Our Privacy Policy
Last Updated: September 2020
The protection and security of your personal data are important to Cosmetic Culture. This Privacy Statement tells you how we collect, use, share, and protect your personal data, and together with the website Terms and Conditions, applies to your use of www.cosmetic-culture.co.uk, www.gerardshop.co.uk and www.moodmask.co.uk (Website).
Our Website is operated by Cosmetic Culture Limited, Lowton Business Park, Lowton St Mary’s, Warrington WA32 2AP, UK, who is the controller of your personal data processed via this Website.
We are committed to safeguarding your privacy rights and ensuring that your personal data is protected.
This Privacy Policy explains the types of personal data we collect and how we process and protect that data in connection with the services we offer.
This Privacy Policy also applies to our targeted content, including online offers and advertisements for products and services, which you may see on third party websites, platforms and applications (“Third Party Sites”) based on your online activity. These Third Party Sites may have their own privacy policies and terms and conditions. We encourage you to read them before using those Third Party Sites.
- Who is responsible for what happens with your data?
Cosmetic Culture Limited (“Cosmetic Culture ” or “we”) are responsible for processing your personal data on our Sites.
- How do I contact the Data Protection Officer?
If you have a question in relation to how we process your personal data you can contact our Data Protection Officer via email at [email protected] or via post at Cosmetic Culture Limited, Lowton Business Park, Lowton St Mary’s, Warrington WA32 2AP
- What is Personal Data?
Personal Data means information that can directly or indirectly identify you (“Personal Data”). This typically includes information such as your Name, title, postal address, email address, telephone number, payment information, but can also include other information such as IP address, shopping habits.
- What happens when you provide us with your Personal Data?
We collect your Personal Data when you provide us with your information to register as a customer for our sites, subscribe to our newsletter, receive information or mailings, buy a product or from us, make a comment or enquiry or contact our Customer Team.
When you provide us with your Personal Data, we will process it in accordance with this Privacy Policy. If you do not wish us to process your Personal Data in this way, please do not provide us with your personal information.
We process your Personal Data to provide you with our services as further explained below. In certain instances, we only process your Personal Data if you have given us permission to do so, for example in most cases where we process your Personal Data for marketing purposes, use cookies or location data. In other instances we may rely on other legal grounds for processing your personal data, such as performance of the contract with you or legitimate interests, like fraud prevention.
- What happens if our customer is a child?
Our Sites are intended for adults, but there could be instances where some customers under the age of 16 view or purchase products on our Sites.
We will not collect or use via our Website any personal data of anyone we know to be under 16 years old without the prior affirmative, verifiable consent of his or her parent/guardian. A parent/guardian has the right, upon request, to view the information provided by their child and/or to require that it be deleted. If we discover that a child has provided us with personal data online through our Website, we will take reasonable steps to delete this data. If you are a parent/guardian with any concerns regarding your child’s personal data in connection with our Website, please contact Cosmetic Culture via email at [email protected] or via post at Cosmetic Culture Limited, Lowton Business Park, Lowton St Mary’s, Warrington WA32 2AP
- For which purposes do we process your Personal Data?
To process your online purchase and deliver the product to you as ordered. Your payment related Personal Data may be transferred to payment providers to process your payments.
What Personal Data may we collect?
Name, title, postal address, email address, home telephone or mobile number, information about products you order, order history, details about your purchase, payment information, payment history, age.
What is our legal basis for the processing?
We need this information to provide you with your online order (performance of a contract), and other administrative services, such as registration, as well as fraud prevention.
When you visit our Sites you may access services which are provided on third party websites. In this instance these third parties will be responsible for your Personal Data and will act as Data Controller in respect of your Personal Data.
Cookies and Similar Technologies
We use cookies and similar technologies (“Cookies”) to improve our products and your experience on our Sites by collecting information on how you use our Sites. Some of the Cookies we use are required to enable core site functionality, for example to provide secure log-in or to remember how far you are through an order, but we also use Cookies that allow us to analyse site usage (so we can measure and improve performance).
Our website uses Google Analytics. This is a web analytics service provided by Google Inc. Google Analytics sets a cookie in order to evaluate use of those services and compile a report for us.To opt out of being tracked by Google Analytics across all websites please visit http://tools.google.com/dlpage/gaoptout.
You can view more information on the Cookies we use and adjust your preferences via the Cookie Consent Tool on our Sites. Please note, however, that without cookies you may not be able to use all of the features of our Sites or online services.
- Who do we share your Personal Data with?
If you order a product from us e share your Personal Data with trusted third parties to allow payment and delivery of the products you have ordered. Unless you provided consent, any such trusted third parties are not authorised by us to use your Personal Data in any other way and will be required implement adequate technical and organisational measures to protect your Personal Data.
We may share your personal data if required by law enforcement or other agencies if we are required to do so by law, or by a warrant, subpoena or court order to disclose your Personal Data.
- What are your rights?
If certain requirements are fulfilled, you have the right to:
- Obtain from us confirmation as to whether or not we process Personal Data from you and, where that is the case, access to your Personal Data;
- Rectification of inaccurate Personal Data;
- Erasure of Personal Data;
- Objection to the processing of Personal Data;
- Restriction of processing of Personal Data; and
- Portability of Personal Data – receive the Personal Data you have provided to us in a structured, commonly used and machine-readable form and transmit it to another data controller.
You can learn more about these rights here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/. To exercise your rights, please contact the Data Protection Officer at [email protected]
- Can you withdraw your consent to the processing of personal data?
Where your consent is the legal basis for the processing of your Personal Data, you can withdraw your consent for by sending us an email to [email protected] or by contacting our Customer Team as detailed in Section 10.
Please note that withdrawing your consent will not affect the lawfulness of the processing before the withdrawal.
10 Can you complain with the data protection authorities?
If you think that the processing of Personal Data by us violates data protection laws, you can lodge a complaint with the Information Commissioner in the UK (www.ico.org.uk) or the Data Protection Commissioner in the Republic of Ireland (www.dataprotection.ie).
11 How do we protect your Personal Data?
We maintain appropriate technical and organisational measures to protect the Personal Data you provide to us against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your Personal Data.
12 Can we change our Privacy Policy?
We may change this Privacy Policy from time to time by posting the updated version of the Privacy Policy here. We encourage you to visit this area frequently to stay informed.