Privacy policy
Last updated: [DATE]
This policy explains how [COMPANY NAME], trading as NU Cosmetics (“NU”, “we”, “us”), uses your personal data. We are the data controller. Company number [COMPANY NUMBER], registered address [BUSINESS ADDRESS]. Contact: [CONTACT EMAIL].
What we collect
- Orders: your name, delivery and billing address, email, phone number and order history. Payments are processed by Shopify and its payment partners; we never see your full card details.
- Newsletter: your email address, if you sign up.
- Messages: anything you send us through the contact form or by email.
- Your device: basic technical data such as browser type, and what's in your bag (stored on your own device).
Why we use it, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Processing and delivering your order, handling returns | Contract |
| Keeping order and tax records | Legal obligation |
| Sending the newsletter (new drops and offers) | Consent. You can unsubscribe at any time using the link in every email. |
| Answering your messages | Legitimate interests |
| Preventing fraud and keeping the site secure | Legitimate interests |
Who we share it with
We only share your data with companies that help us run the shop, under contracts that protect it:
- Shopify (our online shop and checkout) and its payment providers;
- Netlify (website hosting and form submissions);
- [EMAIL PROVIDER, e.g. Shopify Email or Klaviyo] (newsletter);
- Royal Mail (delivery).
Some of these providers store data outside the UK. Where they do, they use approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations. We never sell your data.
How long we keep it
Order records: 6 years (for tax). Newsletter: until you unsubscribe. Messages: up to 2 years. Then we delete it.
Your rights
You can ask to see, correct, delete or move your data, object to how we use it, or withdraw consent at any time. Email [CONTACT EMAIL]. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See our cookie policy.