The Skin Specialist Code

Privacy Statement

Last updated: 18 October 2026

The short version

Your client records never reach us. Consultation notes, client plans and your client list are saved in the browser on your own device, and we cannot see them. The only information we hold is your email address and access code from your purchase, a record of when your code opened the app, and any feedback you choose to send us.

1. Who we are and how to contact us

The Skin Specialist Code is a consultation and planning tool for skin therapists, run by Katie Bowers trading as The Skin Specialist Code ("we", "us", "our"). For anything about your personal information, email katie@theskinspecialistcode.com.

This statement covers practitioners who buy or use the app. If you are a client of a therapist who uses it, please contact your therapist first about your information.

2. What we collect about you

We keep this to the minimum the app needs to work. There are no accounts, no passwords and no profiles to build.

Purchase detailsYour email address, your personal access code, the amount and currency paid, and Stripe references that link the payment to your plan. These come from you and from Stripe when you pay.
Plan statusWhether your monthly plan is active, the months it covers, and the date it ends. This comes from Stripe.
App accessA record of when an access code was used to open the app, so we can tell whether access is working. It is tied to the code, not to a named profile.
Issued codesWhere a trial or gift code was issued to a named person, that person's name and email address with the code and its dates.
FeedbackWhat you tell us through the Give Feedback form, your name if you give it, and the page you sent it from.
VisitsOur hosting provider records basic visit information, such as pages viewed and referring site, to understand how the site is used. We do not run advertising or tracking scripts of our own.

We never see your full card details. Payments are taken by Stripe, and we do not hold card numbers.

3. What we never collect

Client names, consultation notes, assessment findings, client plans, routines, photos, product libraries, practice details and backups are stored only in the browser on the device you use. They are not uploaded to us and we have no way to read them.

You can export a backup file of everything to move it to another device or keep it safe. If you clear your browser data, or use another device or browser, those records are not there for us or for you unless you restore a backup.

4. Your clients' information

You decide what to record about your clients and why, so under UK data protection law you are the data controller for your own client records. That stays true whether the notes are on your device or in a backup file you hold.

You are responsible for having your clients' consent, for keeping the device protected with a passcode, for using the app's screen lock if others can see your device, and for storing or deleting anything you print or download securely.

Because client records never leave your device, we cannot receive, use or sell them, and we could not hand them over even if asked.

5. How we use information and our legal reason

Provide the appTo carry out our contract with you: check your access code, let you in, and keep your plan running.
Take paymentTo carry out our contract with you: process your monthly payment and issue your access code.
Send service emailsTo carry out our contract with you: send your access code and important notices about your plan. We do not send marketing emails.
Support and improveOur legitimate interest in running a useful service: answering your questions and using feedback to fix and improve the app.
Keep recordsTo meet our legal obligations: keep payment and accounting records.

We never sell your information, and we do not use it for advertising.

6. Who we share information with

We use a small number of providers to run the app. Each one only uses information to provide its service to us.

LovableHosts the app, stores the purchase, plan and feedback records, and sends app emails.
StripeTakes payments and manages subscriptions.
Google FontsSupplies the fonts the website uses.

We may also share information if the law requires it, or to protect the rights and safety of our users or others.

Some of our providers may process information outside the UK. When they do, we rely on approved safeguards, such as the UK International Data Transfer Agreement or an adequacy decision.

7. How long we keep information

Purchase and payment recordsSix years from the end of the relevant financial year, for tax and accounting.
Access code and plan statusWhile your plan runs, then with your payment records for accounting.
App access recordsWhile your access is live, then deleted.
FeedbackWhile we are developing the app from it, then deleted.
Issued trial and gift codesUntil the code ends, then deleted unless a payment record applies.

Your client records are not covered by these periods because we never hold them. They stay on your device until you delete them or clear your browser data.

8. Keeping information secure

  • There are no accounts or passwords to steal. Access depends on a personal code.
  • Purchase, plan and feedback records sit behind access controls that are not open to the public.
  • Card details are handled by Stripe, so we never hold them.
  • The app includes a screen lock for shared devices. The PIN you set is not stored as plain text.
  • No client records are held on our servers, so there is no client database to breach.

No online service can be completely secure. If a breach affects your information, we will tell you and, where required, the Information Commissioner's Office.

9. Your rights and how to complain

Under UK data protection law, you have the right to:

  • ask for a copy of the personal information we hold about you
  • ask us to correct information that is wrong
  • ask us to delete your information
  • object to, or ask us to limit, how we use it
  • ask for your information in a format you can take elsewhere
  • withdraw consent at any time, where we rely on it

Email katie@theskinspecialistcode.com to use any of these rights, and we will reply within one month. Deleting your purchase records can affect our ability to prove a payment or honour a licence, so we will explain what that means before acting.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Cookies, local storage and fonts

We do not use advertising cookies or third-party tracking scripts. The app uses your browser's local storage rather than cookies to keep you signed in to the app with your access code, to save your client records, and to remember your toolkit and screen lock settings.

Stripe uses cookies on its checkout and billing pages to process payments safely and prevent fraud. Loading the site's fonts sends a request to Google Fonts, which sees the address the request came from. Our hosting provider may count visits to the website without building profiles of individual visitors.

Clearing your browser's storage removes your access code and your client records from that device, so keep a backup file if you want to move them.

11. Changes to this statement

We may update this statement as the app changes. The new version will appear here with a new date, and a significant change will be flagged to plan holders by email.