Privacy Policy

Privacy Notice

[Last updated: 15 March 2022]

1. We're the data controller in respect of your personal data.

1.1 Our full name: Santola Beauty LTD

1.2 Registered in England and Wales under company number 13384398.

1.3 The "Website" is the website at: santolabeauty.com

2. We collect the following information directly from you

2.1 Details of the transactions you carry out through the Website and of the fulfilment of your orders;

2.2 Details of purchases you make from any of our stores;

2.3 Photos which you submit for our Instagram, Facebook and #santolabeauty;

2.4 Information that you provide to us when you create an account with Santola Beauty (including your name and email address);

2.5 Information that you provide to us when you complete the order form to purchase a product from the Website (e.g. contact phone number, billing address and delivery address);

2.6 Information that you provide to us when you sign up to our mailing list;

2.7 Information that you provide to us if you email us about a question, complaint or to report a problem with the Website or an issue in store;

2.8 Your image when taking photographs/filming at in-store events. We display notices in our stores to inform you of this and how you can notify us if you do not wish to be photographed/filmed.

2.9 Your social media username/handle, if you interact with Santola Beauty on social media; and

2.10 If you contact us by email, we may keep a record of that correspondence.

3. We use your information for the following purposes

3.1 To process any orders which you place through the Website (including delivering to you any products which you've ordered through the Website and providing you with an order confirmation email and an order dispatch email);

3.2 To find out what you and other customers like;

3.3 To take payment and to provide you with any refunds;

3.4 To issue you with an e-receipt;

3.5 To provide you with any customer support and handle any cancellation or refund requests;

3.6 To upload your photos to the #Santolabeauty part of the Website and our social channels (e.g. our Instagram page);

3.7 To notify you about recommended products and our new products or offers (we'll only send you direct marketing by email if you've given us prior consent to receive it, or if we've collected your personal data during a sale or negotiations for sale of products). If you'd like to stop receiving these messages from us at any time, you can opt out by clicking the "unsubscribe" link in the email or emailing us at info@santolabeauty.com;

3.8 To ensure that content from the Website is presented in the most effective manner for you and for your computer; and

3.9 To meet any legal or regulatory obligations which we have, to enforce or apply the Website terms and conditions or this Privacy Policy or to protect our rights or the rights of any third party e.g. we may provide your personal information to law enforcement agencies for fraud prevention purposes or we may use your personal data to prevent you from making further orders, if we suspect that you're ordering more than £400 worth of Santola Beauty products in one order.

4. The legal basis for processing your personal data

4.1 We process your personal data either on the basis of your consent, where this has been given unambiguously, or on the basis that it is necessary for the performance of a contract between you and us (if you would like to purchase a product from the Website or in store), or on the basis that it is necessary for the purposes of the legitimate interests pursued by us in operating and making available the Website.

4.2 Your provision of personal data to us is not in general subject to a contractual or legal requirement, although it is subject to a contractual requirement in the event of a purchase of products from the Website or in store. In all other circumstances, if you choose not to supply your personal data to us, however, you may not be able to access certain areas of the Website, nor use certain services.

4.3 We may change this page from time to time, to reflect how we are processing your data. If we make significant changes, we will make that clear on the Website or by some other means of contact such as email, so that you are able to review the changes before you continue to use the Website.

4.4 We are committed to protecting the information we receive from you. We follow reasonable technical and management practices to help protect the confidentiality, security and integrity of data stored on our system. While no computer system is completely secure, we believe the measures we have implemented reduce the likelihood of security problems to a level appropriate to the type of data involved.

4.5. The Website may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

5. The recipients or categories of recipients of your personal data are:

5.1 Our third party suppliers who help us to fulfil any order that you place on the Website or any purchase you make in store e.g. our delivery company and third party payment processor;

5.2 Our third party suppliers who help us maintain the Website and run our business e.g. our hosting provider, Website developers, marketing agencies and our IT support team;

5.3 Any third party who has complained that you have posted something on the Website that is not yours or that you didn't have permission to post; and

5.4 Credit reference agencies, law enforcement and fraud prevention agencies, so we can help tackle fraud or investigate any breach of the Website terms and conditions and Privacy Policy.

5.5 We may also disclose your personal data to any prospective buyer of our business or assets.

6. Duration of the information stored

We will generally keep your information for up to six years after your order - for tax reasons and/or to help deal with any disputes. If you open an account but do not make an order, we will keep your information for up to two years. These timeframes may vary if we are legally required to keep information for a particular period. If you consent to us using your personal information for marketing, we will keep your contact details which we use for marketing until you tell us to stop sending you marketing messages. Reviews will remain on our site until you ask us to archive or delete them by email to info@santolabeauty.com.

7. Information stored within Europe

7.1 Your personal information which we collect is stored within the EU and is not transferred to any third countries except for the following:

7.2 Your personal information may be transferred to the US by the following companies certified under the EU-US Privacy Shield Framework, which provides certain safeguards for your personal information: Google (analytics/advertising). Facebook (analytics/advertising).

7.3 Your personal information may also be transferred to the US by the following, with whom we have entered into a contract which contains certain EU-adopted standard transfer clauses designed to provide adequate safeguards for your personal information: Olapic, Inc.

8. Your rights

8.1 If the legal requirements are met: To ask us for access to your personal information, to rectify it if there are mistakes, to delete or restrict or object to its use in certain circumstances or to “data portability” or to withdraw any consent you’ve given (e.g. marketing).

8.2 If you have a complaint about how we are dealing with your personal information, please contact us via the email address above. If you are not happy with our response or think we are not handling your personal information in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).

8.3 For more information about your rights, visit the ICO’s website: www.ico.org.uk.