Last Updated: 30/05/25
At ALCHEMITELABS, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you visit our website alchemitelabs.com, purchase our products, or interact with us in any way.
Our Commitment to Skin-First Privacy
As an award-winning vegan skincare brand dedicated to sensitive skin and non-comedogenic formulations, we understand the importance of trust. This Privacy Policy is designed to be transparent and understandable, reflecting our commitment to putting your needs first, just as we do with your skin.
1. Information We Collect
We collect various types of information to provide you with the best possible experience and to improve our products and services. This includes:
-
Personal Information:
-
Contact Information: Name, email address, phone number, postal address, and billing address. We use this to fulfil your orders, provide customer support, and send you updates only if you opt-in to our marketing communications.
-
Account Information: Username, password (encrypted), and purchase history. This helps you manage your account and track your orders.
-
Payment Information: Credit card details, debit card details, or other payment information. Crucially, payment processing is handled by our secure, PCI DSS-compliant third-party payment processor (e.g., Shop Pay, Stripe, PayPal). We do not store your full payment card details on our servers.
-
Demographic Information: Age, gender, and preferences. This helps us personalise your experience and recommend products that are best suited for you.
-
Skin Concerns: Information you provide about your skin type, sensitivities, and concerns, allowing us to recommend appropriate products and provide tailored advice.
-
Non-Personal Information:
-
Technical Information: IP address, browser type, operating system, device information, and referring website. This helps us optimise our website for different devices and improve its performance.
-
Website Usage Information: Pages visited, products viewed, search queries, and clickstream data. We use cookies and similar technologies to collect this information and understand how you interact with our website.
2. How We Use Your Information
We use your information for the following purposes:
-
Order Fulfilment: To process your orders, ship products, and provide order updates.
-
Customer Support: To respond to your inquiries, resolve issues, and provide technical assistance.
-
Personalisation: To personalise your website experience, recommend products, and offer tailored promotions.
-
Marketing Communications (with consent): To send you newsletters, promotional emails, and other marketing materials about our products and services. You have the right to unsubscribe at any time. See Section 6 for details.
-
Website Improvement: To analyse website usage data, identify trends, and improve the performance and functionality of our website.
-
Legal Compliance: To comply with applicable laws, regulations, and legal processes.
3. Legal Basis for Processing Your Data (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases:
-
Contractual Necessity: Processing your data is necessary to fulfil our contractual obligations to you (e.g., processing your order).
-
Legitimate Interests: We process your data based on our legitimate interests in providing you with a high-quality service, improving our products and services, and marketing our products to you (with your consent where required).
-
Consent: We rely on your consent to send you marketing communications and use certain cookies. You have the right to withdraw your consent at any time.
-
Legal Obligation: We may need to process your data to comply with a legal obligation (e.g., responding to a court order).
4. Data Sharing and Disclosure
We may share your information with the following third parties:
-
Service Providers: We share your information with trusted service providers who assist us with various functions, such as payment processing (Shop Pay), shipping (Evri & DPD), email marketing (Zoho Email EU), and website hosting. These providers are contractually obligated to protect your information and only use it for the purposes we specify.
-
Analytics Providers: We use analytics providers (e.g., Google Analytics) to track website usage and analyse trends.
-
Legal Authorities: We may disclose your information to legal authorities if required by law or legal process.
-
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring company. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
-
Carefully Selected Partners: We may share your data with carefully selected partners to offer specific products or services that we believe may be of interest to you. We will only do this with your explicit consent.
5. Cookies and Similar Technologies
We use cookies and similar technologies to collect website usage information and personalise your experience. Cookies are small text files that are stored on your device when you visit our website. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a longer period).
-
Types of Cookies We Use:
-
Essential Cookies: These cookies are necessary for the website to function properly.
-
Performance Cookies: These cookies collect information about how you use our website, such as which pages you visit and how long you spend on each page.
-
Functional Cookies: These cookies allow us to personalise your website experience, such as remembering your language preferences.
-
Targeting Cookies: These cookies are used to deliver targeted advertising based on your interests.
You can manage your cookie preferences in your browser settings. However, disabling cookies may affect the functionality of our website.
6. Your Rights
You have the following rights regarding your personal information:
-
Right to Access: You have the right to access the personal information we hold about you.
-
Right to Rectification: You have the right to correct any inaccurate or incomplete personal information we hold about you.
-
Right to Erasure (“Right to be Forgotten”): You have the right to request that we delete your personal information.
-
Right to Restriction of Processing: You have the right to restrict the processing of your personal information in certain circumstances.
-
Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
-
Right to Object: You have the right to object to the processing of your personal information in certain circumstances, including for direct marketing purposes.
-
Right to Withdraw Consent: If we are processing your data based on your consent, you have the right to withdraw your consent at any time.
-
Right to Complain: You have the right to lodge a complaint with a supervisory authority (e.g., the Information Commissioner's Office in the UK) if you believe that we have violated your privacy rights.
To exercise any of these rights, please contact us at skincare@alchemitelabs.com
7. Data Security
We take reasonable measures to protect your personal information from unauthorised access, use, or disclosure. These measures include:
-
Encryption: We use encryption to protect sensitive information, such as payment details, during transmission.
-
Firewalls: We use firewalls to protect our servers from unauthorised access.
-
Access Controls: We restrict access to your personal information to authorised personnel only.
-
Regular Security Audits: We conduct regular security audits to identify and address potential vulnerabilities.
8. Data Retention
We will retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For example, we will retain your order history for as long as required for tax and accounting purposes.
-
Inactive Accounts: We may delete inactive accounts and associated data after a specified period of 12 months of inactivity. We may notify you before deleting your account.
9. International Data Transfers
If we transfer your personal information outside of the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your data, such as:
-
Standard Contractual Clauses: We will use standard contractual clauses approved by the European Commission.
-
Privacy Shield: We are compliant with GDPR framework for data in the United Kingdom and Ireland.
10. Children's Privacy
Our website and services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will delete the information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on our website and notify you via email if the changes are material. Please review this Privacy Policy periodically for any updates.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
ALCHEMITELABS LTD, Notting Hill London, skincare@alchemitelabs.com
