PRIVACY POLICY

Last Updated: 5 June 2026

WHO WE ARE

Sheffield Skincare Company is an independent skincare manufacturer and retailer based in Sheffield.

Our registered manufacturing address is:

Sheffield Skincare Company
Unit 6A
58 Upper Allen Street
Sheffield
S3 7GL

Email: enquiries@sheffieldskincare.co.uk

For the purposes of UK data protection law, Sheffield Skincare Company is the Data Controller responsible for the personal information we collect and process.

OUR COMMITMENT TO YOUR PRIVACY

We are committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains:

• What information we collect

• Why we collect it

• How we use it

• Who we share it with

• How long we keep it

• Your rights regarding your information

• How to make a complaint

By using our website or purchasing from us, you agree to the collection and use of information as described in this policy.

INFORMATION WE COLLECT

Information You Provide

When you place an order, create an account, contact us or sign up to receive communications from us, we may collect:

• Name

• Billing address

• Delivery address

• Email address

• Telephone number

• Order history

• Payment information

• Information provided through contact forms

• Competition and giveaway entries

Information Collected Automatically

When you visit our website, we may collect:

• IP address

• Device type

• Browser type

• Operating system

• Website usage information

• Pages visited

• Referring websites

• Location information derived from IP address

• Shopping basket activity

HOW WE USE YOUR INFORMATION

We use your information to:

• Process and fulfil orders

• Deliver products

• Provide customer support

• Manage your account

• Respond to enquiries

• Process refunds and returns

• Improve our products and services

• Prevent fraud

• Meet legal obligations

• Send marketing communications where you have consented

OUR LEGAL BASIS FOR PROCESSING

Under UK GDPR we rely on the following lawful bases:

Contract

To process and fulfil orders and provide customer support.

Legitimate Interests

To improve our website, prevent fraud and operate our business efficiently.

Consent

For email marketing, cookies where required and certain promotional activities.

Legal Obligation

To comply with tax, accounting and regulatory requirements.

PAYMENT PROCESSING

We do not store full payment card details.

Payments are processed securely through trusted third party payment providers including Shopify Payments and PayPal.

These providers process your payment information in accordance with their own privacy policies.

All payment transactions are encrypted using secure technology.

DELIVERY OF YOUR ORDERS

To deliver your purchases we share necessary information with our delivery partners including:

• Royal Mail

• DPD

This information may include:

• Name

• Delivery address

• Email address

• Telephone number

• Order value where required for insurance purposes

WEBSITE HOSTING

Our website is hosted by Shopify.

Shopify stores customer information on secure servers and processes personal data on our behalf.

You can view Shopify's privacy policy at:

https://www.shopify.com/legal/privacy

GOOGLE ANALYTICS

We use Google Analytics to understand how visitors use our website.

Google Analytics may collect information including:

• Device information

• Browser information

• Pages visited

• Approximate location

• Time spent on the website

We use this information to improve our website and customer experience.

Where required by law, analytics cookies will only be used after consent has been provided.

MARKETING COMMUNICATIONS

We may send marketing communications where you have:

• Given consent

• Signed up to receive our newsletter

• Requested information from us

You may unsubscribe at any time by:

• Clicking the unsubscribe link in any email

• Contacting us directly

We do not sell customer data to third parties.

SOCIAL MEDIA

We use social media platforms including Facebook and Instagram for marketing purposes.

When interacting with our social media pages, your information may also be processed by Meta in accordance with its own privacy policies.

COMPETITIONS, GIVEAWAYS AND PROMOTIONS

If you enter a competition or giveaway we may collect:

• Name

• Email address

• Postal address

• Telephone number

This information will only be used to administer the promotion unless you separately choose to receive marketing communications.

Competition data will normally be deleted within three months of the promotion ending unless required for legal or accounting purposes.

IN STORE PURCHASES

When you make a purchase in our retail store we may collect:

• Transaction details

• Purchase history

• Email address for receipts

• Telephone number for receipts

• Contact details for event bookings or product reservations

Receipt details provided through our payment system are partially masked and cannot be viewed in full by our staff.

Where personal information is collected for bookings, reservations or event attendance, it will only be used for that purpose.

SPECIAL CATEGORY DATA

We do not normally collect special category personal data.

This includes information relating to:

• Health

• Religious beliefs

• Political opinions

• Ethnic origin

• Sexual orientation

• Trade union membership

If you voluntarily provide such information, we will only process it where permitted by law.

WHO WE SHARE INFORMATION WITH

We may share information with trusted service providers including:

• Shopify

• PayPal

• Royal Mail

• DPD

• Google Analytics

• Professional advisers

• Regulatory authorities where required

We require all third parties to respect the security of your information and process it lawfully.

We never sell customer information.

HOW LONG WE KEEP INFORMATION

We retain personal information only for as long as necessary.

Typical retention periods are:

Order records: 7 years

Accounting records: 7 years

Customer enquiries: up to 2 years

Competition entries: 3 months after completion

Marketing subscriptions: until consent is withdrawn

Website analytics data: according to Google Analytics retention settings

YOUR RIGHTS

Under UK GDPR you have the right to:

• Access your personal information

• Correct inaccurate information

• Request deletion of information

• Restrict processing

• Object to processing

• Withdraw consent

• Request transfer of your data

• Lodge a complaint

To exercise your rights please contact:

enquiries@sheffieldskincare.co.uk

We may request proof of identity before processing your request.

DATA SECURITY

We use appropriate technical and organisational measures to protect personal information.

These measures include:

• Secure website encryption

• Password protected systems

• Restricted access controls

• Secure data storage

• Staff confidentiality obligations

Where a data breach occurs that may affect your rights and freedoms, we will comply with our legal obligations to notify affected individuals and regulators where required.

DATA PROTECTION COMPLAINTS PROCEDURE

We are committed to handling concerns about personal information fairly and transparently.

If you have a concern regarding how we collect, use, store or share your personal information, you may make a complaint by contacting:

Email: enquiries@sheffieldskincare.co.uk

Post:

Sheffield Skincare Company
Unit 6A
58 Upper Allen Street
Sheffield
S3 7GL

When a complaint is received we will:

• Acknowledge the complaint within 30 days

• Investigate the matter fairly and impartially

• Keep you informed where appropriate

• Provide a written response outlining the outcome

Where additional time is required due to the complexity of the complaint, we will explain the reason for any delay and provide an updated timeframe.

We maintain records of data protection complaints in accordance with our legal obligations.

HOW TO COMPLAIN

If you remain dissatisfied after contacting us, you have the right to complain to the Information Commissioner's Office (ICO).

Information Commissioner's Office

Website: https://ico.org.uk/make-a-complaint/

Telephone: 0303 123 1113

Address:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

Any significant changes will be published on our website together with the date of the latest revision.