Privacy policy
Last updated: September 2026
This Privacy Policy explains how S M Farr and M L Hubbard, trading as skincareBOOtique (“we”, “us” and “our”), collect, use and protect your personal information when you visit our website, place an order, create an account, contact us or otherwise interact with our business.
For the purposes of UK data protection law, S M Farr and M L Hubbard, trading as skincareBOOtique, are the data controllers responsible for your personal information.
Information We Collect
Depending on how you interact with us, we may collect:
• Your name, billing address, delivery address, email address and telephone number.
• Information about your orders, payments, refunds and previous transactions.
• Customer account information and preferences.
• Information you provide when contacting us or submitting an enquiry.
• Reviews and other content you choose to submit.
• Technical information, including your IP address, device, browser and how you use our website.
• Your marketing and cookie preferences.
Payments are processed securely by Shopify and the relevant payment provider. We do not receive or store your complete payment-card details.
How We Collect Information
We may collect personal information:
• Directly from you when you place an order, create an account, contact us, subscribe to emails or submit a review.
• Automatically when you use our website, including through cookies and similar technologies.
• From Shopify and other service providers that help us operate our website and fulfil orders.
How We Use Your Information
We may use your personal information to:
• Process payments and fulfil, deliver and manage orders.
• Create and manage customer accounts.
• Provide customer service and respond to enquiries.
• Process refunds, replacements and complaints.
• Collect and display customer reviews.
• Prevent fraud and keep our website secure.
• Understand how visitors use our website and improve its performance.
• Measure advertising and show relevant advertisements where permitted.
• Send marketing emails where you have consented or where another lawful basis allows us to do so.
• Meet our legal, tax and accounting obligations.
Our Lawful Bases
Under UK data protection law, we must have a lawful reason for using your information. We generally rely on:
• Contract, when information is needed to process and fulfil your order or provide a service you have requested.
• Consent, for marketing emails and non-essential cookies or tracking where consent is required.
• Legitimate interests, to operate, protect and improve our website and business, provided these interests do not override your rights.
• Legal obligation, where we must retain or disclose information to comply with the law.
You may withdraw your consent at any time. This will not affect processing that took place before consent was withdrawn.
Marketing
If you subscribe to our emails, we may use Shopify Email to send you news, product information and offers.
You can unsubscribe at any time by selecting the unsubscribe link in an email or contacting us. You may still receive essential messages relating to orders, customer accounts or customer service.
Cookies and Tracking
Our website uses cookies and similar technologies to operate the store, remember preferences, understand website usage and support advertising.
This may include technologies provided by Shopify, Google and Meta. Non-essential analytics and advertising technologies will only be used where permitted and in accordance with your cookie choices.
You can review or change your choices using the “Cookie preferences” link on our website.
Sharing Your Information
We only share personal information where necessary. Recipients may include:
• Shopify, which hosts and operates our online store.
• Payment-processing providers.
• Delivery providers, including Royal Mail, Evri and Yodel.
• Judge.me, which provides customer-review functionality.
• Shopify Email and other communication providers.
• Analytics and advertising providers, including Google and Meta where their services are enabled.
• Technology, website-support and professional-service providers.
• Regulators, law-enforcement bodies or other parties where disclosure is legally required.
These organisations may process information on our behalf or under their own privacy policies.
Relationship With Shopify
Our online store is hosted by Shopify. Information submitted through the store is processed by Shopify to operate the website, process transactions and provide related ecommerce services.
Shopify and its service providers may process personal information in countries outside the UK. Further information is available in Shopify’s Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
International Transfers
Some of our service providers may process personal information outside the UK.
Where information is transferred internationally, appropriate safeguards will be used as required by UK data protection law.
How Long We Keep Information
We keep personal information only for as long as reasonably required for the purpose for which it was collected.
Order and transaction records will normally be retained for up to six years where needed for tax, accounting, contractual or legal purposes. Other information may be removed sooner when it is no longer required.
Marketing information is retained until you unsubscribe or withdraw your consent. We may retain limited information to ensure we respect your preference not to receive further marketing.
Your Rights
Depending on the circumstances, you may have the right to:
• Request a copy of the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your information.
• Ask us to restrict how your information is used.
• Object to certain uses of your information.
• Request the transfer of information you provided to us.
• Withdraw your consent.
These rights are not absolute and may be subject to legal exceptions. We may need to confirm your identity before dealing with a request.
Children’s Information
Our website is not intended specifically for children, and we do not knowingly collect personal information from children without appropriate permission.
Security
We take reasonable steps to protect personal information against loss, misuse and unauthorised access. However, no online system or method of communication can be guaranteed to be completely secure.
Third-Party Links
Our website may contain links to websites operated by other organisations. We are not responsible for the privacy, security or content of third-party websites. Please review their privacy information before providing personal details.
Complaints
Please contact us first if you have concerns about how we use your personal information.
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/
Changes to This Policy
We may update this policy to reflect changes to our website, services, business practices or legal obligations.
The latest version will be published on this page with its revised date.
Contact Us
For questions about this policy or to exercise your data protection rights, contact:
S M Farr and M L Hubbard
Trading as skincareBOOtique
Lower Varchoel Farm
Guilsfield
Welshpool
Powys
SY21 9LP
United Kingdom
Email: skincarebootique@gmail.com
Telephone: 01938 590926 or 07495 463990