Privacy policy

PRIVACY POLICY

Last updated: 7 April 2026

Curve Skin Studio Ltd ("we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use, and protect your information when you visit our website or make a purchase.

1. Who We Are

Data Controller: Curve Skin Studio Ltd Address: 25 Kenworthy Avenue, Ashton-under-Lyne, OL6 9HA Email: curveskinstudioltd@gmail.com

2. What Data We Collect

We may collect the following personal data:

  • Name, email address, phone number, and delivery/billing address
  • Payment information (processed securely — we do not store card details)
  • Order history and purchase behaviour
  • Device and browsing data (via cookies and analytics tools)
  • Communications you send us

3. How We Use Your Data

We use your data to:

  • Process and fulfil your orders
  • Send order confirmations and shipping updates
  • Respond to your enquiries
  • Improve our website and customer experience
  • Send marketing communications (only with your consent)
  • Comply with our legal obligations

4. Legal Basis for Processing (UK GDPR)

We process your data on the following legal bases:

  • Contract: to fulfil your order
  • Legal obligation: to comply with applicable laws
  • Legitimate interests: to improve our services and prevent fraud
  • Consent: for marketing emails and non-essential cookies

5. Cookies

We use cookies to improve your browsing experience and analyse site traffic. These include essential cookies (required for the site to function) and optional analytics/marketing cookies. You can manage your cookie preferences via our cookie banner. For more detail, please see our Cookie Policy.

6. Sharing Your Data

We do not sell your personal data. We may share it with trusted third parties who help us operate our business, including:

  • Shopify (our e-commerce platform)
  • Royal Mail (order fulfilment and delivery)
  • Payment processors (e.g. Stripe, PayPal)
  • Email marketing platforms (e.g. Klaviyo)
  • Analytics providers (e.g. Google Analytics)

All third parties are required to handle your data securely and in accordance with UK GDPR.

7. International Transfers

Some of our third-party providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order data is typically retained for 7 years for tax and accounting purposes.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability — receive your data in a portable format
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at curveskinstudioltd@gmail.com. We will respond within 30 days.

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.