you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. Just email hello@purefadeltd.com. We will reply within one month. Some records, such as payment records, may have to be kept for the time the law requires, and we will tell you if that applies.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office.
Changes to this notice
If we change how we use your information, we will update this page and the date below.
Last updated: 13 November 2026
PUREFADE