Legal
Privacy Policy
Last updated · 27 July 2026
This policy explains how Beauty 2.0™ Ltd ("we", "us") collects, uses and protects your personal data when you shop with us or interact with our Site. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
Placeholder — please have this reviewed by your DPO or legal counsel and replace bracketed values with your registered ICO details before launch.
01Who we are
Beauty 2.0™ Ltd, [registered address], United Kingdom. ICO registration: [placeholder]. Data protection contact: privacy@beauty2.co.
02What we collect
- Identity & contact data — name, email, delivery/billing address, phone.
- Order data — items purchased, size and colour, order value, order history.
- Payment data — handled directly by our payment provider; we receive a token, not your card details.
- Account data — password (hashed), preferred emotional state, wishlist, quiz results.
- Technical data — IP address, device, browser, pages viewed (via cookies and analytics).
- Marketing preferences — whether you have opted in to newsletters and campaigns.
03How we use it & lawful basis
- To take and fulfil your orders — performance of a contract.
- To provide customer service and handle returns — performance of a contract.
- To protect the Site and prevent fraud — legitimate interests.
- To improve the Site and product range — legitimate interests.
- To send marketing where you have opted in — consent, withdrawable at any time.
- To meet accounting and tax obligations — legal obligation.
04Who we share it with
We share limited personal data with trusted processors who act on our instructions: our hosting and backend platform (Lovable Cloud), payment provider (Stripe), delivery carriers, email service provider, and analytics providers. Each processor is bound by a data processing agreement. We do not sell your personal data.
05International transfers
Some processors are located outside the UK. Where that happens, transfers are protected by adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
06How long we keep it
We retain order records for 6 years to meet HMRC requirements, account data until you close your account, and marketing data until you unsubscribe. Longer periods only apply where the law requires it.
07Your rights
Under UK GDPR you can request access, correction, deletion, restriction, portability, and object to processing. Email privacy@beauty2.co to make a request. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
08Cookies
We use essential cookies to run the Site and optional cookies for analytics and marketing. See our Cookie Policy and manage your preferences through the cookie banner.
09Changes
We will post any updates to this policy on this page and, where changes are material, notify you by email.