The small print
Privacy
What we collect when you shop with us, why, who else sees it, and what you can ask us to do with it.
Contents
01Updated 1 September 2026
Who we are
In shortWe're OLIVESKIN Ltd, in London. Questions about your data go to privacy@oliveskin.co.uk.
OLIVESKIN Ltd is the controller of the personal data described here. We're a company registered in England and Wales, number 11823406, at 11 Linen Yard, London EC2A 3AY.
For anything about your data, write to privacy@oliveskin.co.uk or to that address, marked for the attention of our data protection lead.
02Updated 1 September 2026
What we collect
Only what we need to run the shop and look after you:
- When you order: your name, delivery and billing addresses, email, phone number, and what you bought and when. Card details go straight to our payment provider; we never see or keep your full card number.
- When you write, call or chat: what you tell us, and our notes so the next person can pick it up.
- When you take Find your shelf: your answers, kept in your browser unless you ask us to email your routine.
- When you browse: the pages you visit and the device you use, through the cookies in our cookie policy, and only with your consent where the law asks for it.
03Updated 1 September 2026
Why we use it
In shortTo send your order and answer you. Letters and analytics only if you say yes.
The law asks us to name a lawful basis for each use. Here they are:
| What we use it for | Why we may |
|---|---|
| To take, send and return your order | To perform our contract with you |
| To answer your questions | Our legitimate interest in looking after customers |
| To send the Sunday letter and offers | Your consent, which you can withdraw in one click |
| To keep tax and accounting records | A legal obligation |
| To spot and stop fraud | Our legitimate interest, and yours |
| To count visits and improve the shop | Your consent, through the cookie settings |
05Updated 1 September 2026
Data kept outside the UK
Some of these providers keep data outside the UK. When they do, the transfer is covered by the UK's adequacy regulations, or by the International Data Transfer Agreement or Addendum, so your data keeps the same protection it has here.
06Updated 1 September 2026
How long we keep it
No longer than we need it:
- Orders and invoices: six years, because the tax rules ask us to.
- Your account: until you close it.
- Messages to us: two years after the last one.
- The Sunday letter: until you unsubscribe.
After that, it's deleted, or made anonymous so it can no longer be linked to you.
07Updated 1 September 2026
Your rights
In shortAsk to see it, fix it, delete it or take it elsewhere. Free, answered within a month.
You can ask us for a copy of the data we hold about you, to correct it, to delete it, to limit or object to how we use it, and to have it sent to you or someone else in a common format. Where we rely on your consent, you can withdraw it at any time.
Write to privacy@oliveskin.co.uk. It's free, and we'll answer within a month. We may ask you to confirm who you are first, so we only ever give your data to you.
08Updated 1 September 2026
If you're unhappy
Tell us first, and we'll do our best to put it right. You can also complain to the Information Commissioner's Office, the UK's regulator for data, at ico.org.uk or on 0303 123 1113.
09Updated 1 September 2026
Children
The shop is for adults. We don't knowingly collect data from children under 13, and if we learn we have, we delete it.
10Updated 20 October 2026
Changes to this policy
When we change this policy, we date the change here. If it changes how we use data you've already given us, we'll email you first.