This policy explains what personal data Quiet Skin collects, why, and what rights you have over it. It is written to the UK GDPR and the Data Protection Act 2018.
Who we are
Quiet Skin is a sole trader business operated by Gregory Buchanan, trading as Quiet Skin.
Address: 19 Over Ashberry, West Timperley, Cheshire, WA14 5ZN Email: contact@quietskin.shop Website: quietskin.shop
We are the data controller for the personal data described in this policy.
What we collect
When you buy something Name, delivery and billing address, email address, telephone number, order contents and order history. Payment card details are entered directly into our payment provider and are never seen or stored by us.
When you contact us Your name, email address and the content of your message.
When you join our mailing list Your email address, and whether you have opened or clicked our emails.
When you use the website IP address, device and browser type, pages viewed, referring site, and similar technical information collected through cookies and tracking pixels. See Cookies and tracking below.
Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Process and deliver your order | Performance of a contract |
| Handle returns, refunds and enquiries | Performance of a contract |
| Keep records for tax and accounting | Legal obligation |
| Send marketing emails you have signed up for | Consent |
| Measure and improve website and advertising performance | Legitimate interests |
| Prevent fraud and secure the site | Legitimate interests |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we believe they are not. You can object at any time — see Your rights.
Who we share it with
We do not sell your personal data. We share it only where necessary:
- Shopify — hosts our store and processes orders on our behalf
- Shopify Payments / Shop Pay — processes card payments
- The maker of the product you ordered — receives your name and delivery address only,
so they can post your order to you. Products are dispatched directly by their makers.
- Royal Mail and other carriers — receive delivery details to complete the delivery
- Meta Platforms — receives website activity data where you have consented to marketing
cookies, so we can measure and target advertising
- Our accountant and HMRC — where required for tax
- Law enforcement or regulators — where we are legally required to disclose
Some of these providers are outside the UK. Where data is transferred internationally, it is protected by UK adequacy regulations or by standard contractual clauses.
Cookies and tracking
We use cookies that are strictly necessary for the site to work — these do not require your consent.
We also use analytics and advertising cookies, including the Meta pixel, which records your activity on our site and shares it with Meta so we can measure and target advertising. These are only set if you accept them in our cookie banner.
You can change your choice at any time through the cookie banner, or by using Your Privacy Choices.
How long we keep it
- Order and transaction records: six years after the end of the relevant tax year, as
required by HMRC
- Marketing contacts: until you unsubscribe, then we retain a suppression record so we
do not contact you again
- Enquiries: two years from your last contact with us
- Website analytics: as configured in the relevant platform, typically no more than
26 months
Your rights
Under the UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct it if it is wrong or incomplete
- Erase it, where we have no continuing lawful reason to keep it
- Restrict how we use it
- Object to processing based on our legitimate interests, and to direct marketing at
any time
- Portability — receive your data in a machine-readable format
- Withdraw consent at any time, where consent is our basis
To exercise any of these, email contact@quietskin.shop. We will respond within one month. We do not charge for this.
Marketing
We only send marketing emails to people who have asked for them. Every email has an unsubscribe link, and unsubscribing takes effect immediately.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right.
You also have the right to complain to the Information Commissioner's Office:
- ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
Children
Our store is not intended for children and we do not knowingly collect data from anyone under 16.
Changes
We may update this policy. The date at the top shows when it last changed. Material changes will be notified on this page.