Privacy policy
Privacy Policy
Version 2.0 · Effective March 2026
This Privacy Policy explains how Skintique Limited (trading as Skintique Retail), company number 10541519, registered office 124 City Road, London EC1V 2NX (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you visit, use, or make a purchase through our website, or otherwise communicate with us. We are the data controller of your personal information for the purposes of UK data-protection law.
Please read this Privacy Policy carefully. By using or accessing our services, you acknowledge that you have read this Privacy Policy and understand how we handle your information.
For data-protection enquiries, please contact us at info@skintique.co.uk. For customer-service queries, please contact hello@skintique.co.uk.
1. Personal information we collect
We may collect or process the following categories of personal information, depending on how you interact with us:
- Contact details — your name, address, billing address, shipping address, phone number, and email address.
- Payment information — payment card details, transaction details and payment confirmations. Card numbers are processed by our payment provider; we do not store full card numbers.
- Account information — username, password, security questions, preferences and settings.
- Transaction information — items you view, add to cart, add to wishlist, purchase, return, exchange or cancel.
- Communications — the content of communications between you and us, including by email, phone, chat, and through messaging platforms.
- Reaction-report information — if you submit a Product Reaction Report, we collect detailed information about the reaction, your medical history (insofar as you provide it), photographs of the reaction, and other contextual information described in the Report. This is special category data under UK data-protection law (see Section 4 below).
- Device and technical information — your device, browser, network connection, IP address, and other unique identifiers.
- Usage information — how and when you interact with or navigate our website, including through cookies and similar technologies (see Section 18 below).
2. Where we collect personal information from
- Directly from you — when you create an account, place an order, contact us, complete a Product Reaction Report, or otherwise provide us with information.
- Automatically through our services — from your device when you visit our website or use our services, including through cookies and similar technologies.
- From our service providers — including platforms that help us operate the site, process payments, send communications, or analyse usage.
- From fraud-prevention agencies — including the National Fraud Database, where we check or share information for fraud-prevention purposes.
3. How we use your personal information and our lawful basis
We use personal information for the following purposes, on the lawful bases stated below.
To provide our products and services
We use your information to perform the contract between you and us — including to process orders, take payments, arrange delivery, manage returns, maintain your account, respond to enquiries, and provide customer support. Lawful basis: contract performance (UK GDPR Article 6(1)(b)).
To investigate reaction reports
Where you submit a Product Reaction Report, we use the information you provide — including the photographic record and any medical context — to investigate the reaction with the product’s manufacturer. The processing of health-related information for this purpose is based on your explicit consent (UK GDPR Articles 6(1)(a) and 9(2)(a)), given when you sign the declaration on the Report. You can withdraw consent at any time by contacting info@skintique.co.uk; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To send marketing communications
We send marketing emails, SMS, WhatsApp messages, Instagram direct messages and Facebook Messenger messages on the lawful bases set out in Section 6 below. Service messages (order confirmations, delivery updates, replies to your enquiries) are sent on the basis of your contract with us and your specific request, regardless of marketing preferences.
For online advertising
We use cookies and similar technologies to show you adverts for our products on third-party websites and platforms. Lawful basis: consent (UK GDPR Article 6(1)(a)), captured through our cookie banner. See Sections 7 and 18 below.
For fraud prevention
We process information to detect, investigate and prevent fraud, including by checking and sharing information with fraud-prevention agencies. Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)) — specifically our interest in protecting our business and our honest customers from the cost of fraudulent claims, and the wider retail community’s interest in shared fraud prevention. We have carried out a Legitimate Interests Assessment for this processing. See Section 8 below.
To comply with legal obligations
We process information to comply with applicable law, including our obligations under tax, accounting, consumer protection and product-safety legislation, and to respond to lawful requests from authorities. Lawful basis: legal obligation (UK GDPR Article 6(1)(c)).
To establish or defend legal claims
Where necessary, we process information to bring or defend legal claims. Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)); for special category data, establishing or defending legal claims (UK GDPR Article 9(2)(f)).
To improve our services
We use information about how customers use our website to improve our products, our service, and the customer experience. Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)).
4. Special category data — health and reaction-report information
Where you submit a Product Reaction Report, the information you provide is likely to include health-related information — descriptions of symptoms, photographs of physical condition, medical history, current medications, and similar. This is “special category data” under UK data-protection law (UK GDPR Article 9).
We process this information on the basis of your explicit consent, captured at the point you sign the declaration on the Report. You can withdraw consent at any time by contacting info@skintique.co.uk. Withdrawal of consent will end our investigation of the reaction but does not affect the lawfulness of processing already carried out.
We do not share special category data with advertising platforms or use it for marketing purposes. It is shared only with the UK Responsible Person named on the product’s packaging, who handles the manufacturer-side investigation, and with regulators where required by law (for example, where a serious undesirable effect requires notification under UK cosmetic-safety regulations).
5. Who we share your personal information with
We may share your personal information with:
- Shopify Inc. — our e-commerce platform provider. Shopify processes information on our behalf to provide the website, manage your account and process orders. See the Shopify Consumer Privacy Policy for details of how Shopify handles your information.
- Service providers — including providers of email and SMS communications (such as Klaviyo), messaging platforms (Meta WhatsApp, Twilio), customer-service tools, analytics, payment processing, fulfilment and delivery, IT support, and cloud storage. These providers process your information on our behalf under written agreements that require them to protect it.
- Couriers and delivery partners — we share name, address, phone number and order details with Royal Mail or other couriers as needed to deliver your order.
- The UK Responsible Person for products — where you submit a Product Reaction Report, we share the relevant information with the UK Responsible Person named on the product’s packaging, who is responsible for the investigation including any contact with the brand’s manufacturer overseas.
- Fraud-prevention agencies — including the National Fraud Database (operated by Cifas), where we identify activity we reasonably consider to be fraudulent. See Section 8 below.
- Affiliate networks — including AWIN, where you have arrived at our site through an affiliate link. Limited information about the transaction (typically order value and an anonymous identifier) is shared for commission tracking.
- Advertising platforms — where you have consented to advertising cookies, we share limited information with platforms including Meta (Facebook and Instagram), Google, TikTok, and Pinterest for the purposes described in Section 7. We do not share health-related information or reaction-report information with these platforms.
- Authorities and regulators — where required by law or in response to a lawful request, including OPSS for cosmetic-safety reporting where a serious undesirable effect requires notification.
- Legal advisers and insurers — where necessary in connection with the establishment or defence of a legal claim.
- Buyers, sellers and advisers — in connection with a business sale, restructuring, or insolvency, where we have a legitimate interest in disclosure.
6. Marketing communications
We may send you marketing communications about our products and services through the channels you have agreed to receive them on. The lawful basis depends on the channel:
- Email and SMS — we send marketing communications by email and SMS where you are an existing customer of similar products and we offered you a clear opportunity to refuse when we collected your details, or where you have given us specific consent. This is sometimes called the “soft opt-in” under PECR Regulation 22(3). You can opt out at any time by clicking the unsubscribe link in any marketing email, replying STOP to any marketing SMS, or contacting info@skintique.co.uk.
- WhatsApp, Instagram direct message and Facebook Messenger — we send marketing messages on these channels only where you have given us specific consent to receive marketing on the channel concerned. We do not rely on the soft opt-in for these channels. You can opt out at any time by replying STOP to any WhatsApp message, by blocking us on the relevant platform, or by contacting info@skintique.co.uk.
- Phone calls — we do not currently carry out telephone marketing. If we do in future, we will check the Telephone Preference Service register and will only call where we have your specific consent.
Service and utility messages — such as order confirmations, delivery updates, replies to enquiries you have made of us, and back-in-stock notifications you have specifically requested — are sent on the lawful basis of your specific request and are not subject to the marketing consent regime above.
7. Online advertising
We use cookies and similar technologies to show you relevant adverts for our products on other websites and platforms, including Meta (Facebook and Instagram), Google, TikTok, Pinterest and others. This may include showing you adverts for products you have looked at on our website, showing our adverts to people whose interests are similar to those of our existing customers, and measuring whether our adverts lead to sales.
We rely on your consent for online advertising of this kind. You can give or withdraw consent at any time using our cookie banner. If you withdraw consent, you may still see adverts for our products, but they will not be tailored to you based on your activity with us.
We do not share health-related information or reaction-report information with advertising platforms.
Some of the advertising platforms we use are based outside the UK. Where we share information with them, the safeguards described in our International Transfers section apply.
For full details of the cookies used for advertising, please see Section 18 below.
8. Fraud prevention
Like all UK retailers, we work hard to protect honest customers from the cost of fraudulent claims. We may verify information provided in connection with refund requests, non-delivery reports, and similar matters, including by reviewing courier evidence, packing CCTV, and order history.
Where we identify activity that we reasonably consider to be fraudulent, we may share relevant information with Action Fraud UK and with fraud-prevention agencies including the National Fraud Database (operated by Cifas). Information shared with these agencies may be used by other organisations to help prevent fraud and money laundering, in accordance with their published terms.
The lawful basis for this processing is our legitimate interests — specifically our interest in protecting our business and our honest customers from fraud, and the wider retail community’s interest in shared fraud prevention — balanced against the rights and interests of those whose information is shared. We have carried out a Legitimate Interests Assessment for this processing.
We do not refuse a refund or remedy on the basis of suspicion alone, and your statutory rights as a consumer are not affected if your claim is genuine.
If you wish to know whether your information has been shared with the National Fraud Database, you can contact Cifas directly at cifas.org.uk.
9. International transfers
Skintique is based in the United Kingdom and we keep your information in the UK or Europe wherever we can. Some of the companies that help us run the website and the things we send you — for example, our email platform, our hosting provider, our payment processor and our analytics — are based in the United States or other countries. When your information goes to those companies, we use the safeguards the UK government has approved for international data sharing.
If you submit a reaction report, we share it with the UK Responsible Person named on the product’s packaging. They are responsible for the investigation, including any contact with the brand’s manufacturer, and they handle any sharing of information beyond the UK in line with their own data-protection obligations.
You can ask us at any time which countries your information has been shared with by emailing info@skintique.co.uk.
10. How long we keep your information
We keep your information for as long as necessary for the purposes set out in this Privacy Policy and to comply with our legal obligations. Specific retention periods include:
- Order and transaction records — 6 years from the date of the order, to meet our obligations under HMRC tax record-keeping rules and the Limitation Act 1980.
- Customer account data — for the lifetime of your account, plus 6 years from account closure.
- Customer-service correspondence — 3 years from the last contact.
- Marketing consent records — until consent is withdrawn, plus 6 years to evidence the basis on which marketing was sent.
- Reaction-report information — 10 years from the date of the report, matching the longstop limitation period for product-liability claims under section 11A of the Consumer Protection Act 1987.
- Fraud-prevention records — in accordance with the published retention periods of the relevant fraud-prevention agency (typically 6 years for National Fraud Database records).
- Analytics and website usage data — in line with the cookie expiry periods set out in Section 18 below.
After the retention period expires, we will delete or anonymise your information.
11. Security
We take appropriate technical and organisational measures to protect your information against accidental loss, unauthorised access, disclosure or destruction. These measures include access controls, encryption in transit and at rest where appropriate, staff training, and regular reviews of our systems.
No security measures are perfect or impenetrable. Information sent over the internet can never be fully secure in transit. We recommend that you do not send sensitive information by email or other unsecured channels.
12. Your rights
Under UK data-protection law you have the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.
- Right of access — you have the right to ask for a copy of the personal information we hold about you.
- Right to rectification — you have the right to ask us to correct inaccurate or incomplete personal information.
- Right to erasure — you have the right, in certain circumstances, to ask us to delete personal information we hold about you.
- Right to restriction of processing — you have the right, in certain circumstances, to ask us to restrict how we use your information.
- Right to data portability — you have the right to ask us to transfer your personal information to another organisation, in certain circumstances.
- Right to object — you have the right, in certain circumstances, to object to our processing of your personal information, including for direct marketing.
- Right to withdraw consent — where we rely on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Rights in relation to automated decision-making — we do not currently carry out solely automated decision-making with legal or similarly significant effects on you.
To exercise any of these rights, contact us at info@skintique.co.uk. We will respond to your request within one calendar month of receipt. We may extend this by up to two further months for complex or numerous requests, in which case we will notify you within the first month of the extension and the reason for it.
We may need to verify your identity before processing a request, as permitted by law. You may also designate an authorised agent to make a request on your behalf; we may require proof of authorisation. Exercising these rights is free of charge in most cases; we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.
13. Complaints
If you have a concern about how we handle your personal information, please contact us first at info@skintique.co.uk and we will do our best to resolve it.
If you live in the United Kingdom and you remain unhappy, you have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk or by phone on 0303 123 1113.
If you live in the European Economic Area, you may also lodge a complaint with your local data-protection supervisory authority. A list of EEA authorities is published by the European Data Protection Board.
14. Children’s data
Our website is intended for adults. We do not knowingly collect personal information from children under 13 years of age. Section 9 of the UK Data Protection Act 2018 sets the minimum age for valid consent to information society services in the UK at 13. For any user we know or suspect to be under 13, we will require the consent of a person with parental responsibility before processing their personal information, in accordance with Article 8 of the UK GDPR.
If you are a parent or guardian and you believe a child has provided us with personal information without appropriate consent, please contact us at info@skintique.co.uk and we will delete the information promptly.
Our customer-service team and advisory communications are intended for users aged 18 and over. See our Terms of Service.
15. Third-party websites and links
Our website may contain links to third-party websites and platforms. We are not responsible for the privacy practices of those third parties. If you follow a link, you should review the privacy notice and other terms of the site you visit.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, in regulation, or for other operational reasons. We will post the updated policy on this page and update the “Effective” date at the top. Where changes are material we will provide notice as required by law.
17. Contact
For questions about this Privacy Policy or to exercise any of your rights, please contact:
- Data-protection enquiries: info@skintique.co.uk
- Customer service: hello@skintique.co.uk or 020 8088 8342
- Postal address: Skintique Limited, 124 City Road, London EC1V 2NX
For the purposes of UK data-protection law, Skintique Limited is the data controller of your personal information.
18. Cookies
This section explains how we use cookies and similar technologies on our website. It forms part of this Privacy Policy.
What cookies are
Cookies are small text files placed on your device when you visit a website. They allow the site to remember things about your visit, such as items in your cart, your login state, or your preferences. Some cookies also allow us, or third parties, to recognise you on different websites for advertising or analytics purposes.
We use cookies and similar technologies such as pixels, tracking scripts, and local storage on our website. References to “cookies” in this section include all such technologies.
Categories of cookies we use
Strictly necessary cookies
These cookies are essential for the website to function. They enable core features such as adding items to your cart, signing in to your account, and processing payments. Without these cookies, the website cannot operate properly. Because these cookies are strictly necessary for a service you have requested, we do not need your consent to use them.
Examples of what these cookies do:
- remember the contents of your cart between pages
- keep you logged in once you sign in to your account
- protect against fraud and unauthorised access
- remember your cookie preferences
Analytics cookies
These cookies help us understand how visitors use our website — for example, which pages are visited most often, how visitors move through the site, and where errors occur. We use this information to improve the site and the products we offer. Analytics cookies do not directly identify you to us as an individual, but they do collect information about your browsing.
We use analytics cookies only with your consent.
Marketing and advertising cookies
These cookies are set by us and by third-party advertising platforms (including Meta — Facebook and Instagram — Google, TikTok, Pinterest and others). They allow us to show you relevant adverts for our products on other websites and platforms, measure the performance of our advertising, and reach audiences who may be interested in our products.
This may include showing you adverts for products you have looked at on our website, showing our adverts to people whose interests are similar to those of our existing customers, and measuring whether our adverts lead to sales.
We use marketing and advertising cookies only with your consent. We do not share health-related information or reaction-report information with advertising platforms.
How to manage your cookie preferences
When you first visit our website, you will be presented with a cookie banner that lets you accept or reject non-essential cookies. You can change your preferences at any time using our cookie preferences control, which is accessible from the footer of our website.
Rejecting non-essential cookies is as simple as accepting them. If you reject non-essential cookies, you may still see adverts for our products elsewhere online, but they will not be tailored to you based on your activity on our website. Essential parts of the website will continue to work as normal.
Browser controls
You can also control or delete cookies through your browser settings. Most browsers allow you to:
- see what cookies are stored and delete them individually
- block third-party cookies
- block cookies from particular sites
- block all cookies from being set
- delete all cookies when you close the browser
If you block all cookies, including strictly necessary cookies, parts of our website will not function correctly.
Cookies set by third parties
Some cookies on our website are set by third parties. We do not control these cookies and they are subject to the privacy policies of the third parties concerned. Third parties that may set cookies on our website include, but are not limited to:
- Shopify — for hosting, cart functionality, and checkout (essential)
- Klaviyo — for email and SMS marketing communications (with consent)
- Google — for analytics and advertising (with consent)
- Meta (Facebook and Instagram) — for advertising and audience matching (with consent)
- TikTok, Pinterest, and other advertising platforms — for advertising (with consent)
- Trustpilot, Feefo or similar review platforms — for reviews (with consent for non-essential elements)
- AWIN — for affiliate tracking (where consent applies)
For more information on a specific third party’s cookies, please consult that third party’s privacy or cookie policy.
International transfers of cookie data
Some of the third parties whose cookies are used on our website are based outside the UK, including in the United States. Where information is shared with them, the safeguards described in Section 9 (International transfers) apply.
Skintique Limited · Privacy Policy v2.0 · March 2026