Privacy Policy

1. General information

This Privacy Policy explains how SIA Soulful Skincare processes personal data when you visit the website soulfulskincare.co.uk, make a purchase, complete the skincare quiz, subscribe to newsletters, or contact us.

Data controller:
SIA Soulful Skincare
Registration No. 40203662922
Legal address: Dobeles nov., Tērvetes pag., Kroņauce, “Kristāli” – 11, LV-3730, Latvia
Email: info@soulfulskincare.co.uk

2. What personal data we process

Depending on your actions on the website, we may process the following personal data:

  • name and surname;
  • email address;
  • delivery address;
  • phone number, if provided for order or delivery purposes;
  • order information;
  • payment status and transaction information;
  • user account data, if the Buyer creates an account in the online store;
  • order history, if the Buyer makes purchases with a registered account;
  • communication content, if you email us or use a contact form;
  • skincare quiz answers and result, if you complete the quiz;
  • newsletter subscription consent, if you subscribe to marketing communication;
  • technical information about website use, such as cookie data, device and browser information, IP address, and analytics data.

3. Purposes of personal data processing

We process personal data for the following purposes:

3.1. Order processing and delivery

We process your personal data to:

  • accept and process your order;
  • receive payment;
  • ensure delivery of products to Latvia, Lithuania, Estonia, and the United Kingdom;
  • send order confirmations and order-related notifications;
  • handle questions related to orders, delivery, returns, or complaints.

3.2. User account maintenance

The Buyer may make a purchase without creating a user account.

If the Buyer creates a user account in the online store, we process account data to provide access to the account, order history, and account-related functions.

The Buyer is responsible for keeping their account login details secure.

3.3. Payment processing

Payments are processed by Stripe. We do not store your payment card details. The information necessary for payment processing is processed in Stripe’s system in accordance with its security and data processing rules.

3.4. Skincare quiz

If you complete the skincare quiz on the website, we may process your answers, name, and email address to:

  • display the quiz result;
  • save the quiz submission;
  • send information to Klaviyo if you have subscribed to receive communication or if this is necessary to send quiz-related information.

The quiz form is provided using Forminator. Data transfer from Forminator to Klaviyo may be carried out using Make automation.

3.5. Newsletters and marketing communication

If you subscribe to newsletters or give consent to receive marketing communication, we process your name and email address to send:

  • news;
  • special offers;
  • skincare tips;
  • product and promotion information.

Marketing communication is sent only if you have given consent. You may unsubscribe at any time using the unsubscribe link in the email or by writing to info@soulfulskincare.co.uk.

We use Klaviyo to manage marketing emails.

3.6. Website analytics and improvement

We use Google Analytics to analyse website traffic, understand how visitors use the website, and improve website performance, content, and user experience.

3.7. Compliance with legal obligations

We may process personal data to comply with accounting, tax, consumer protection, and other legal obligations.

4. Legal basis for personal data processing

We process personal data based on the following legal bases:

  • performance of a contract — to process your order and ensure delivery;
  • compliance with a legal obligation — to comply with accounting and legal requirements;
  • consent — for newsletters, certain cookies, and marketing communication;
  • legitimate interests — for customer service, website security, service improvement, and dispute resolution.

5. Who personal data may be shared with

To ensure the operation of the online store, personal data may be shared with the following service providers:

  • WooCommerce — to operate the online store;
  • Stripe — for payment processing;
  • Omniva — for delivery in Latvia, Lithuania, Estonia, and the United Kingdom;
  • Klaviyo — for newsletter and marketing communication management;
  • Forminator — to operate forms and the skincare quiz;
  • Make — for automated data transfer between website forms and Klaviyo;
  • Google Analytics — for website analytics;
  • Complianz — for cookie consent management;
  • accounting, legal, IT, and hosting service providers, where necessary to provide services.

Personal data is shared only to the extent necessary to provide the specific service.

6. Data transfers outside the European Economic Area

Some of the service providers we use, such as Stripe, Klaviyo, Google, or Make, may process data outside the European Economic Area.

In such cases, personal data transfers are carried out in accordance with applicable data protection rules and using appropriate safeguards, such as European Commission-approved Standard Contractual Clauses or other legally recognised mechanisms.

7. Data retention periods

We retain personal data only for as long as necessary for the relevant purpose:

  • order and accounting data is retained for the period required by law;
  • registered user account data is retained while the account is active or until an account deletion request is made, unless retention is necessary to comply with legal obligations;
  • order history in a registered account is retained so that the Buyer can access previous orders;
  • customer communication data is retained for as long as necessary to review the matter and protect our legitimate interests;
  • marketing data is retained until you withdraw consent or unsubscribe from newsletters;
  • cookie and analytics data is retained in accordance with cookie settings and the relevant service providers’ retention periods.

8. Your rights

You have the right to:

  • access your personal data;
  • request correction of inaccurate data;
  • request deletion of data where there is a legal basis;
  • request restriction of data processing;
  • object to data processing;
  • withdraw consent where processing is based on consent;
  • receive your data in a structured, commonly used, machine-readable format, where applicable;
  • submit a complaint to the Data State Inspectorate.

To exercise your rights, please contact us at info@soulfulskincare.co.uk.

9. Cookies

The website uses cookies to ensure website functionality, analyse website traffic, and, if you consent, use analytics and marketing tools.

Complianz is used on the website to manage cookie consent.

You can change your cookie settings using the cookie management tool available on the website.

10. Data security

We implement reasonable technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction.

However, please note that no data transmission over the internet is completely secure, so we cannot guarantee absolute security.

11. Changes to the Privacy Policy

We may update this Privacy Policy from time to time.

The current version of the Privacy Policy is always available on soulfulskincare.co.uk.

12. Contacts

If you have any questions about this Privacy Policy or personal data processing, please contact us:

SIA Soulful Skincare
Email: info@soulfulskincare.co.uk
Legal address: Dobeles nov., Tērvetes pag., Kroņauce, “Kristāli” – 11, LV-3730, Latvia