Privacy Policy

Personal data refers to any information that can directly or indirectly identify you as an individual. This does not include data that has been fully anonymised or aggregated in a way that can no longer be traced back to you.

We operate on the principles of lawfulness, fairness, and transparency, collecting only the minimum data needed for clearly defined purposes. Appropriate technical and organisational safeguards are in place to protect your information. We use personal data to verify account activity and to monitor for and investigate suspicious or potentially fraudulent behaviour.

• Information You Give Us: account details, order and payment information (card data is handled by our payment provider and is never stored on our servers), billing and delivery addresses, and any information you share with us via email, chat, or feedback forms.
• Information Collected Automatically: device type, unique device identifiers, IP address, operating system, browser type, usage and diagnostic data, and approximate location data gathered when you browse or interact with the site.

We use personal data primarily to deliver, maintain, and improve our beauty and skincare products and services, to communicate with you, and to protect both our customers and our business.

• Service Delivery & Improvement: we use personal data for analysis, research, and internal audits, based on our legitimate interest in providing you with a consistent and reliable shopping experience.
• Communications: with your prior consent, we may send marketing communications, updates about your orders or account, and notifications of changes to our policies. You can withdraw consent and opt out at any time.

Cookies are small text files placed on your browser that help store and retrieve session information. At present, we use only strictly necessary cookies — those required to keep your shopping basket active and your session running. We do not currently use cookies for advertising, third-party tracking, or behavioural profiling. Should this change, we will update this statement and introduce a proper consent mechanism in line with applicable EU ePrivacy rules. You can manage or disable cookies through your browser settings, though doing so may affect certain site functionality.

We share limited personal data with trusted service providers who support our operations, including payment processors, shipping and logistics partners, and IT and hosting providers. We do not sell or share your personal data with third parties for their own independent marketing purposes without your explicit prior consent.

Where required by the mandatory laws of the European Economic Area (EEA) or your country of residence, we fulfil all corresponding legal obligations. Processing of personal data belonging to EEA residents is carried out in accordance with Article 6(1) of the GDPR where your consent is required.

To fulfil your order, certain personal data — such as your name, delivery address, and order details — may be transferred to logistics partners outside the EEA, including in China, solely for the purpose of processing and dispatching your purchase. All such transfers are conducted under appropriate safeguards as required by the GDPR.

Our products and services are intended for adults aged 18 and over, in line with the age requirement set out in our Terms & Conditions. As a further safeguard, we do not knowingly collect, use, or disclose personal data from individuals under the age of 16. If we become aware that a child’s data has been collected, we will take prompt steps to delete it.

You have the right to access, correct, or request deletion of the personal data we hold about you. You may also restrict or object to certain processing activities, and request a copy of your data in a structured, machine-readable format. Where applicable, you have the right to lodge a complaint with your local data protection authority. We aim to respond to all data rights requests within 30 days.

We apply reasonable technical, administrative, and physical security measures to protect your personal data from unauthorised access, loss, or misuse. Personal data is retained only for as long as necessary to fulfil the purposes described in this statement, unless a longer retention period is required or permitted by law.

We may update this Privacy Statement from time to time to reflect changes in technology, industry practice, or applicable regulations. Continued use of our site and services after the effective date of any revision constitutes your acceptance of the updated statement.

If you have any questions about this Privacy Statement or how we handle your personal data, please get in touch with our team at getinfo@riptideon.com (APEXRISE S.R.L.).