Privacy policy

Last updated: 28 September 2026

Organza Natural Skincare Limited, trading as Organza Natural Skincare (“Organza”, “we”, “us” or “our”), operates this website and online store. Our store is powered by Shopify, which enables us to provide our products and services to you.

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, create an account, make a purchase, request a return, communicate with us or otherwise use our services.

For the purposes of applicable data-protection law, Organza Natural Skincare Limited is the controller of your personal information.

Personal Information We Collect

Depending on how you interact with us, we may collect or process the following information:

Your name, email address, telephone number, billing address and delivery address.
Account information, preferences and account settings.
Information about products you view, place in your basket, purchase, return or cancel.
Order, payment, delivery, refund and transaction information.
Communications you send to us, including customer-service enquiries, complaints and return requests.
Marketing preferences and information about whether you have agreed to receive promotional communications.
Device and technical information, including your IP address, browser type, device type, network connection and unique device identifiers.
Information about how you navigate and interact with our website, emails and advertisements.
Information obtained through cookies and similar technologies.

Payments are processed by Shopify and our authorised payment providers. We do not ordinarily receive or store your complete payment-card details.

How We Collect Personal Information

We may collect personal information:

Directly from you when you place an order, create an account, subscribe to marketing, contact us or request a return or refund.
Automatically when you access or use our website, including through cookies and similar technologies.
From Shopify and other service providers that help us operate our store.
From payment processors, delivery companies, fraud-prevention providers, marketing platforms and other authorised partners.
From social-media platforms where you interact with our pages, advertisements or content, subject to your settings on those platforms.

How We Use Personal Information

We may use personal information to:

Process payments and fulfil, deliver and manage orders.
Create and administer customer accounts.
Process cancellations, returns, refunds and customer-service requests.
Communicate with you about your order, account or enquiries.
Operate, maintain, personalise and improve our website and services.
Remember your preferences and products in which you may be interested.
Detect, investigate and prevent fraud, abuse, security incidents and illegal activity.
Protect our customers, business, website and legal rights.
Maintain accounting, tax and transaction records.
Comply with legal, regulatory and law-enforcement obligations.
Send marketing communications where permitted.
Measure the performance of our website, marketing and advertising.
Display relevant advertising, subject to applicable consent and privacy requirements.

Our Lawful Bases for Processing

Under UK data-protection law, we rely on one or more of the following lawful bases:

Contract: where processing is necessary to accept payment, fulfil and deliver your order, administer your account, provide customer support or process a cancellation, return or refund.
Legal obligation: where processing is necessary to meet our legal, accounting, tax, regulatory or law-enforcement obligations.
Legitimate interests: where processing is necessary for our legitimate business interests, including maintaining and improving our store, protecting our website, preventing fraud, responding to enquiries and understanding how customers use our services, provided those interests are not overridden by your rights and interests.
Consent: where you have given us permission, including for certain electronic marketing communications and non-essential cookies or tracking technologies where consent is required. You may withdraw your consent at any time.

Where we rely on legitimate interests, you may have the right to object to that processing. Where we rely on consent, withdrawing your consent does not affect the lawfulness of processing carried out before its withdrawal.

Marketing Communications

We may send you marketing communications where you have consented or where otherwise permitted by law.

You can unsubscribe from promotional emails at any time by selecting the unsubscribe link included in the message or by contacting us. Unsubscribing from marketing will not prevent us from sending essential communications concerning your orders, account, returns or customer-service requests.

Cookies and Similar Technologies

We and our service providers use cookies and similar technologies to operate our website, remember your preferences, understand website usage, prevent fraud and, where permitted, support advertising and marketing.

Where required, non-essential cookies will only be used after you have provided consent through our cookie banner. You can change your cookie preferences using the options available on our website or through your browser settings.

Blocking certain cookies may affect the operation or functionality of the website.

How We Disclose Personal Information

We may disclose personal information where reasonably necessary to:

Shopify, which hosts and supports our online store.
Payment processors and financial-service providers.
Delivery companies and fulfilment providers.
Technology, website-hosting, cloud-storage and IT-service providers.
Customer-service and returns-management providers.
Analytics, advertising and marketing providers, subject to applicable consent requirements.
Professional advisers, including accountants, insurers, auditors and legal advisers.
Government authorities, regulators, law-enforcement bodies or courts where required by law.
A purchaser, investor or successor in connection with a merger, restructuring, financing or sale of all or part of our business.
Other parties where you have directed or consented to the disclosure.

Our service providers may only process personal information in accordance with their contractual obligations, their own legal responsibilities and applicable data-protection law.

We do not sell your personal information for money.

Relationship With Shopify

Our store is hosted by Shopify. Shopify collects and processes information about your access to and use of our store to provide and improve its services.

Information submitted through our store may be shared with Shopify and authorised third parties, which may be located outside the United Kingdom.

Shopify may process certain information as an independent controller when providing its enhanced services. You can learn more by reading the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

You may also use the Shopify Privacy Portal to exercise certain rights relating to information processed by Shopify:

https://privacy.shopify.com/en

International Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred to a country that has not been recognised as providing an adequate level of protection, we will rely on an appropriate lawful safeguard where required. This may include the UK International Data Transfer Agreement, the UK Addendum to the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to fulfil orders, maintain accounts, provide customer support, resolve disputes and comply with legal, accounting and tax obligations.

Order, payment, refund and accounting records will normally be retained for up to six years after the end of the relevant financial year, or longer where legally required.

Marketing information is retained until you unsubscribe or withdraw your consent. We may retain a limited suppression record to ensure that we continue to respect your request not to receive marketing.

Other information is retained according to its nature, the purpose for which it was collected, legal requirements and whether it may be needed to establish, exercise or defend legal claims. Information that is no longer required will be deleted, anonymised or securely disposed of.

Security

We use reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no website, transmission method or electronic storage system is completely secure. You should avoid sending sensitive or confidential information through unsecured communication channels and keep your account credentials confidential.

Your Data-Protection Rights

Depending on your location and the circumstances, you may have the right to:

Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information.
Request restriction of certain processing.
Object to processing based on legitimate interests.
Object at any time to processing for direct-marketing purposes.
Withdraw consent where processing is based on consent.
Request a portable copy of certain information.
Complain to a data-protection supervisory authority.

These rights are not absolute and may be subject to legal exceptions. We may need to verify your identity before processing a request.

To exercise your rights, contact us using the details at the end of this policy. We will respond within the period required by applicable law.

Children’s Information

Our website and products are not directed at children, and we do not knowingly collect personal information directly from children.

If you believe that a child has provided us with personal information without appropriate permission, please contact us so that we can investigate and, where appropriate, delete the information.

Third-Party Websites

Our website may contain links to websites, applications or social-media platforms operated by third parties.

We are not responsible for the privacy, security or content of third-party services. You should review the privacy notices of those services before providing them with personal information.

Complaints

If you have a concern about how we use your personal information, please contact us first so that we can investigate and attempt to resolve it.

If you are based in the United Kingdom and remain dissatisfied, you have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

If you live outside the United Kingdom, you may also have the right to complain to the data-protection authority in your country.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our business practices, services, technology or legal obligations.

The updated policy will be published on this website with a revised “Last updated” date. Where required by law, we will provide additional notice of material changes.

Contact Us

If you have questions about this Privacy Policy, our privacy practices or wish to exercise your data-protection rights, please contact:

Organza Natural Skincare Limited
Trading as Organza Natural Skincare
Company number: 11883067
Email: organzaskincare26@gmail.com
Registered office: C/O WIM Accountants, 37 New North Road, Ilford, Hainault, England, IG6 2UE, United Kingdom

Organza Natural Skincare Limited is the controller of your personal information for the purposes of applicable data-protection law.