PRIVACY & COOKIE POLICY

1. Who we are

This Privacy & Cookie Policy explains how we collect and use personal data when you visit our website and when you buy from us.

The data controller is: BEAUTY AND PMU SUPPLIES LTD (“we”, “us”, “our”)
VAT Number: 485280664
Address: 62 The Belfry, Luton, England

We operate the website www.as-pigments.co.uk (the “Site”).

If you have any questions about this Policy or how we use your data, you can contact us at:
sales@as-pigments.co.uk

2. What this Policy covers

This Policy explains:

• what personal data we collect;

• how and why we use it;

• the legal bases we rely on;

• who we share it with;

• how long we keep it;

• your rights under data protection law;

• how we use cookies and similar technologies.

This Policy applies to:

• visitors to our Site;

• customers who buy our products;

• people who create an account;

• people who sign up to our newsletter;

• anyone who contacts us by email or via forms on the Site.

3. Personal data we collect

3.1 Data you provide to us

You may give us:

• Identity data – name, surname, company name.

• Contact data – email address, billing and delivery address, phone number.

• Account data – login details (email/username and password), order history.

• Order and payment data – products ordered, order value, payment method, VAT number (if applicable).

• Marketing preferences – whether you want to receive our newsletter and marketing communications.

• Communication data – messages you send to us via email or forms, including any attachments.

• Professional data (optional) – for example if you tell us you are a professional PMU artist, clinic, or salon.

3.2 Data we collect automatically

When you use the Site, we and our service providers may automatically collect:

• Technical data – IP address, browser type and version, device type, operating system, time zone setting, approximate location from IP.

• Usage data – pages visited, time spent on each page, links clicked, referring pages, search terms used on the Site.

• Log data – server logs, security logs and error logs.

This data is often collected via cookies and similar technologies (see section 10).

3.3 Data from third parties

We may receive data from:

• Payment providers – confirmation of payment status and limited payment details (we do not see full card numbers).

• Delivery partners and couriers – tracking information and proof of delivery.

• Email marketing tools – information on whether you opened or clicked our emails.

• Social media platforms – if you contact us or interact with us via social channels.

4. How and why we use your data

We must have a legal basis to use your personal data. Depending on the situation, we rely on:

• Performance of a contract – to process and deliver your order.

• Legal obligation – to keep records for tax and accounting.

• Legitimate interests – to run and improve our business, prevent fraud and protect our Site.

• Consent – mainly for email marketing and non-essential cookies.

4.1 To process your orders and deliver products

We use your data to:

• receive and manage orders;

• take payment and issue invoices;

• ship orders and handle returns;

• communicate with you about your order.

Legal basis: Performance of a contract; legal obligation (for invoicing and tax records).

4.2 To provide and manage your account

We use your data to:

• create and manage your account;

• allow you to log in;

• show your order history and saved details;

• help you if you forget your password.

Legal basis: Performance of a contract; legitimate interests (to provide a smoother customer experience).

4.3 To provide customer service

We use your data to:

• respond to your questions and requests;

• handle complaints and product issues.

Legal basis: Performance of a contract; legitimate interests (running our business and supporting customers).

4.4 To send you our newsletter and marketing

If you consent, we use your data to:

• send you emails about new products, offers and news;

• analyse engagement (such as opens and clicks) to improve our communications.

Legal basis: Consent.

You can withdraw your consent at any time by clicking “unsubscribe” in our emails or by emailing sales@as-pigments.co.uk.

Even if you unsubscribe, we may keep a record of your email address on a suppression list to make sure we do not send you marketing again.

4.5 To improve our Site and business

We use technical and analytics data to:

• understand how visitors use our Site;

• fix problems and improve usability;

• test new features and designs;

• keep the Site safe and secure.

Legal basis: Legitimate interests (understanding and improving our services) and, where required for analytics/marketing cookies, consent (see section 10).

4.6 To comply with legal obligations and enforce our rights

We may use your data to:

• keep records required by law;

• manage and defend legal claims;

• prevent fraud, abuse or misuse of our Site;

• enforce our terms and conditions.

Legal basis: Legal obligation; legitimate interests (protecting our business and enforcing our rights).

5. Marketing

We do not send you email marketing unless:

• you have actively subscribed to our newsletter, or

• you are an existing customer and the law allows us to send you limited marketing about similar products.

You can opt out of marketing at any time:

• by clicking the “unsubscribe” link in any marketing email; or

• by emailing us at sales@as-pigments.co.uk.

Opting out of marketing does not affect service emails (for example, order confirmations, shipping updates, important information about your account).

6. Who we share your data with

We share personal data only when necessary.

6.1 Service providers

We use trusted third parties to help us run our business, including:

• Website and hosting providers – for example, platforms that host our Site and provide ecommerce functions.

• Payment providers – to process your payments securely.

• Delivery and logistics partners – to deliver your orders.

• Email and marketing tools – to send newsletters and other communications.

• IT, security and analytics providers – to help keep our Site secure and functioning properly.

• Professional advisers – such as accountants, auditors, legal advisers.

These providers may only process your personal data in line with our instructions and must keep it secure.

6.2 Other recipients

We may also share data:

• where required by law or by a public authority;

• where needed to establish, exercise or defend legal claims;

• in connection with a business transaction (such as sale or restructuring of the business), under appropriate confidentiality protections.

We do not sell your personal data.

7. International transfers

Some of our service providers may be located outside the UK or may store data on servers outside the UK.

Where we transfer your personal data outside the UK, we will ensure that an adequate level of protection is provided, for example by:

• using countries that the UK has recognised as providing adequate protection; or

• putting in place appropriate safeguards (such as Standard Contractual Clauses) with the recipient.

If you would like more information about international transfers, you can contact us at sales@as-pigments.co.uk.

8. How long we keep your data

We keep personal data only for as long as it is reasonably necessary for the purposes explained in this Policy and to meet our legal obligations.

Typical retention periods include:

• Order and invoicing data: generally up to 6 years from the end of the financial year in which the transaction took place (for tax and accounting purposes).

• Account data: for as long as your account is active and for a reasonable period afterwards if needed for our legitimate interests.

• Customer service communications: for as long as needed to handle your query and for a reasonable period afterwards.

• Marketing data: until you withdraw your consent or opt out, plus a short period to implement your request and maintain a suppression list.

• Technical and analytics data: usually for shorter periods, in line with the lifetime of the cookies and our internal policies.

We may keep data for longer where necessary to establish, exercise or defend legal claims.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, use, disclosure, alteration or destruction. These include, for example:

• using reputable hosting and ecommerce providers with security features and HTTPS;

• limiting access to personal data to staff and service providers who need it;

• using passwords and access controls;

• monitoring our systems for vulnerabilities.

No system can be guaranteed 100% secure. If we become aware of a personal data breach that may pose a high risk to your rights and freedoms, we will inform you and, where required, the relevant data protection authority.

10. Cookies and similar technologies

10.1 What are cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, to remember your preferences and to provide information to website owners. Similar technologies include web beacons, pixels and local storage.

10.2 Who sets cookies on this Site?

Cookies on our Site may be set by:

• First-party cookies – set directly by our Site.

• Third-party cookies – set by third parties such as analytics providers or social media platforms (if used or embedded).

10.3 Types of cookies we use

We may use the following categories of cookies:

1. Strictly necessary cookies
   These are required for the Site to function (for example, to enable the shopping cart, login, security and fraud prevention). These cookies do not require your consent, but we inform you about them.

2. Performance / analytics cookies
   These help us understand how visitors use our Site so we can improve it (for example, which pages are visited most often). These usually require your consent.

3. Functionality cookies
   These remember your choices (such as language or preferences) to provide a better experience. Some may require consent, depending on how they are used.

4. Advertising / marketing cookies
   These are used to measure campaigns or show personalised ads. These always require your consent.

10.4 Cookie details

The specific cookies used on our Site may change from time to time as we improve or update our services.

You can find more information about the cookies currently in use (including their names, purposes and duration) in:

• our cookie banner / consent management tool on the Site; and/or

• the settings section linked from that banner.

10.5 Managing cookies

You can:

• accept or reject non-essential cookies using the options in our cookie banner (where available);

• change your browser settings to block or delete cookies;

• delete cookies that are already stored on your device.

If you block or delete certain cookies, some features of the Site (for example the shopping cart, checkout, login or media display) may not work properly.

10.6 Third-party sites and social media

Our Site may include links to third-party sites and social media platforms (such as Instagram or Facebook). When you click these links or use sharing buttons, the relevant third parties may place cookies on your device and collect data according to their own privacy and cookie policies. We do not control these third-party cookies.

We recommend that you check the privacy and cookie policies of those platforms for more information.

11. Your rights

Under data protection law, you have the following rights (subject to certain conditions and exceptions):

• Right of access – to obtain a copy of your personal data and information about how we process it.

• Right to rectification – to have inaccurate or incomplete data corrected.

• Right to erasure – in certain cases, to ask us to delete your personal data.

• Right to restrict processing – in certain circumstances, to ask us to limit how we use your data.

• Right to data portability – in some cases, to receive your data in a structured, commonly used format and to transmit it to another controller.

• Right to object – to certain processing based on legitimate interests, and at any time to direct marketing.

• Right to withdraw consent – where we rely on consent (for example, for marketing or non-essential cookies), you can withdraw it at any time.

To exercise any of these rights, please contact us at sales@as-pigments.co.uk. We may need to verify your identity before responding.

You also have the right to lodge a complaint with your local data protection authority. If you are based in the UK, this is the Information Commissioner’s Office (ICO) (ico.org.uk).

We would appreciate the chance to deal with your concerns before you contact an authority, so please contact us first if possible.

12. Children

Our Site and products are not intended for children and we do not knowingly collect personal data relating to anyone under 18.

If you believe a child has provided us with personal data, please contact us at sales@as-pigments.co.uk and we will take appropriate steps.

13. Changes to this Policy

We may update this Privacy & Cookie Policy from time to time, for example if we change how we use personal data or cookies, or if the law changes.

When we update it, we will:

• post the new version on this page; and

• update the “Last updated” date at the top.

We encourage you to check this page regularly to stay informed about how we use your data and cookies.