• Account details: your name, mobile number, email address and password when you create an account.
• Order details: your delivery address, city, mobile number, the products you buy and your chosen payment method.
• Saved addresses, wishlist and profile settings you add in My Account.
• Reviews, return requests and messages you send us, including any photos you share.

To understand how our shop is used, we record anonymous activity: the pages you visit, products you view, searches you make, the website that referred you and your device type (mobile, tablet or desktop). This is linked to a random visitor ID, not to your name, and we do not store your IP address with it.

We also use Google Analytics and Google Tag Manager, which collect similar usage information under Google's own privacy policy.

• To process, confirm, deliver and support your orders, including calling you about delivery.
• To run your account, send one-time verification codes and help you reset your password.
• To handle returns, refunds and customer care requests.
• To award and show your beauty points.
• To prevent fraud and keep our website secure.
• To improve our product range and website using the anonymous activity described above.

We do not sell your personal information. We share it only with the people and services we need to run the shop:

• Delivery partners receive your name, mobile number and address to deliver your parcel.
• MongoDB Atlas hosts our customer and order database.
• Resend sends our verification and account emails.
• Cloudinary hosts our website and product images.
• Google provides website analytics.
• Government or law-enforcement authorities, when the law requires it.

We keep your account details while your account is open. Order records are kept for as long as we need them for customer care, returns, accounting and legal requirements. Anonymous activity data is used in summaries and is not tied to your identity.

Passwords are stored as one-way encrypted hashes, never as plain text. Your sign-in session uses a secure cookie that page scripts can't read, and access to our admin tools is limited to staff who need it for their work.

• Update your name, contact details and addresses any time in My Account.
• Clear your bag and wishlist by clearing your browser's site data.
• Limit analytics cookies through your browser settings or Google's opt-out add-on.
• Ask us for a copy of your data, or to delete your account, by contacting us. We may need to keep order records the law requires.

Our shop is meant for adults. If you are under 18, please shop with a parent's or guardian's permission. We do not knowingly collect information from children under 13.

If we change how we use your information, we will update this page and the date at the top. Please also read our terms and conditions.