Privacy policy

This policy explains what personal data we collect when you shop with 27beauty, why, and what rights you have over it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect

When you place an order we collect your name, delivery address, email address, phone number and order details. Payment card details are collected and processed directly by Stripe, our payment provider — we never see or store them.

Why we use it

We use your data to fulfil and deliver your order, provide customer support, meet our legal and tax obligations, and — only with your consent — to occasionally email you about offers.

Who we share it with

We share the minimum necessary data with our couriers (to deliver your parcel) and Stripe (to take payment). We do not sell your personal data to anyone.

How long we keep it

We keep order records for as long as required by UK tax law, and delete other personal data when it's no longer needed for the purpose it was collected for.

Your rights

You can ask us to access, correct, delete or export the personal data we hold about you at any time by emailing hello@27beauty.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.