Privacy Policy

Last Updated: 24/02/2026

1. Who We Are

This website is operated by PURE.COSMETICS LONDON LTD (“we”, “us”, “our”).

Registered in England & Wales

Registered Office: 167-169 Great Portland Street, London, UK, W1W 5PF

Email: connect@purecosmetics.uk
Website: www.purecosmetics.uk

We are the Data Controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

We may collect and process the following data:

A. Identity & Contact Data

Full name
Billing address
Delivery address
Email address
Phone number

B. Order & Transaction Data

Products purchased
Order history
Payment method (processed securely by payment providers — we do not store full card details)

C. Technical Data

IP address
Browser type and version
Time zone setting
Device type
Website usage data

D. Marketing & Communications Data

Email marketing preferences
Communication history

3. How We Collect Your Data

We collect data when you:

Place an order
Create an account
Subscribe to our newsletter
Contact us
Enter a competition or promotion
Browse our website (via cookies)

4. How We Use Your Data

We use your data to:

Process and fulfil orders
Deliver products
Process payments
Provide customer service
Send order updates
Improve our website and products
Send marketing emails (only if you opt in)
Comply with legal obligations

We do not sell your personal data to third parties.

5. Legal Basis for Processing

Under UK GDPR, we rely on:

Contractual necessity (to fulfil your order)
Legal obligation (tax/accounting compliance)
Legitimate interests (improving our services)
Consent (for marketing emails)

You may withdraw marketing consent at any time.

6. Sharing Your Data

We may share your data with trusted third parties, including:

Payment processors (e.g., Stripe, PayPal, Shopify Payments)
Shipping providers (e.g., Royal Mail, courier services)
Website hosting providers
Email marketing platforms
Accountants and legal advisors where required
Regulatory authorities where legally required

All third parties are required to process data securely and in compliance with data protection law.

7. International Transfers

If we transfer your data outside the UK or EEA (for example, to cloud providers), we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses
Adequacy decisions

8. Data Retention

We retain personal data only as long as necessary:

Order data: typically 6 years (for tax compliance)
Marketing data: until you unsubscribe
Customer service data: as reasonably required

After this period, data is securely deleted.

9. Your Rights Under UK GDPR

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Object to processing
Data portability
Withdraw consent (for marketing)

To exercise your rights, contact:
[Insert Contact Email]

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk

10. Cookies

Our website uses cookies to:

Enable website functionality
Improve user experience
Analyse traffic
Support marketing and advertising

You can manage cookies via your browser settings.

(You should also create a separate Cookie Policy if using Meta Pixel, Google Analytics, TikTok Pixel etc.)

11. Security

We implement appropriate security measures including:

SSL encryption
Secure payment gateways
Restricted internal access
Encrypted data storage where applicable

However, no method of internet transmission is 100% secure.

12. Children’s Privacy

Our products are not intended for children under 16.

We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy periodically.

Changes take effect immediately upon publication on this page.