Privacy Policy

Eunoia Skin Ltd (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, make a purchase, or interact with us.

We comply with:

UK GDPR
Data Protection Act 2018
EU GDPR (for EU customers)

By using our website, you agree to the practices described in this policy.

Eunoia Skin Ltd Company Registration Number: 17183517 Registered Office:

First Floor, Swan Buildings, 20 Swan Street, Manchester, M4 5JW Email: admin@eunoiaskin.co.uk

We are the data controller for your personal data.

We collect the following types of information:

Name
Email address
Phone number (optional)
Billing address
Shipping address
Order details
Payment information (processed securely by third‑party providers)
Messages sent via contact forms or email

Information collected automatically:

IP address
Device type
Browser type
Pages viewed
Time spent on site
Cookies and tracking technologies (via IONOS, Shopify, TikTok, analytics tools)

Information through Third-Party Platforms:

If you purchase through TikTok Shop or Shopify, they may share order and delivery information with us.

We use your information to:

Process and deliver your orders
Manage payments and refunds
Provide customer support
Send order confirmations and updates
Improve our website and services
Prevent fraud
Comply with legal obligations

We do not sell your data.

We process your data under the following lawful bases:

Contract – to fulfil your order
Legal obligation – tax, accounting, consumer rights
Legitimate interests – website analytics, fraud prevention
Consent – marketing emails, cookies

You can withdraw consent at any time.

We only share your data with trusted third parties necessary to run our business:

Shopify (website + checkout)
TikTok Shop (if you order through TikTok)
Payment processors (e.g., Stripe, PayPal, Shopify Payments)
Delivery partners (Royal Mail, couriers)
Accountants (for legal financial reporting)
IT and hosting providers (IONOS)

All third parties must keep your data secure and comply with GDPR.

We do not sell or rent your data.

If your data is transferred outside the UK/EU, we ensure appropriate safeguards such as:

Standard Contractual Clauses (SCCs)
Adequacy decisions

We retain your data only as long as necessary:

Order records: 6 years (legal requirement)
Marketing data: until you unsubscribe
Website analytics: typically 26 months (varies by provider)

You have the right to:

Access your data
Correct inaccurate data
Request deletion
Restrict processing
Object to processing
Withdraw consent
Request data portability

To exercise your rights, email: admin@eunoiaskin.co.uk

Marketing Communications:

You will only receive marketing emails if you:

Opt in on our website
Subscribe to our newsletter
Give explicit consent

You can unsubscribe at any time.

Cookies:

Our website uses cookies for:

Essential website functionality
Analytics
Marketing and advertising
Performance

You can manage your cookie preferences through our cookie banner (powered by IONOS).

We take appropriate technical and organisational measures to protect your data, including:

Encrypted payment processing
Secure servers
Access controls
Regular security monitoring

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

If you have questions about this Privacy Policy or your data rights, contact us at:

Email: admin@eunoiaskin.co.uk Address: First Floor, Swan Buildings, 20 Swan Street, Manchester, M4 5JW