Privacy Policy

Ms Lorde Beauty Ltd (“Ms Lorde Beauty”, “MLB”, “we”, “us” or “our”) is responsible for deciding how your personal information is used when you visit mslordebeauty.co.uk, shop with us, book an appointment or contact us.

For the purposes of applicable data protection law, we are the data controller.

Email: contact@mslordebeauty.co.uk
Business correspondence address: [Insert business postal address]

This policy explains what information we collect, why we use it, who we share it with and your rights.

Depending on how you interact with us, we collect:

• Contact details: your name, email address, telephone number, billing address and delivery address.
• Order information: products purchased, payment status, transaction references, delivery details, returns and refunds.
• Booking information: your selected treatment, appointment date and time, deposit or payment status, and information you provide about your booking.
• Marketing preferences: newsletter signup details, consent records and unsubscribe requests.
• Communications: messages, enquiries, feedback and information you send to our customer service team.
• Website information: IP address, browser and device information, pages visited, referral sources and interactions with products, the basket and checkout, subject to your cookie choices where applicable.
• Shade-match information: photographs and answers you choose to submit to our shade-match tool, as explained below.

We receive information directly from you, automatically through your use of the website, and from providers handling payments, orders and deliveries on our behalf.

Where information is needed to process an order or booking, we may be unable to provide that service if you do not supply it. Newsletter subscriptions and use of the shade-match tool are optional.

We use your information on the following legal bases:

To perform our contract with you, or take steps you request before entering a contract: processing orders and payments, delivering products, managing appointments, handling returns and communicating about these services.

With your consent: sending newsletter marketing and operating optional analytics under the consent settings described below. Where we rely on consent, you can withdraw it at any time.

For our legitimate interests: answering general enquiries, protecting our website, preventing fraud, maintaining service records and handling complaints or legal claims. We consider your rights and interests when relying on this basis.

To meet legal obligations: keeping required accounting records and responding to valid requests from authorities.

We do not sell your personal information.

Payments are handled through Shopify checkout and the payment providers available there. We receive information needed to manage your purchase, such as payment confirmation, transaction references and, where applicable, limited payment-method details.

We do not receive or store your full payment-card number or security code.

Payment providers may also process information for their own purposes, including fraud prevention and meeting financial regulations. Their privacy notices explain this processing.

We send newsletter marketing when you have actively opted in, for example by selecting the consent box and submitting our signup form.

You can unsubscribe at any time using the link in a marketing email or by contacting contact@mslordebeauty.co.uk.

You have the right to object to direct marketing at any time.

Unsubscribing does not stop essential messages about an existing order, refund or appointment.

We may retain a limited record of your unsubscribe request so that we can respect your preference and avoid adding you back to marketing lists accidentally.

If you choose to use our shade-match tool, we process the photograph and answers you provide to suggest suitable product shades.

[Before publication, insert the verified details: whether photographs are processed on your device or uploaded; which provider processes them; the legal basis used; whether photographs, answers or results are stored; the deletion period; and whether any provider uses submissions for model training or other purposes.]

Recommendations are automated product suggestions and may be affected by lighting, camera settings and image quality. They are not medical advice.

You can shop without uploading a photograph.

[Confirm whether appointment forms collect allergies, skin conditions or other health information. If they do, add the specific purposes, legal basis, special-category condition, recipients and retention period before publishing.]

We use cookies and similar technologies to operate the website and, where you agree, understand how it is used.

Essential technologies support functions such as the basket, checkout, security and remembering your privacy choices.

Optional analytics technologies, including Google Analytics 4, help us understand visits, traffic sources, product interactions and purchases.

Under our consent-based analytics setup, optional analytics tags are activated only after you accept analytics cookies. You can reject them and continue shopping.

You can change or withdraw your choice through [insert the actual cookie-settings link or control]. Withdrawing consent does not affect processing that took place lawfully before withdrawal.

Our cookie information explains the technologies used, their providers, purposes and durations: [insert cookie-policy link or link to the detailed cookie-settings panel].

Browser settings also allow you to remove or block cookies, although blocking essential cookies may affect website functions.

We share information where necessary with:

• Shopify, for commerce services, checkout and customer and order records.
• Lovable and the hosting or database providers supporting our website, for website operation and the features you use.
• Google, for Google Analytics where enabled with your consent.
• Email and booking service providers, for the communications and appointments they handle.
• Payment providers and delivery companies, to process payments and fulfil orders.
• Authorised website support providers and professional advisers, where access is necessary to maintain our services or advise us.
• Authorities or other parties, where disclosure is required by law or necessary to establish, exercise or defend legal claims.

[Confirm the actual hosting/database, email, booking and shade-match providers, and add their names where useful. Remove any category that does not apply.]

Providers acting on our behalf must handle information under appropriate contractual arrangements. Some providers act independently for certain purposes, as explained in their own privacy notices.

Some providers may store or access information outside the United Kingdom.

Where this involves a restricted international transfer, we use an applicable UK adequacy arrangement or appropriate contractual safeguards, together with any additional measures required.

[Confirm the actual overseas processing locations and applicable safeguards for the providers used before publication.]

You can contact us for information about these safeguards or to request a copy, subject to appropriate redactions.

We keep personal information only for as long as needed for the purposes explained in this policy.

• Order and accounting records: for the period required by applicable tax and accounting obligations, and longer where necessary for an unresolved dispute or legal requirement.
• Booking and customer service records: for as long as needed to deliver the service, resolve enquiries and meet relevant record-keeping or legal-claim requirements.
• Newsletter records: while you remain subscribed, subject to periodic reviews of whether continued retention is necessary.
• Consent and unsubscribe records: for as long as reasonably needed to demonstrate and honour your choices.
• Analytics data: [insert the actual configured GA4 event-data retention period; describe cookie durations in the cookie information].
• Shade-match photographs, answers and results: [insert verified retention and deletion periods, including any provider retention].

When information is no longer required, we delete it or anonymise it. Information in backups is removed through our backup-retention cycle.