Legal information
Privacy Policy
How personal information is handled when you use Prestige Beauty services.
Who controls your information
The controller responsible for Prestige Beauty Co is:
PRESTIGE BEAUTY GROUP LTDCompany number 16938241
82a James Carter Road
Mildenhall
Bury St. Edmunds
United Kingdom
IP28 7DE
For privacy enquiries, email: admin@prestigebeautyco.com
Information we may handle
Information you provide
This may include your name, contact details, account details, billing and delivery information, order information, and messages sent to customer service.
Orders and transactions
WordPress and WooCommerce record information required to process and administer orders and customer accounts. The payment provider used for an order will be identified during checkout. Payment information is handled according to the provider and payment method selected by the customer.
Website and device information
Technical information may be generated when the website is used, such as IP address, browser information, device information, security logs and cookie data.
Why information is used
Personal information may be needed to provide the website, administer accounts, process and deliver orders, take payment, respond to enquiries, manage returns, prevent misuse, maintain security and comply with legal obligations.
Marketing communications and non-essential tracking must only be used where there is an appropriate lawful basis and any required consent has been obtained.
Lawful bases
Depending on the purpose, processing may be necessary to perform a contract or take requested steps before a contract, comply with a legal obligation, pursue a legitimate interest that is not overridden by individual rights, or act on valid consent.
Legitimate interests may include maintaining website and account security, preventing misuse, responding to enquiries and improving services where those interests are balanced against individual rights.
Service providers and sharing
Prestige Beauty uses WordPress and WooCommerce as its website and ecommerce systems, Hostinger for website hosting and infrastructure, and Amazon Multi-Channel Fulfilment for order fulfilment.
Google services may be used for analytics or advertising where they are enabled. Non-essential Google services are subject to applicable consent requirements.
Where payment processing is required, information is shared with the payment provider identified during checkout according to the payment method selected.
Information is shared only where needed for the relevant service, legal obligation, professional advice, security or the establishment and defence of legal rights.
Cookies, analytics and marketing
Strictly necessary technologies may support functions requested by the customer, such as basket, checkout, account and security features. Google analytics or advertising technologies may be used when enabled, but non-essential technologies are subject to the appropriate consent mechanism.
Marketing consent is kept separate, freely given where required and capable of being withdrawn.
International transfers
Some service providers may process information outside the United Kingdom. Where this results in a restricted transfer, Prestige Beauty will use the legal basis and safeguards required by applicable data protection law. The precise arrangements depend on the services enabled and the provider terms that apply.
Data retention
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including fulfilling orders, providing accounts and support, meeting legal, tax and accounting obligations, resolving disputes, maintaining security and establishing or defending legal rights.
Retention depends on the type of information, why it is held and any legal obligations. Specific periods are not stated until the final retention schedule has been confirmed.
Data security
Prestige Beauty takes reasonable organisational and technical steps to protect personal information. No online system can be guaranteed completely secure, and customers should keep account credentials confidential.
Your data protection rights
Depending on the circumstances and lawful basis, you may have rights to access personal information, correct inaccurate information, request erasure, restrict processing, object to processing, and receive certain information in a portable format.
Where processing relies on consent, consent can be withdrawn. Withdrawing consent does not affect processing that was lawful before withdrawal.
To exercise a data protection right, email: admin@prestigebeautyco.com
Questions and complaints
Contact Prestige Beauty first if you have a question or complaint about personal information: admin@prestigebeautyco.com
You may also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.
Policy updates
This policy may be updated when processing activities, providers, legal requirements or website technologies change. The latest version will be published on this page.