Privacy Policy

PRIVACY POLICY

Perle Cosmetics - https://perlecosmetics.com

Last updated: 19/03/2026

TAPB LTD operates this store and website (https://perlecosmetics.com) to provide you with a personalised shopping experience ("Services"). Our store is powered by Shopify.

This Privacy Policy describes how we collect, use, and disclose your personal information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable USA state privacy laws (including CCPA/CPRA, Virginia CDPA, etc.).

Data Controller —

TAPB LTD - 128 City Road, London, United Kingdom, EC1V 2NX

Email: hello@perlecosmetics.com

Personal Information Collected

Information Provided Directly

• Contact details: name, address, email, telephone number

• Financial information: card type, transaction details (your complete banking details are processed by Shopify Payment and are never stored by us)

• Account information: username, preferences, settings

• Transaction information: items viewed, added to cart, purchased, or returned

• Communications: messages sent via contact form or customer service

• Skincare information: skin type, skin concerns, skincare routine preferences

• Skincare quiz/diagnostic data: Results from skin assessment tools to provide personalised product recommendations

Information Collected Automatically

• Navigation data: IP address, browser type/version, operating system, pages visited, visit duration

• Cookies and trackers: session identifiers, preferences, analytical data

Purposes and Legal Bases

Under UK GDPR, we process your data for the following purposes:

• Order and delivery management — Legal basis: Contract performance (Article 6.1.b) — Retention: 3 years after last order

• Customer account management — Legal basis: Contract performance — Retention: 3 years after last activity

• Customer service and complaints — Legal basis: Contract performance — Retention: 3 years after closure

• Billing and accounting — Legal basis: Legal obligation (Article 6.1.c) — Retention: 10 years

• Fraud prevention — Legal basis: Legitimate interest (Article 6.1.f) — Retention: 13 months

• Skincare product recommendations — Legal basis: Consent (Article 6.1.a) — Retention: Until account closure

• Newsletter/marketing — Legal basis: Consent (Article 6.1.a) — Retention: Until withdrawal

• Site improvement (analytics) — Legal basis: Consent (cookies) — Retention: 13 months max

• Targeted advertising — Legal basis: Consent — Retention: 13 months max

Data Recipients

• Shopify (hosting and order processing)

• Payment processor: Shopify Payment

• Competent authorities if legally required

We never sell your personal data to third parties.

International Transfers

Some of our service providers (including Shopify Inc.) may process your data outside the UK. These transfers are governed by UK adequacy decisions, Standard Contractual Clauses (SCCs), or adequacy decisions recognised by the UK government.

For details on how Shopify uses your data, visit: https://privacy.shopify.com

Your Rights (UK GDPR)

Under UK GDPR, you have the following rights:

• Right of access: Obtain confirmation that your data is being processed and receive a copy

• Right to rectification: Correct inaccurate or incomplete data

• Right to erasure: Request deletion of your data

• Right to restrict processing: Limit how your data is used

• Right to data portability: Receive your data in a portable format

• Right to object: Oppose processing or marketing communications

• Right to withdraw consent: Withdraw consent at any time

• Right to lodge a complaint: File a complaint with the Information Commissioner's Office (ICO)

To exercise these rights, contact us at: hello@perlecosmetics.com

Response time: 30 days maximum. You may lodge a complaint with the ICO at: www.ico.org.uk

USA Residents – Additional Privacy Rights

If you are a resident of California, Virginia, or another USA state with privacy laws, you have additional rights:

• CCPA/CPRA (California): Right to know what personal information is collected; right to delete; right to opt-out of the sale of personal information; right to non-discrimination

• Virginia CDPA: Right to access, delete, correct, and opt-out of targeted advertising and sale of information

• Other states: Rights vary by state — please contact us for state-specific information

To submit a privacy request, contact: hello@perlecosmetics.com

Cookies

Our site uses cookies. Under UK ICO guidelines, your explicit consent is required before non-essential cookies are placed.

• Essential cookies: Site functionality, cart, session — No consent required

• Analytics cookies: Audience measurement — Consent required — 13 months max

• Marketing cookies: Targeted advertising, remarketing — Consent required — 13 months max

• Social media cookies: Sharing and social buttons — Consent required — 13 months max

You can manage your preferences at any time via the consent banner or your browser settings.

Security

We implement appropriate technical and organisational measures (HTTPS/TLS encryption, restricted access, regular backups). In the event of a data breach, we will notify the ICO within 72 hours as required by UK GDPR.

Children's Data

Our Services are not intended for children, and we do not knowingly collect personal information from minors. If you are a parent or guardian of a child who has provided us with information, please contact us for deletion.

Changes to This Policy

We may update this Policy at any time. Any changes will be posted on this page with the date of last update.

Contact Information

For questions or to exercise your rights: