1. What Personal Data We Collect

We collect only the personal data needed to process your order, provide customer support, and—if you choose—send marketing communications.

Specifically, we may collect:

  • Identification & contact details: Name, billing and delivery address, email, and phone number.
  • Order details: Products purchased, order number, and payment status (payment details are handled securely by our payment provider—we do not store card details).
  • Account information: If you create an account, we store your login email and encrypted password.
  • Marketing preferences: Your consent for email newsletters (if you subscribe).
  • Technical data: IP address, browser type, and cookies for website functionality and analytics.

We do not process any unnecessary personal information beyond what is required to run our business.


2. How We Use Your Personal Data

We process personal data only for the following purposes:

  • Order processing: To accept, confirm, and deliver your order.
  • Customer support: To respond to your questions, including any claims about counterfeit products.
  • Marketing: If you subscribe, to send you email updates about our products. You can unsubscribe at any time.
  • Website functionality: To operate our site, improve performance, and analyse traffic using cookies.

We do not sell your personal data or share it with third parties for their own marketing purposes.


3. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Performance of a contract: To fulfil your order and provide customer support.
  • Legal obligations: To comply with tax and accounting regulations.
  • Consent: For marketing communications (if you opt in).
  • Legitimate interests: For website analytics and fraud prevention, unless you object.

4. Sharing Your Data

We only share personal data with:

  • Delivery companies to fulfil your order.
  • Payment providers for secure payment processing.
  • IT service providers who help us maintain our website and security.

All third parties follow strict data protection rules and process data only as instructed by us.

We do not transfer your personal data outside the UK or EEA unless appropriate safeguards are in place.


5. Data Retention

We keep your personal data only as long as necessary to:

  • Complete your order.
  • Comply with legal obligations (e.g., tax records for up to 6 years).
  • Resolve disputes, including counterfeit claims.

Marketing data is kept until you unsubscribe.


6. Data Security

We use appropriate technical and organisational measures, including SSL encryption, to protect your personal data from loss, misuse, or unauthorised access.

If you have an account, please keep your password secure and do not share it with anyone.


7. Cookies

We use cookies to:

  • Enable website functionality (e.g., shopping cart).
  • Improve user experience and analyse site traffic.
  • Show relevant ads (if applicable).

You can control or disable cookies in your browser settings.


8. Your Data Protection Rights

You have the right to:

  • Marketing preferences: Your consent for email newsletters (if you subscribe).
  • Rectify inaccurate data.
  • Erase your data when it is no longer needed.
  • Restrict or object to processing in certain circumstances.
  • Withdraw consent for marketing at any time.

To exercise any of these rights, please contact us.

If you believe your rights have been violated, you may also complain to the Information Commissioner’s Office (ICO).


9. Contact Us

For any questions about this Privacy Policy or how we handle your data, contact us at:

Email: support@GrandBeautyOutlet.onmicrosoft.com

.