Privacy policy
This policy explains what personal data we collect when you shop with 27beauty, why, and what rights you have over it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
When you place an order we collect your name, delivery address, email address, phone number and order details. Payment card details are collected and processed directly by Stripe, our payment provider โ we never see or store them.
Why we use it
We use your data to fulfil and deliver your order, provide customer support, meet our legal and tax obligations, and โ only with your consent โ to occasionally email you about offers.
Website statistics
To understand which products interest people and improve the shop, we count how the site is used: which pages are viewed, how long for and how far down, what is searched for, what goes in the basket, the website or QR card that brought you here, and your device type and country. We do this without cookies and without identifying you: your IP address is never stored, and visits are grouped using a code that changes every day, so no one โ including us โ can link your visits together or back to you. Nothing is shared with advertisers or other third parties, and these records are deleted after 180 days. If your browser sends a "Do Not Track" or Global Privacy Control signal, you aren't counted at all.
Who we share it with
We share the minimum necessary data with our couriers (to deliver your parcel) and Stripe (to take payment). We do not sell your personal data to anyone.
How long we keep it
We keep order records for as long as required by UK tax law, and delete other personal data when it's no longer needed for the purpose it was collected for.
Your rights
You can ask us to access, correct, delete or export the personal data we hold about you at any time by emailing 27beautyltd@gmail.com. You also have the right to complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.