Privacy Policy
Last Updated: June 2026
Cosmedic Online Limited ("we", "us", or "our") respects your privacy and is committed to protecting your personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller & Data Protection Officer
Cosmedic Online Limited (Company No: 09833442) is the data controller. Our registered office is Prospect House, 13 Albert Road, Tamworth, Staffordshire, England, B79 7JN. Our appointed Data Protection Officer (DPO) is Dr. Martyn King. If you have any privacy-related inquiries, please contact us at support@cosmedic.online.
2. Data We Collect
To process your orders and provide clinical advice, we collect:
- Identity & Contact Data: Name, billing address, shipping address, email, and phone number.
- Financial Data: Handled securely via our payment gateways (Stripe, PayPal). We do not store your raw credit card details on our servers.
- Special Category Data (Health Data): If you request access to Level 1-3 clinical products, we may collect information regarding your skin type, medical history, and specific skin concerns to approve your clinical tier. This is processed strictly under Article 9 of the UK GDPR for the provision of healthcare and medical advice.
3. Third-Party Tracking & Marketing
In accordance with the Privacy and Electronic Communications Regulations (PECR), we use cookies and third-party tools to improve our service. These include Google Analytics, and Clarity. You may opt-out of marketing communications at any time.
4. Data Retention
We will only retain your personal data for as long as reasonably necessary. Please note that under the Taxes Management Act 1970, we are legally required to retain basic transactional data (Name, Contact Details, Financial and Transaction Data) for a minimum of 6 years for HMRC tax and auditing purposes, even if you request account deletion.
5. Your Legal Rights
Under UK law, you have the right to access, correct, restrict processing, or request the deletion of your personal data (subject to the HMRC retention exceptions noted above). To exercise these rights or to request a full "Soft Delete" of your online profile, please use the Delete Account function in your dashboard or contact our support team.