Privacy policy

Who we are

GPU.Skin is a UK-first cosmetic skincare information, routine-personalisation, product-discovery, and clinic-matching platform. This policy describes how we handle personal data. It is a working draft for administrators to review with a UK-qualified privacy adviser before public launch. It is not legal advice.

Data we collect

Account details (name, email, optional phone).

Skin Profile quiz answers you submit, including optional location for clinic matching.

Optional photos, only with explicit consent, stored privately and never used to diagnose disease.

Orders, entitlements, clinic enquiries, and consent records.

Technical logs needed to run the service, and optional analytics cookies if you allow them.

A first-party traffic pulse: a hashed session id, page path, device class, timezone, language, and referrer host. We do not store IP addresses or emails on the public pulse board. You can opt out in this browser by setting localStorage pulse-no-track to 1.

Why we use it

To provide the quiz, teaser results, and — if purchased — a Skin Upgrade Plan.

To match product categories to your stated goals.

To share a clinic enquiry with a named or matched partner, only if you consent.

To send transactional email (receipts, enquiry confirmations). Marketing email is optional and off by default.

Sharing

Clinic partners receive enquiry details you consented to share. They do not receive your private photos by default.

Payment processors (for example Stripe) receive what they need to take payment.

We do not sell your quiz answers.

Retention and your rights

You can request a copy of your data or ask us to delete it from the dashboard privacy page. Photo retention defaults to an admin-configurable period (90 days unless changed).

UK GDPR rights include access, correction, deletion, restriction, and complaint to the ICO. Confirm final wording with your adviser.