PRIVACY POLICY

Privacy Policy

1. Privacy Statement
2. Data Protection Regulations
3. What information do We collect from you?
4. Cookies
5. How do We use the information?
6. How do We handle your information?
7. To whom may We disclose your information?
8. How can I control use of my information?
9. Changes to Privacy Statement
10. Your right to complain

Skinstation Limited (“We”, “Us”, “Our”) Privacy Statement.

This is Our Privacy Statement which details how We use your personal data (“Personal Data”) when you use our Website www.skinstation.co.uk. We take Our data protection responsibilities seriously.

---

1 Privacy Statement

1.1 This Website is owned by Skinstation Limited (“SSL”) a company registered in Guernsey at Albert House, South Esplanade, St. Peter Port, Guernsey GY1 1AJ with company number 70194. SSL’s registration reference with the Office of the Data Protection Commissioner in Guernsey is DPA7275.

1.2 The Data Protection (Bailiwick of Guernsey) Law 2017 and the European General Data Protection Regulation (the “Regulations”) set out Our responsibilities. We have to protect your data.

1.3 This Privacy Statement sets out the way we will obtain and hold your Personal Data. This is known as “Processing”. When read together with Our Terms and Conditions of Use and Cookie Policy, this Privacy Statement covers our relationship with you in relation to this Website. By continuing to browse and use this Website, you agree to this Privacy Statement. If you disagree with any part of this Privacy Statement, please do not use Our Website.

1.4 Any questions, comments and requests you may have regarding this Privacy Statement are welcomed and should be addressed to: Data Protection Officer, Skinstation Limited, Albert House, South Esplanade, Guernsey, GY1 1AJ. Telephone 0333 150 1122

---

2 Data Protection Regulations

2.1 For the purposes of this Privacy Statement:

We determine the purposes for which and the manner in which your personal data is, or is to be processed, and we are known as the data controller (“Data Controller”); and (b) in submitting your data and information to us to collect, handle and process, you will be the individual who is the subject of the data (the “Data Subject”); and(c) in processing your data and information, any other parties contracted to process data by the Data Controller will be known as (“Data Processors”).

---

3 What information do We collect from you?

3.1 We may collect and process the following data and information that you give us if you fill in the Account Registration Form, place an order for Goods, or if you submit content on Our Website or otherwise by corresponding with us by phone email or otherwise: (a) name and date of birth; (b) contact information including address, email address, phone number; (c) information necessary for the purposes of submitting an order for prescription products application; (d) prescribed medication and directions for use.

3.2 We understand that the data collected at 3.1(c) and 3.1(d) is Sensitive Personal Data.

3.3 We will collect and process the following data automatically from your visit to Our Website: (a) technical information, including the internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;

(b) information about your visit, including the full uniform resource locator (URL), clickstream to, through and from Our Website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call Our customer service number and any other anonymised data or metrics that identify user behaviour and the habits of web visitors.

---

4 Cookies

4.1 By visiting this website, you consent to its use of cookies to distinguish you from other users. Our website uses cookies to keep track of items you put into your shopping cart, including when you have abandoned your checkout. This information is used to determine when to send cart reminder messages via SMS. The use of cookies in no way gives Us access to your computer or any Personal Data, other than the data and information you choose to share with Us.

4.2 You may choose to accept or decline cookies by modifying your own browser’s settings.

4.3 Further information of the cookies We use and how they work is available in Our Cookie Policy.

---

5 How do We use the information?

5.1 We shall use the data and information you give to Us: (a) to allow you to create an account and on the Website; (b) to process and analyse your order(s) including dispensing and dispatching the products; (c) to keep and maintain Our internal business records; (d) for our internal training purposes; (e) if you give us express consent, to provide you with Our own tailored marketing information that We think may suit your interests and needs; (f) to send you SMS notifications related to your order, including abandoned checkout reminders, as well as text marketing offers and transactional texts, such as requests for reviews, upon your consent.

5.2 Opt-in data and consent for our SMS marketing will not be shared with any third parties, except for our messaging partners necessary for operating our text messaging program.

5.3 We reserve the right to add to the list of uses in clause 5.1. We shall not use pre-collected data and information for any new uses of your data without consulting you and obtaining your express consent if we are required to do so under the Regulations.

5.4 Where you provide us with information for the purposes of account registration and orders described above, We may use such information provided in order to verify the information provided, process your application and order. We may also transfer the data to our Data Processors in order to fulfil or analyse your order.

5.5 We reserve the right to anonymise your data to obtain analysis while retaining your privacy.

---

6 How do We handle your information?

6.1 The data and information We collect from you will be transferred to and securely stored by our hosting third party: iomart Hosting Limited, 3rd Floor, 6 Archway, Manchester, M15 5RN.

6.2 We are committed to ensuring that your data and information is secure. In order to prevent unauthorised access or disclosure, We have put in place suitable physical, electronic and Official procedures to safeguard and secure the information We collect online, including: (a) all data and information you provide to us is stored on secure servers; (b) any payment transactions will be encrypted Using SSL technology; (c) where We have given you (or where you have chosen) a password which enables you to access certain parts of Our Website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone;(d) erasing of information, and destruction of any copies kept; (e) regularly updating our review procedure.

6.3 Any Sensitive Personal Data that we collect as described at clause 3.1(c) and 3.1(d) shall be processed in accordance with the Regulations, and only to permit Us to process your request or enquiry. Your Sensitive Personal Data will be stored securely and will not be passed on to third parties.

---

7 To whom may We disclose your information?

[Sections 7.1 to 7.5 continue as in your original document]

---

8 How can I control use of my information?

[Sections 8.1 to 8.3 continue as in your original document]

---

9 Changes to Privacy Statement

9.1 We reserve the right to make changes to this policy without notice from time to time by updating this page. Every time you wish to use Our Website, please check the statement to ensure you understand the terms that apply at that time.

9.2 The current statement was made effective as of August 2023 and incorporates the requirements of the GDPR which came into effect on 25th May 2018.

---

10 Your right to complain

10.1 If you believe that your information held by us is not being handled properly, you have the right to complain to the Data Commissioner.