Introduction

At Ida Beauty Ltd, your privacy is important to us. This Privacy Policy outlines how we collect,
use, share, and protect your data when you visit our website, make a purchase, or
otherwise, interact with us.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection
Act 2018, and the guidance provided by the Information Commissioner’s Office (ICO).

2. Who We Are• Company Name: Ida Beauty Ltd
• Company Number: 13099818
• Registered Office: 273 Woodlands Road, Gillingham, England, ME7 2SY
• Website: https://idabeauty.co.uk
• Data Protection Officer: Adriana Chiari
• Contact: finance@naturabeauty.co.uk

3. What Data We Collect

We collect personal data when you browse our website, make a purchase, contact us, or sign
up for marketing. This may include:
• Identity & Contact Information: Name, billing/shipping address, email address, phone
number.
• Transaction Data: Purchase history, order details, payment method (note: card data is
processed securely by our payment partners).
• Account Data: Login credentials, saved preferences, wish list items.
• Device & Usage Data: IP address, browser type, time zone, cookies, website activity.
• Marketing Preferences: Email opt-in status, product interests.
• Customer Service Interactions: Feedback, support queries, complaint history.
We do not knowingly collect or process data from children under 13. If you believe a child has
provided us with personal information, please contact us immediately.

4. Special Category Data
We do not intentionally collect special category data (e.g., health or ethnicity) unless
explicitly provided (e.g., allergy disclosures). Where collected, we will only use this data:
• With your explicit consent, or
• Where necessary to protect your vital interests or comply with legal requirements.

5. How We Use Your Personal Data
Purpose Legal Basis
To process and deliver your orders Performance of a contract
To manage your account and preferences Legitimate interest
To respond to customer service queries Legitimate interest
To send marketing with your consent Consent (you can withdraw anytime)
To analyse website performance Legitimate interest (analytics, improvements)
To prevent fraud and ensure site security Legal obligation / Legitimate interest

6. Sharing Your Data
We do not sell your personal data. However, we may share it with trusted third parties who
help us run our business, such as:
• Payment Providers: Stripe, PayPal (for secure processing)
• Delivery & Logistics: Royal Mail, Hermes, etc.
• Website Analytics: Google Analytics
• Marketing Platforms: Mailchimp, Klaviyo, Meta/Facebook
• IT & Hosting Providers: Our web hosting and cloud storage providers
• Legal & Regulatory Authorities: If required by law, court order, or government regulation
All our third-party partners are contractually required to protect your data and only process
it in accordance with our instructions.

7. Cookies & Tracking Technologies
We use cookies to:
• Enable core site functionality (e.g. checkout)
• Analyse traffic and user behaviour (e.g. Google Analytics)
• Personalise ads and measure marketing performance (e.g. Facebook Pixel)
You can manage or withdraw your cookie preferences at any time by clicking the “Cookie
Settings” link in the website footer.
For more information, please see our full Cookie Policy.
8. International Transfers
Some of our partners (e.g., hosting or email marketing providers) may store your data
outside the UK.
When we do so, we ensure adequate safeguards are in place:
• The country has been deemed “adequate” by the UK government, or
• We use Standard Contractual Clauses approved for international transfers.

9. Data Security
We implement a combination of technical and organisational measures to keep your data
secure, including:
• HTTPS encryption across the website
• Secure password policies
• Two-factor authentication for staff
• Limited access to your data based on role
• Regular security reviews and backups

10. Data Retention
We only keep your data for as long as necessary. For example:
Data Type Retention Period
Order records 6 years (for tax and legal purposes)
Customer accounts While active + 24 months of inactivity
Marketing data Until you unsubscribe or request deletion
Support communications Up to 24 months

11. Your Data Protection Rights

You have the following rights under UK GDPR:
• Right to be informed – You can ask us how we collect and use your data.
• Right of access – You can request a copy of the personal data we hold.
• Right to rectification – You can ask us to correct any inaccurate or incomplete data.
• Right to erasure – In certain cases, you can ask us to delete your data.
• Right to restrict processing – You can limit how we use your data.
• Right to data portability – You can request your data in a machine-readable format.
• Right to object – You can object to certain types of processing, such as direct marketing.
• Right to withdraw consent – Where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, email us at: info@idabeauty.co.uk
We will respond within 48 hours.

12. Complaints

We hope to resolve any concerns quickly. You can contact us at:
info@idabeauty.co.uk
Should you feel your concerns haven’t been fully addressed,
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/make-a-complaint/

Helpline: +44 (0)303 123 1113

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes.
If changes are material, we will notify users via the website or by email (if applicable).
Last updated: 01 August 2025

14. Contact Us
If you have any questions about this policy or how your data is used, please contact:
Data Protection Officer
Adriana Chiari
info@idabeauty.co.uk