Skintreats is committed to protecting our customer's privacy. Please take the time to review this notice which explains what information we collect about you, how we use it, and your rights. SKINTREATS (the "Site","we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.skintreats.co.uk (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services").

We collect personal data from you when you provide it to us directly and through your use of the Site. This information may include:

• Information you provide to us when you use our Site (e.g. your name, contact details, gender, product reviews, and any information which you add to your account profile);
• Transaction and billing information, if you make any purchases from us or using our Site (e.g. Purchases and delivery information);
• Records of your interactions with us (e.g. if you contact our customer service team, interact with us on social media);
• Information collected automatically, using cookies and other tracking technologies (e.g. which pages you viewed and whether you clicked on a link in one of our email updates). We may also collect information about the device you use to access our Site; and
• Other information necessary to provide the Site, for example we may access your IP address.

We may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

Companies that support our Site and Services (e.g., Shopify).

Our payment processors who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and perform our contract with you.

When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

Depending on how you use our Site, your interactions with us, and the permissions you give us, the purposes for which we use your personal data include:

• To fulfil your order and maintain your online account.
• To manage and respond to any queries or complaints to our customer service team.
• To personalise the Site to you and show you content we think you will be most interested in, based on your account information, your purchase history and your browsing activity.
• To improve and maintain the Site, and monitor its usage.
• For market research, e.g. we may contact you for feedback about our products.
• To send you marketing messages and show you targeted advertising, where we have your consent or are otherwise permitted to do so.
• For security purposes, to investigate fraud and where necessary to protect ourselves and third parties.
• To comply with our legal and regulatory obligations.

We rely on the following legal basis, under data protection law, to process your personal data:

Because the processing is necessary to perform a contract with you, or take steps prior to entering into a contract with you (e.g. where you have made a purchase with us, we use your personal data to process the payment and fulfil your order).
Because we have obtained your consent (e.g. where you contact us with a query, where you add optional information to your account profile, or if you consent to receive marketing from us).

Because it is in our legitimate interests as an e-commerce provider to maintain and promote our services. We are always seeking to understand more about our customers in order to offer the best products and customer experience. We use information about you to tailor your view of the Site, to make it more interesting and relevant in respect of the products and offers on view.

Our Site may allow you the option of adding additional information to your account profile, such as information about your skin type, skin tone, skin concern, make up focus and hair concerns. We treat this information with particular sensitivity, as we understand it can reveal information about your health or ethnicity, for example. You do not have to provide this information to us, and can delete it or update it at any time.

We may share your personal data with third parties, for the purposes described above, in the following circumstances:

• With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent.
• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
• With our professional and legal advisors.
• With third parties engaged in fraud prevention and detection.
• With law enforcement or other governmental authorities, e.g. to report a fraud or in response to a lawful request.

In the event that we sell any business assets, the personal data of our customers may be disclosed to a potential buyer. In this event, we will make reasonable attempts to ensure the buyer will be bound by the terms of this Privacy Policy.

Whilst we do everything within our power to ensure that personal data is protected at all times from our Site, we cannot guarantee the security and integrity of the information that has been transmitted to our Site. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

We will keep your personal data for as long as we need it for the purposes set out above, and so this period will vary depending on your interactions with us. For example, where you have made a purchase with us, we will keep a record of your purchase for the period necessary for invoicing, tax and warranty purposes. We may also keep a record of correspondence with you (for example if you have made a complaint about a product) for as long as is necessary to protect us from a legal claim. Where we no longer have a need to keep your information, we will delete it. Please note that where you unsubscribe from our marketing communications, we will keep a record of your email address to ensure we do not send you marketing emails in future.

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party.

Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Our Site is not intended for, and should not be used by, children under the age of 18. We do not knowingly collect personal data from children under 18.

If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimise the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls.

Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

For specific information about the Cookies that we use related to powering our store with Shopify; Please review their cookies policy here.

You have choices regarding our processing of your personal data as described in this section. Your rights under data protection laws: You have the right to:

• Ask for a copy of your personal data, make corrections to your personal data, and in some cases e.g. where our purposes for processing have come to an end, ask us to delete it.
• Object to our use of your personal data in certain situations, including where we use your personal data for direct marketing.
• Transfer your personal data, in certain circumstances, to another provider, in a commonly used format.
• Complain to the data protection regulator in your country. In the UK this is the Information Commissioner’s Office (www.ico.org.uk).

We will comply with any requests to exercise your rights in accordance with applicable law. Please be aware, however, that there are several limitations to these rights, and there may be circumstances where we are not able to comply with your request.

You can exercise your rights by contacting cs@skintreats.co.uk.

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you.

Please email us at cs@skintreats.co.uk.