Privacy Policy
Last updated: November 2026
Last updated: November 2026
Privacy Policy Last updated: 9 October 2026
For the purposes of applicable data-protection law, Alfie Gilhooley is the controller of personal information collected and used in operating this business.
Business address: 45 Pleasant Street Widnes WA8 0WQ England, United Kingdom
Contact email: Biancarosa.co.designteam@gmail.com
Contact information: your name, email address, telephone number, billing address and delivery address. Order information: products purchased, amounts paid, delivery details, payment status, returns and purchase history. Account information: information needed to create and manage your customer account. Communications: enquiries, complaints, product requests and information you choose to send us. Preferences: marketing choices and answers you voluntarily provide through our skincare questionnaire. Technical and usage information: device and browser information, identifiers, pages visited and shopping interactions, subject to applicable consent requirements. Payment providers process your payment-card information. We do not receive or store your full card number or card security code.
We collect information directly from you and may receive payment confirmations, delivery updates and relevant transaction information from payment and fulfilment providers.
Purpose Legal basis Process purchases, take payment, deliver products and manage cancellations or returns Performance of our contract with you Create and maintain an account you request Performance of our contract with you Answer pre-purchase questions Taking steps at your request before entering a contract Handle general enquiries, complaints and product suggestions Our legitimate interests in responding to customers and managing our business, or performance of a contract where applicable Prevent fraud, protect the store and investigate misuse Our legitimate interests in protecting customers and our business, and legal obligations where applicable Maintain records required by tax and other legislation Compliance with legal obligations Send promotional communications Consent, or legitimate interests where applicable electronic-marketing rules permit this Measure website use through optional analytics Consent Establish, exercise or defend legal claims Our legitimate interests in protecting our legal rights Where we rely on legitimate interests, we consider the impact on your rights and reasonable expectations.
Please do not send medical records or detailed health information through general enquiry or product-request forms.
Some information about skin conditions may constitute health information and receive additional legal protection. Where we ask to process such information, we must explain the purpose and establish an appropriate additional legal basis, such as your explicit consent, before processing it.
Consent to receive marketing is separate from any consent to process sensitive information.
Where we rely on the existing-customer marketing exception, we will only do so where its legal conditions are met, including giving you an opportunity to opt out when details are collected and in each subsequent message.
You can unsubscribe using the option in a marketing message or by contacting us.
Unsubscribing does not stop essential messages about your orders, payments, deliveries or account security.
Amboras: our ecommerce platform provider. Payment providers, including Stripe: to process payments and help prevent fraud. Selfnamed: our product supply and fulfilment partner, where necessary to fulfil your purchase. Delivery companies: to deliver orders and provide tracking. Email, hosting and customer-support providers: to operate communications and store services. Professional advisers: where necessary for accounting, legal advice or business administration. Authorities: where disclosure is required by law. Providers receive information relevant to their role. Some act on our instructions; others, including certain payment providers, may act as independent controllers for their own legal and operational purposes.
We do not sell your personal information.
Where a transfer is restricted under applicable data-protection law, an appropriate transfer mechanism is required. This may include a recognised adequacy arrangement or approved contractual safeguards, together with additional measures where necessary.
Contact us for details of the destinations and safeguards relevant to your information and how to obtain a copy of applicable safeguards.
We determine retention by considering:
Whether an order, enquiry, return or complaint remains unresolved. Whether information is needed to maintain an account you use. Applicable tax, accounting and other recordkeeping requirements. Relevant legal limitation periods and any ongoing dispute. The sensitivity of the information and whether it can be deleted or anonymised. Marketing information is retained while we have a lawful basis to use it. If you unsubscribe, we may retain a minimal suppression record to avoid contacting you again.
Deleting an account does not necessarily require deletion of transaction records we must lawfully retain.
Access your personal information. Correct inaccurate or incomplete information. Request deletion. Restrict processing. Object to processing based on legitimate interests. Receive certain information in a portable format. Withdraw consent where processing relies on consent. You can object to direct marketing at any time.
Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Contact us to exercise your rights. We may request reasonable information to verify your identity. Requests are normally answered within one month, subject to applicable legal exceptions and extensions.
You may also complain to the Information Commissioner’s Office, the UK data-protection regulator. Where applicable, you may complain to your local supervisory authority.
You do not have to contact us before exercising that right.
Optional questionnaire answers and marketing choices are not required to buy products.
For privacy enquiries, contact Biancarosa.co.designteam@gmail.com.