Privacy Policy
Effective date: 01 January 2025
OnlySkincare.com (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and protect the personal information you provide to us through our website globally, with particular reference to visitors and customers in the United Kingdom (UK) and elsewhere. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
OnlySkincare.com is an online retailer of skincare products.
We are the data controller in respect of the personal data described here. If you have any questions about this policy or how we process your data, you can contact us at:
Email: admin@onlyskincare.com
Postal address: 7935 Airport Pulling Road Suite 4-260. NAPLES, FL 34109 USA
2. What Personal Data We Collect
We collect personal data in order to provide our products and services. This may include:
-
Identity Data: name, title, date of birth (if provided)
-
Contact Data: email address, telephone number, billing & delivery address
-
Account Data: username, password (securely stored)
-
Transaction Data: purchase details, payment information (processed by our payment provider)
-
Technical Data: IP address, device/browser type, operating system, pages visited and interaction data
-
Marketing & Communications Data: preferences and consent where you opt in to marketing messages
We may also automatically collect cookies and tracking data as described in our Cookie Policy.
3. How We Collect Your Personal Data
You provide most of the personal data directly when you:
-
place an order
-
create an account
-
sign up to our marketing communications
-
interact with customer support
We also collect data automatically through your use of our website and services via cookies and similar technologies. Please see our Cookie Policy for more details.
4. Legal Bases for Processing Your Personal Data
Under UK GDPR, we rely on the following lawful bases when processing personal data:
-
Contract performance: to fulfil your order and provide products and support
-
Legal obligations: to comply with tax, accounting, or other legal duties
-
Legitimate interests: to improve our services, prevent fraud, and ensure network security
-
Consent: where you have given consent, e.g. for marketing communications (you can withdraw consent at any time)
5. How We Use Your Personal Data
We use personal data for the following purposes:
-
to process and deliver your orders
-
to communicate with you about your orders, account, and service updates
-
to personalise and improve your experience on our site
-
to send marketing messages where you have consented (you can unsubscribe at any time)
-
to detect, prevent, and respond to fraud or other unlawful activity
-
to comply with legal and regulatory requirements
6. Sharing Your Data
We may share your personal data with:
-
Service providers and partners supporting our services (e.g., payment processors, delivery couriers, analytics providers)
-
Professional advisors (e.g., legal or accounting providers)
-
Law enforcement or regulators if required by law
-
Third parties only with your consent or as disclosed at the time of collection
We do not sell or trade your personal information for marketing purposes.
7. International Transfers
Your personal data may be transferred to countries outside the UK or European Economic Area (EEA), e.g., to our service providers. In such cases we ensure appropriate safeguards are in place in accordance with UK GDPR.
8. Data Retention
We retain your personal data only for as long as necessary to:
-
fulfil the purposes outlined in this policy
-
comply with legal, tax, and accounting requirements
-
resolve disputes and enforce our agreements
Retention periods vary depending on the type of data and legal requirements.
9. Data Sharing – SMS Consent
We respect your privacy and are committed to protecting your personal information in connection with SMS communications.
We do not share, sell, rent, or transfer SMS opt-in data or consent status with any third parties for marketing purposes. Your mobile number and SMS consent information are used solely for providing the SMS services you have explicitly requested, such as transactional or promotional text messages from OnlySkincare.com.
Consent for SMS messaging is collected separately, explicitly, and voluntarily, in accordance with applicable data protection and electronic communications laws. Your SMS opt-in status will not be disclosed, reused, or processed for any purpose other than delivering the requested SMS services, except where disclosure is required to:
-
enable the technical delivery of SMS messages via our authorised service providers, or
-
comply with applicable legal or regulatory obligations
At no time is your SMS consent information used unlawfully or shared beyond what is necessary to fulfil the requested service.
You may withdraw your SMS consent at any time by following the unsubscribe instructions included in our messages or by contacting us directly.
10. Your Rights
Under UK GDPR, you have certain rights, including the right to:
-
access the personal data we hold about you
-
request correction of inaccurate data
-
request erasure in certain circumstances
-
object to or restrict processing
-
withdraw consent where processing is based on consent
-
request portability of your data
-
lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been violated
To exercise these rights, contact us using the contact details above.