Privacy Policy
PRIVACY POLICY
Last updated: September 27, 2026
This Privacy Policy describes how Skin Expert Boutique collects, uses, stores and shares your personal information when you visit our website, make a purchase, use our services or otherwise communicate with us.
Skin Expert Boutique is operated by:
START TO CART LTD
71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
Company Number: 17481826
Email: info@skinexpert.boutique
For the purposes of applicable data protection laws, START TO CART LTD is the controller of your personal information unless otherwise stated.
Nothing in this Privacy Policy limits any rights available to you under applicable privacy and data protection laws.
1. Personal Information We Collect
Depending on how you interact with our website and services, we may collect:
- your name;
- billing and shipping addresses;
- email address;
- telephone number;
- order and transaction information;
- payment-related information;
- account information, where applicable;
- customer service communications;
- returns and refund information;
- IP address;
- browser, device and operating system information;
- website activity and interactions;
- cookie and similar technology data;
- marketing preferences.
Payment information may be processed directly by our payment service providers. We do not necessarily receive or store your complete payment card details.
2. How We Use Your Personal Information
We may use your personal information to:
- process and fulfil orders;
- process payments;
- arrange shipping and delivery;
- provide order confirmations and tracking information;
- process returns and refunds;
- provide customer support;
- communicate with you regarding your purchases;
- operate and improve our website and services;
- prevent and investigate fraud or unauthorized transactions;
- protect the security of our website and business;
- maintain accounting and transaction records;
- comply with legal, tax and regulatory obligations;
- analyse website performance;
- personalize your shopping experience;
- provide marketing communications where permitted by law;
- establish, exercise or defend legal claims.
3. Legal Bases for Processing
Where the UK GDPR or EU GDPR applies, we process personal information on one or more of the following legal bases:
Performance of a contract — where processing is necessary to process your order, receive payment, arrange delivery, provide customer service or handle a return or refund.
Legal obligation — where processing is necessary to comply with applicable legal, tax, accounting, regulatory or consumer-protection requirements.
Legitimate interests — where processing is necessary for legitimate business purposes such as operating and improving our services, preventing fraud, protecting our systems and providing customer support, provided those interests are not overridden by your rights.
Consent — where your consent is required, including for certain marketing activities and non-essential cookies. You may withdraw your consent at any time.
4. Service Providers
We use third-party service providers to operate our online store and provide our services.
We may share personal information where reasonably necessary with:
- ecommerce and website technology providers;
- payment processors and financial institutions;
- suppliers and fulfilment providers;
- warehouses;
- postal and courier services;
- shipping and logistics providers;
- hosting and IT providers;
- analytics providers;
- advertising and marketing providers;
- fraud-prevention and security providers;
- accountants, lawyers and other professional advisers;
- government authorities, regulators or law-enforcement authorities where required by law.
These providers may process information on our behalf or, depending on the service provided, as independent controllers.
5. Payment Processing
Payments are processed through third-party payment providers.
When you make a purchase, information necessary to process the transaction may be transmitted directly to the relevant payment provider or financial institution.
We do not necessarily receive or store your complete payment card information.
6. Order Fulfilment and Delivery
To process and deliver your order, we may provide necessary personal information to suppliers, warehouses, fulfilment partners, postal operators, couriers and other logistics providers.
This information may include your:
- name;
- delivery address;
- telephone number;
- email address;
- order details.
We only provide information reasonably necessary to fulfil and deliver your order.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies to operate the website, maintain shopping-cart functionality, remember preferences, understand website usage, improve our services, prevent fraud and, where permitted, measure advertising and marketing performance.
Some cookies are necessary for the website to function.
Where required by applicable law, non-essential analytics, advertising or marketing cookies will only be used after obtaining the appropriate consent.
You may manage your cookie preferences through the cookie controls available on our website and through your browser settings.
8. Marketing Communications
Where permitted by law, we may send you information about products, promotions, offers and other marketing communications.
Where consent is required, we will obtain your consent before sending such communications.
You may unsubscribe from marketing emails at any time using the unsubscribe option included in the email or by contacting:
Unsubscribing from marketing does not prevent us from sending communications necessary to process your orders or provide customer service.
9. International Transfers
We operate internationally and may use suppliers, fulfilment providers, technology providers and other service providers located in different countries.
Your personal information may therefore be transferred to, stored or processed in countries outside your country of residence, including outside the United Kingdom or European Economic Area.
Where applicable data protection law requires safeguards for international transfers, we will use an appropriate lawful transfer mechanism.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
This may include retaining information to:
- fulfil orders;
- provide customer service;
- maintain transaction and accounting records;
- comply with tax and legal obligations;
- resolve disputes;
- prevent fraud;
- establish or defend legal claims.
Different categories of information may be retained for different periods.
When personal information is no longer reasonably required, it will be deleted, anonymized or otherwise securely disposed of, subject to applicable legal requirements.
11. Data Security
We use reasonable technical, administrative and organizational measures designed to protect personal information against unauthorized access, disclosure, loss, misuse or alteration.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
12. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- request access to personal information we hold about you;
- request correction of inaccurate information;
- request deletion of your personal information;
- request restriction of processing;
- object to certain processing;
- request data portability;
- withdraw consent where processing is based on consent;
- object to certain direct marketing;
- lodge a complaint with an applicable data protection authority.
These rights may be subject to legal conditions and exceptions.
To exercise an applicable privacy right, contact:
We may request information necessary to verify your identity before processing certain requests.
13. United Kingdom Residents
If you are located in the United Kingdom, you may have rights under applicable UK data protection law.
You may also have the right to lodge a complaint with the UK Information Commissioner's Office.
We encourage you to contact us first at info@skinexpert.boutique so that we can address your concern.
14. European Economic Area Residents
If you are located in the European Economic Area, you may have rights under applicable EU and national data protection laws.
You may exercise your applicable rights by contacting:
You may also have the right to lodge a complaint with the competent data protection supervisory authority in your country.
15. United States Residents
Depending on your state of residence and whether applicable legal requirements and thresholds are met, you may have additional privacy rights.
These may include rights to request access to, correction of or deletion of certain personal information and information regarding certain uses or disclosures of personal information.
Where applicable law provides such rights, we will process eligible requests in accordance with that law.
We will not unlawfully discriminate against you for exercising applicable privacy rights.
16. Children
Our website and services are not intended for children, and we do not knowingly collect personal information from children in violation of applicable law.
If you believe that a child has improperly provided personal information to us, please contact:
17. Fraud Prevention and Security
We may process information to identify, investigate and prevent fraudulent transactions, unauthorized account activity, abuse of our services and other security threats.
This may include the use of automated systems provided by payment, ecommerce, fraud-prevention or security service providers.
18. Business and Legal Disclosures
We may disclose personal information where reasonably necessary in connection with a merger, acquisition, restructuring, financing, sale of assets or similar business transaction, subject to applicable law.
We may also disclose personal information where required by law, court order or lawful governmental request, or where reasonably necessary to protect our legal rights, customers, business or services.
19. Third-Party Websites
Our website may contain links to websites or services operated independently by third parties.
We are not responsible for the privacy practices, security or content of independent third-party websites.
We recommend reviewing the privacy policy of any third-party service you choose to use.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices or applicable legal requirements.
When this Policy is updated, the “Last updated” date at the top of this page will be revised.
Where required by law, we will provide additional notice of material changes.
21. Contact Us
For questions about this Privacy Policy, the processing of your personal information or your privacy rights, please contact:
Skin Expert Boutique
Operated by START TO CART LTD
Email: info@skinexpert.boutique
Registered Office:
71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
Company Number: 17481826