Privacy Policy

Effective Date: 01/06/2025

Our website address is: https://beautyboostlab.com.

Beauty Boost Lab (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website [www.beautyboostlab.com], make a purchase, or otherwise interact with us.

1. Who We Are

Beauty Boost Lab
89A Gloucester Road CR0 2DN
📧 Email: thebeautyboostlabgmail.com

We are the data controller for the purposes of the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR).

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data – Full name, title
  • Contact Data – Email address, phone number, billing and delivery addresses
  • Financial Data – Payment card details (processed securely via third parties)
  • Transaction Data – Products purchased, order history
  • Technical Data – IP address, browser type and version, time zone setting, device type, and platform
  • Usage Data – How you interact with our website (via cookies or analytics)
  • Marketing Data – Preferences for receiving marketing from us

3. How We Collect Your Personal Data

We collect personal data through:

  • Direct interactions (e.g., placing an order, signing up to our newsletter, contacting us)
  • Automated technologies (e.g., cookies and tracking pixels)
  • Third-party analytics services (e.g., Google Analytics)

4. How We Use Your Personal Data

We use your data to:

  • Process and fulfill your orders
  • Provide customer support
  • Manage payments and prevent fraud
  • Send you order updates and relevant service emails
  • Send marketing communications (only with your consent)
  • Improve our website and services
  • Comply with legal obligations

5. Legal Basis for Processing Your Data

We rely on the following lawful bases under UK GDPR:

  • Contractual necessity – to fulfill your order or request
  • Legal obligation – for tax, accounting, and legal compliance
  • Consent – for marketing and cookie usage (where applicable)
  • Legitimate interest – to improve our services, prevent fraud, and maintain security

6. How We Share Your Data

We do not sell your personal data. We may share it with trusted third parties who help us operate our business:

  • Payment processors (e.g., Stripe, PayPal)
  • Delivery and fulfilment partners (e.g., Royal Mail, DPD)
  • Email and marketing platforms (e.g., Mailchimp, Klaviyo)
  • Analytics services (e.g., Google Analytics)
  • IT and web hosting providers

All third parties are required to protect your personal data and only process it in accordance with our instructions.

7. International Transfers

Some of our service providers may be based outside the UK. In such cases, we ensure your data is protected by using appropriate safeguards such as Standard Contractual Clauses (SCCs).

8. How We Protect Your Data

We implement suitable security measures, including:

  • SSL encryption
  • Firewalls and secure servers
  • Limited access to personal data by authorised personnel only

9. How Long We Keep Your Data

We only keep your personal data for as long as necessary for the purposes outlined in this policy, or to comply with legal obligations. Typically, transaction data is kept for 6 years for tax and accounting purposes.

10. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data (“right to be forgotten”)
  • Restrict or object to certain types of data processing
  • Withdraw consent (where we rely on it)
  • Request transfer of your data (data portability)

To exercise any of your rights, contact us at 📧 [Insert Contact Email].

11. Marketing Preferences

You may opt out of marketing communications at any time by:

  • Clicking the “unsubscribe” link in our emails
  • Contacting us directly

We never send marketing emails without your explicit consent.

12. Cookies

We use cookies and similar technologies to enhance your website experience and analyze traffic. For more details, please see our [Cookie Policy].

13. Changes to This Privacy Policy

We may update this policy occasionally to reflect changes in our practices or legal requirements. We will post the updated version with the “Effective Date” at the top of this page.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact:

Beauty Boost Lab
89A Gloucester Road CR0 2DN
📧 Email: [email protected]

If you are not satisfied with our response, you can lodge a complaint with the UK Information Commissioner’s Office (ICO): www.ico.org.uk.

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.