Privacy Policy

Last updated: June 2026

This Privacy Policy describes how K-Beauty Shelf ("we", "us", "our") collects, uses, and shares your personal data when you visit or make a purchase from our store.

1. Data Controller

K-Beauty Shelf
1 Raven Road, London, England E18 1HA, United Kingdom
Email: hello@kbeautyshelf.com

2. Personal Data We Collect

When you visit our store or place an order, we may collect the following categories of personal data:

Identity & Contact Data: name, email address, billing and shipping address, phone number
Transaction Data: details of products purchased, payment method type (we do not store full card details), order history
Technical Data: IP address, browser type and version, time zone, cookies and similar tracking technologies
Usage Data: pages visited, products viewed, referral source
Communications Data: any messages or enquiries you send us

3. How We Use Your Personal Data

We use your personal data for the following purposes and legal bases:

Purpose	Legal Basis
Processing and fulfilling your order	Performance of a contract
Sending order confirmation and shipping updates	Performance of a contract
Fraud prevention and security	Legitimate interests
Improving our website and customer experience	Legitimate interests
Sending marketing emails (where you have consented)	Consent
Compliance with legal obligations	Legal obligation

4. Sharing Your Personal Data

We do not sell your personal data. We may share your data with the following third parties only as necessary:

Shopify Inc. — our e-commerce platform provider (data may be processed in the US; Shopify is certified under the EU-US Data Privacy Framework)
Payment processors (e.g. Stripe, PayPal) — to process your payment securely
Shipping carriers — to deliver your order
Email service providers — to send transactional and marketing emails
Analytics providers (e.g. Google Analytics) — to understand how our store is used

All third parties are required to handle your data in accordance with applicable data protection laws.

5. Cookies

We use cookies and similar technologies to operate our store, remember your preferences, and improve your experience. These include:

Essential cookies: necessary for the store to function (e.g. shopping cart, session)
Analytics cookies: help us understand how visitors use our site
Marketing cookies: used to deliver relevant advertisements (e.g. Meta Pixel)

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our store.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order data is typically retained for up to 7 years for tax and accounting purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure — request deletion of your personal data (subject to legal obligations)
Right to restrict processing — request that we limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at hello@kbeautyshelf.com. We will respond within 30 days. If you are based in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). If you are in the EU, you may contact your local data protection authority.

8. International Transfers

Your personal data may be transferred to and processed in countries outside the UK or European Economic Area (EEA), including the United States, where our service providers operate. We ensure that such transfers are subject to appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) in accordance with applicable data protection law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.