This Privacy Policy describes how Eclat Skin London® (“Eclat“, “we“, “us“, or “our“) collects, uses, and shares information about you when you visit our website at www.eclatskinlondon.co.uk (“Website”) or interact with us in other related ways ― including purchasing our skincare products, signing up for our email list, engaging with us on social media, or contacting our customer service team.
Please read this Privacy Policy carefully. By visiting and using our Website, you agree that your information will be handled as described in this Privacy Policy. Your use of our Website, and any dispute over privacy, is subject to this Privacy Policy and our Terms of Use.
What Information Do We Collect?
We collect information from you in various ways when you visit our Website, purchase our products, or interact with us.
Information You Provide Directly to Us
We collect information you provide directly to us, such as when you make a purchase, sign up for our email list, register for an account, participate in a contest or survey, contact customer support, or otherwise communicate with us. This information may include:
- Contact information – Such as your name, mailing address, email address, and phone number when you create an account, make a purchase, or contact us.
- Payment information – Such as your credit/debit card number, expiration date, CVV code, and billing address when you make a purchase. This is securely collected and processed by our third-party payment processor.
- Account information – Such as username, profile photo, saved shipping/billing addresses, order history, and other information you provide for your account.
- Communications – Information provided when you contact us by email, through social media, or participate in surveys, contests, promotions, or other activities we offer.
- Demographic data – Information such as your gender, age, country, and preferred language that help us understand our customers. Providing this is optional.
- Interests and preferences – Details about your skincare interests, product preferences, and signed up email lists help us recommend relevant products and information.
Information Collected Automatically
We also automatically collect information about your visit to our Website through cookies, web beacons, and other technologies. This includes:
- Log data – Information about your use of our Website, such as access times, pages viewed, browser type, IP address, clicks on links or ads, and referring website.
- Device data – Details about the device and browser you use to access our Website, including type, operating system, settings, unique device identifiers, and crash data. This allows our Website to function properly.
- Usage data – Information about your use of our Website and interactions. For example, products you view or add to your cart, pages you visit frequently, and other site usage data.
- Location data – Your general location information determined from your IP address. Specific location is only collected with your consent for features like store locators.
- Cookies – Small data files stored on your browser. Our Website uses cookies to recognize you, customize your browsing experience, and analyze Website traffic and trends. You can adjust cookie settings in your browser.
We use Google Analytics and other services to help us understand usage of our Website. These services collect and analyze information on our behalf using cookies and similar technologies to function properly.
How Do We Use This Information?
We use the information we collect for a variety of purposes, including:
- Fulfilling your orders – Including processing payments, delivering products, and providing related customer service.
- Managing your account – Including creating and managing your account, loyalty program, product reviews, and other account features.
- Personalizing your experience – Customizing your browsing experience based on your activity, interests, location, preferences, previous orders, and other data.
- Communicating with you – Sending email newsletters if signed up, responding to inquiries, providing product alerts and order updates, and contacting you about your account.
- Improving our products and services – Analyzing usage trends to better understand our customers and improve our Website, products, services, and operations.
- Security and fraud prevention – Detecting security incidents, protecting against malicious activity, and managing risk. This includes troubleshooting, data analysis, system maintenance, and external reporting to comply with legal obligations.
- Marketing and advertising – Delivering and measuring effectiveness of marketing campaigns, promotions, contests, surveys, and other initiatives. This includes remarketing and targeted advertising off-site based on your interests and activity on our Website. You can opt-out anytime.
- Legal compliance – Enforcing our Terms of Service, as required by applicable laws and regulations, or to protect our legal rights and interests.
- Other purposes – With your consent or direction, including purposes disclosed at the time you provide information or as otherwise set out in this Privacy Policy.
We only process personal information for the purposes outlined in this Privacy Policy or otherwise disclosed to you. We will ask for consent before using data for any other purpose.
How Is Your Information Shared?
We will not sell or rent your personal information to third parties. The personal information and data we collect is only shared in limited scenarios outlined below.
Service Providers
We share information with select service providers, vendors, and contractors in order to operate, improve, understand usage, and customize our Website and service. This includes payment processors, shippers, technology providers, research/analytics firms, marketing partners, and others.
These third parties provide services at our direction to perform tasks on our behalf. They are only provided with the information needed to fulfill the assigned service and have contracted confidentiality obligations. They are prohibited from using data for other reasons.
Legal and Law Enforcement
We cooperate with government and law enforcement officials as well as private parties as required by law. We carefully review and verify such requests before disclosing any personal information and limit disclosure to only what is required by law.
Examples include responding to subpoenas, court orders, legal process, or government requests. We also enforce our Terms of Service, protect our operations, and protect our legal rights when necessary.
Business Transfers
As we evolve our business, we may sell, buy, restructure, or reorganize business units. In these cases, we may need to transfer or assign personal information as part of the transaction. We will continue to ensure the confidentiality of any personal data involved.
With Your Consent
We may share specific information with third parties when we have your consent to do so. In these cases, we will provide you with the opportunity to opt in to the use or sharing prior to processing data.
For example, you may have the opportunity to have your reviews featured publicly or consent to sharing your information with specific partners for joint promotions. Participation is entirely optional.
Third-Party Links and Services
Our Website may contain links to other sites and integrations with third-party services that are outside our control. Those sites may have their own policies and practices over which we have no responsibility or liability.
We encourage you to carefully review the privacy policies of any third-party services to understand how they collect and use data. These include social media providers, payment processors, vendors, and other partners integrated throughout our Website.
Please contact those providers directly if you have questions about how they handle your personal information.
International Data Transfers
Eclat Skin London® operates globally with teams and entities around the world to best serve our customers. As such, it is necessary for us to transfer personal information to countries where we operate.
When we share or disclose personal data to third parties, or within our global organization, we use appropriate safeguards to process and transfer data in compliance with applicable laws. This may include data transfer agreements, adequacy decisions, certification schemes like the EU-US Privacy Shield, or other approved transfer mechanisms.
While countries may vary in privacy laws, we aim to uphold adequate standards worldwide. We will notify you and seek consent if we need to transfer personal data to countries considered to have inadequate privacy protections by your local regulator.
How Do We Protect Your Information?
We take all reasonable steps to protect your personal information and maintain security safeguards appropriate to the sensitivity of the information we collect and process. This includes:
- Encrypting data in transit and at rest.
- Restricting access to personal information only to employees, contractors and authorized service providers with a business need, subject to strict contractual confidentiality obligations. Training employees on data security and privacy responsibilities.
- Maintaining up-to-date security standards including firewalls, vulnerability scans, access controls, and malware protection. Using secure protocols like TLS when transmitting data.
- Monitoring and testing our systems for possible vulnerabilities.
- Anonymizing and aggregating data to limit risks. Destroying or de-identifying data when no longer needed.
- Limiting collections of personal information to only what is reasonably necessary for our legitimate business interests and legal obligations.
While we strive to protect your personal information, no system can guarantee 100% security. Any transmission is at your own risk. If we learn of a data breach impacting your personal information, we will promptly notify you and relevant regulators if required by law.
Your Privacy Choices and Rights
At Eclat Skin London®, we respect your ability to make choices about your privacy. The rights available to you depend on your location:
Accessing, Updating or Deleting Data: You can access, amend, or request erasure of your personal information directly within your account settings or by contacting us. We will honor such requests in accordance with law, subject to retaining necessary data for recordkeeping purposes, completing transactions, and other legal obligations.
Email and Direct Marketing: You can unsubscribe from marketing emails by clicking the link in the message or adjusting your preferences in your account. You can continue to receive operational communications such as order confirmations, product safety alerts, or other service notices.
Cookies and Tracking: Most web browsers let you remove or reject cookies and clear locally stored data including on our Website. This may limit certain functionality such as personalization. You can also generally opt-out of cookies and online advertising identifiers by adjusting your device settings or visiting industry opt-out pages.
Location Data: You can disable location services on your mobile device if you do not want us to collect this information.
Sales of Personal Data: As noted above, Eclat Skin London® does not sell or rent personal information to third parties without your consent. Any such transfers in the future would only occur after providing notice and choice.
EU/UK data subject rights: EU and UK data protection laws grant rights to access, rectification, portability, erasure, restrictions, objections and other controls over personal data. We honor valid requests to exercise these rights.
Withdraw consent: You can withdraw consent granted for processing data by contacting us. This would not affect past processing but may impact your use of some services.
Lodging complaints: You have a right to complain to your local supervisory authority about our privacy practices. We encourage first reaching out to us directly so we can address concerns.
We aim to honor valid access, correction, and other requests relating to your personal data within 30 days for most requests by contacting [email protected]. Additional verification, limitations, and exemptions under law may be required that extend response times. There are no fees for exercising these rights unless requests are manifestly unfounded, excessive, or repetitive.
Children’s Privacy
Our Website and services are not designed for or targeted to children 16 years of age or younger. We do not intentionally gather personal data from children. If you believe that a child has provided us with personal data, please contact us immediately so we can delete this data. You and your child may also contact your local data protection authority.
Changes to this Privacy Policy
As Eclat Skin London® evolves, this Privacy Policy may need to change as well. We reserve the right to amend this Privacy Policy at any time, for any reason, in our sole discretion. We will alert you about material changes by updating the Last Updated date at the top of this Privacy Policy, sending you an email notification, and/or prominently posting notice of the changes on our Website. We encourage you to periodically review our Privacy Policy for the latest on our privacy practices.
Contact Us
We welcome your questions, concerns, and feedback about this Privacy Policy, your data, and our privacy practices. Please contact us at:
Eclat Skin London®
33 Princes St
London W1B 2LH
United Kingdom
Email: [email protected]
Last Updated: March 2023
We are committed to working with you to resolve any privacy questions or concerns promptly and transparently. If you have an unresolved privacy concern related to personal data processed by Eclat Skin London®, we invite you to please contact us. If we cannot resolve your complaint, you have a right to contact your local data protection authority for assistance in resolving concerns.