Privacy policy.

We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, and protect your information when you use our website or purchase our products.

What Personal Data We Collect

We may collect the following information:

Identity Data

Name

Contact Data

Email address

Phone number

Billing and delivery address

Transaction Data

Purchase history

Payment details (processed securely via third-party providers)

Marketing Data

Preferences for receiving marketing communications

How We Collect Your Data

We collect data when you:

Place an order

How We Use Your Data

We use your personal data to:

Process and deliver your orders.

Manage payments and refunds.

Communicate with you about your orders.

Improve our website and services.

Send marketing communications (only with your consent)

Comply with legal obligations.

Legal Basis for Processing (UK GDPR)

We rely on the following lawful bases:

Contract – to fulfil your orders.

Legal obligation – for tax and compliance purposes

Legitimate interests – to improve services and prevent fraud.

Consent – for marketing communications.

Marketing Communications

You will only receive marketing emails if you have opted in.

You can unsubscribe at any time via the link in emails.

Sharing Your Data

We may share your data with:

Payment providers (e.g. Stripe)

Delivery companies (e.g. Royal Mail, courier services)

IT and website service providers

Legal or regulatory authorities (if required)

We ensure all third parties comply with UK data protection laws.

Data Security

We implement appropriate security measures to protect your data, including:

Secure payment processing

Encrypted connections (SSL)

Restricted access to personal data

Data Retention

We retain your personal data only as long as necessary:

Order data: typically, 6 years (for tax/legal reasons)

Marketing data: until you withdraw consent.

Your Legal Rights (UK GDPR)

You have the right to:

Access your personal data.

Correct inaccurate data.

Request deletion (“right to be forgotten”)

Restrict processing.

Object to processing.

Data portability

Withdraw consent at any time.

To exercise your rights, contact us at: info@giotrichology.com

Cookies

We use cookies to:

Improve website functionality.

Analyse traffic

 Personalise your experience

You can manage cookies through your browser settings.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page.

I