Last Updated: September 2020
The protection and security of your personal data are important to Cosmetic Culture. This Privacy Statement tells you how we collect, use, share, and protect your personal data, and together with the website Terms and Conditions, applies to your use of www.cosmetic-culture.co.uk, www.gerardshop.co.uk and www.moodmask.co.uk (Website).
Our Website is operated by Cosmetic Culture Limited, Lowton Business Park, Lowton St Mary’s, Warrington WA32 2AP, UK, who is the controller of your personal data processed via this Website.
We are committed to safeguarding your privacy rights and ensuring that your personal data is protected.
- Who is responsible for what happens with your data?
Cosmetic Culture Limited (“Cosmetic Culture ” or “we”) are responsible for processing your personal data on our Sites.
- How do I contact the Data Protection Officer?
If you have a question in relation to how we process your personal data you can contact our Data Protection Officer via email at email@example.com or via post at Cosmetic Culture Limited, Lowton Business Park, Lowton St Mary’s, Warrington WA32 2AP
- What is Personal Data?
Personal Data means information that can directly or indirectly identify you (“Personal Data”). This typically includes information such as your Name, title, postal address, email address, telephone number, payment information, but can also include other information such as IP address, shopping habits.
- What happens when you provide us with your Personal Data?
We collect your Personal Data when you provide us with your information to register as a customer for our sites, subscribe to our newsletter, receive information or mailings, buy a product or from us, make a comment or enquiry or contact our Customer Team.
- What happens if our customer is a child?
Our Sites are intended for adults, but there could be instances where some customers under the age of 16 view or purchase products on our Sites.
We will not collect or use via our Website any personal data of anyone we know to be under 16 years old without the prior affirmative, verifiable consent of his or her parent/guardian. A parent/guardian has the right, upon request, to view the information provided by their child and/or to require that it be deleted. If we discover that a child has provided us with personal data online through our Website, we will take reasonable steps to delete this data. If you are a parent/guardian with any concerns regarding your child’s personal data in connection with our Website, please contact Cosmetic Culture via email at firstname.lastname@example.org or via post at Cosmetic Culture Limited, Lowton Business Park, Lowton St Mary’s, Warrington WA32 2AP
- For which purposes do we process your Personal Data?
To process your online purchase and deliver the product to you as ordered. Your payment related Personal Data may be transferred to payment providers to process your payments.
What Personal Data may we collect?
Name, title, postal address, email address, home telephone or mobile number, information about products you order, order history, details about your purchase, payment information, payment history, age.
What is our legal basis for the processing?
We need this information to provide you with your online order (performance of a contract), and other administrative services, such as registration, as well as fraud prevention.
When you visit our Sites you may access services which are provided on third party websites. In this instance these third parties will be responsible for your Personal Data and will act as Data Controller in respect of your Personal Data.
Cookies and Similar Technologies
Our website uses Google Analytics. This is a web analytics service provided by Google Inc. Google Analytics sets a cookie in order to evaluate use of those services and compile a report for us.To opt out of being tracked by Google Analytics across all websites please visit http://tools.google.com/dlpage/gaoptout.
You can view more information on the Cookies we use and adjust your preferences via the Cookie Consent Tool on our Sites. Please note, however, that without cookies you may not be able to use all of the features of our Sites or online services.
- Who do we share your Personal Data with?
If you order a product from us e share your Personal Data with trusted third parties to allow payment and delivery of the products you have ordered. Unless you provided consent, any such trusted third parties are not authorised by us to use your Personal Data in any other way and will be required implement adequate technical and organisational measures to protect your Personal Data.
We may share your personal data if required by law enforcement or other agencies if we are required to do so by law, or by a warrant, subpoena or court order to disclose your Personal Data.
- What are your rights?
If certain requirements are fulfilled, you have the right to:
- Obtain from us confirmation as to whether or not we process Personal Data from you and, where that is the case, access to your Personal Data;
- Rectification of inaccurate Personal Data;
- Erasure of Personal Data;
- Objection to the processing of Personal Data;
- Restriction of processing of Personal Data; and
- Portability of Personal Data – receive the Personal Data you have provided to us in a structured, commonly used and machine-readable form and transmit it to another data controller.
You can learn more about these rights here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/. To exercise your rights, please contact the Data Protection Officer at email@example.com
- Can you withdraw your consent to the processing of personal data?
Where your consent is the legal basis for the processing of your Personal Data, you can withdraw your consent for by sending us an email to firstname.lastname@example.org or by contacting our Customer Team as detailed in Section 10.
Please note that withdrawing your consent will not affect the lawfulness of the processing before the withdrawal.
10 Can you complain with the data protection authorities?
If you think that the processing of Personal Data by us violates data protection laws, you can lodge a complaint with the Information Commissioner in the UK (www.ico.org.uk) or the Data Protection Commissioner in the Republic of Ireland (www.dataprotection.ie).
11 How do we protect your Personal Data?
We maintain appropriate technical and organisational measures to protect the Personal Data you provide to us against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your Personal Data.