Privacy policy

Last updated: 26 May 2026

ELLIE YOUNG is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how Ellie Young Beauty Ltd ("ELLIE YOUNG", "we", "us" or "our") collects, uses, stores and shares your personal information when you visit or use ellieyoungbeauty.com, place an order, contact us, or otherwise interact with our services.

For the purposes of applicable UK data protection law, Ellie Young Beauty Ltd is the data controller responsible for your personal information.

Contact details

Ellie Young Beauty Ltd
Email: contact@ellieyoungbeauty.com

If you have any questions about this Privacy Policy or how we process your personal information, please contact us using the details above.

1. Personal Information We Collect

The information we collect depends on how you interact with our website and services.

Information you provide directly to us

This may include:

  • Full name

  • Billing and delivery address

  • Email address

  • Telephone number

  • Account login details, if you create an account

  • Order and transaction information

  • Products purchased, returned or exchanged

  • Information you provide when contacting customer service

  • Information you provide when submitting reviews or other content

  • Marketing preferences

  • Any other information you voluntarily provide to us

Payment information

Payments made through our website may be processed by third-party payment providers.

Depending on the payment method you choose, we may receive information such as payment confirmation, transaction reference, payment status and limited payment details.

We generally do not receive or store your full payment card number where payment processing is handled directly by the relevant payment provider.

Information collected automatically

When you visit our website, certain information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Approximate location derived from IP address

  • Pages visited

  • Products viewed

  • Search and browsing activity

  • Referring website

  • Date and time of visits

  • Information about how you interact with our website

This information may be collected through cookies and similar technologies.

2. How We Collect Your Information

We may collect personal information:

  • Directly from you when you place an order, create an account or contact us

  • Automatically when you browse or use our website

  • Through cookies and similar technologies

  • From payment providers and other service providers involved in providing our services

  • From delivery, fulfilment and logistics providers

  • From advertising, analytics and marketing partners, where permitted by applicable law

  • From social media platforms or other third parties when you interact with our content or services

Where we receive personal information from another source, we will use it only as permitted by applicable law.

3. How We Use Your Personal Information

We use personal information for the following purposes:

Processing and fulfilling orders

We use your information to:

  • Process and confirm your orders

  • Process payments

  • Arrange delivery

  • Provide tracking information

  • Manage returns, refunds and exchanges

  • Provide customer support

  • Maintain records of transactions

  • Communicate with you about your orders

Providing and improving our website

We may use information to:

  • Operate and maintain our website

  • Personalise your shopping experience

  • Remember your preferences

  • Improve our products, services and website

  • Understand how customers use our website

  • Develop new products and services

  • Analyse website performance

Marketing and advertising

Where permitted by law and, where required, with your consent, we may use your information to:

  • Send promotional emails or other marketing communications

  • Provide information about new products, collections and promotions

  • Show relevant advertising on our website or third-party platforms

  • Measure the effectiveness of our advertising

  • Understand customer interests and interactions with our marketing

You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our marketing emails or by contacting us.

Fraud prevention and security

We may process information to:

  • Detect and prevent fraud

  • Verify transactions

  • Protect our customers and business

  • Investigate suspicious or unlawful activity

  • Maintain the security of our website and systems

Legal and regulatory purposes

We may process personal information where necessary to:

  • Comply with applicable laws and regulations

  • Respond to lawful requests from authorities

  • Establish, exercise or defend legal claims

  • Enforce our terms and policies

  • Protect our legal rights, property and users

4. Our Lawful Bases for Processing

Where UK data protection law applies, we rely on one or more of the following lawful bases:

Performance of a contract

We process information where it is necessary to fulfil your order or provide services you have requested.

For example:

  • Processing and delivering your order

  • Processing payments

  • Managing returns and refunds

  • Providing customer support relating to your purchase

Legal obligation

We may process information where necessary to comply with legal or regulatory obligations.

For example:

  • Maintaining accounting and transaction records

  • Responding to lawful requests

  • Meeting tax, accounting or consumer protection requirements

Legitimate interests

We may process personal information where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and interests.

Our legitimate interests may include:

  • Operating and improving our business

  • Improving our website and customer experience

  • Preventing fraud and misuse

  • Maintaining website and information security

  • Understanding product and website performance

  • Managing customer relationships

  • Protecting our legal rights

Consent

Where required by law, we will rely on your consent.

This may include certain:

  • Marketing communications

  • Non-essential cookies

  • Analytics technologies

  • Advertising and behavioural tracking technologies

Where processing is based on consent, you may withdraw your consent at any time.

5. Who We Share Your Personal Information With

We may share personal information with trusted third parties where necessary to provide our services or operate our business.

These may include:

Shopify

Our website is powered by Shopify. Shopify provides website hosting, ecommerce infrastructure and related services and may process personal information in connection with these services.

You can learn more about Shopify's privacy practices through Shopify's Privacy Policy.

Payment providers

We may share information with payment service providers to process transactions, prevent fraud and provide payment services.

Fulfilment and logistics providers

We may share relevant information with fulfilment centres, warehouses, postal services, courier companies and other logistics providers so that your order can be processed and delivered.

Because we serve customers internationally, the fulfilment or logistics provider used for your order may vary depending on product availability, destination and operational requirements.

Technology and service providers

We may share information with service providers that assist us with:

  • Website hosting and technology

  • Cloud storage

  • Customer support

  • Analytics

  • Marketing

  • Advertising

  • Fraud prevention

  • IT and security services

Business and professional advisers

Where necessary, we may share information with professional advisers such as lawyers, accountants, auditors, insurers or other professional service providers.

Legal and regulatory authorities

We may disclose information where required by law or where necessary to protect our rights, customers, business or others.

We do not sell your personal information in exchange for money.

6. International Data Transfers

ELLIE YOUNG serves customers internationally and uses service providers that may operate in countries outside the United Kingdom or European Economic Area.

As a result, your personal information may be transferred to, stored in or processed in countries outside the country where you live.

Where applicable data protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism, such as:

  • An applicable adequacy decision;

  • The UK International Data Transfer Agreement (IDTA);

  • The UK Addendum to the EU Standard Contractual Clauses; or

  • Another lawful transfer mechanism recognised under applicable data protection law.

Where required, we will also implement appropriate safeguards to protect personal information during international transfers.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, remember preferences, understand website usage and, where permitted, support advertising and marketing activities.

Strictly necessary cookies

Some cookies are necessary for the website to function properly.

For example, they may be used to:

  • Keep items in your shopping cart

  • Maintain your session

  • Process checkout

  • Remember essential preferences

  • Protect website security

These cookies may be used without consent where they are strictly necessary for a service you have requested.

Analytics and advertising cookies

We may also use analytics, advertising and similar technologies to understand how visitors use our website and to measure or personalise advertising.

Where required by law, we will ask for your consent before using non-essential cookies or similar technologies.

You can manage your cookie preferences through our cookie consent tools or your browser settings.

Please note that disabling certain cookies may affect the functionality of our website.

8. Marketing Communications

If you have subscribed to receive marketing communications, we may send you information about:

  • New products

  • Product launches

  • Promotions

  • Special offers

  • Collections

  • Brand news

You can unsubscribe at any time by clicking the unsubscribe link in our marketing communications or by contacting us.

We may continue to send essential service communications, such as order confirmations, delivery updates, refund notifications and other transactional messages, even if you have opted out of marketing communications.

9. Customer Reviews and User-Generated Content

If you choose to submit a review, photograph, video or other content to us, we may process the information contained in that submission.

Depending on how the content is submitted and the permissions associated with it, this may include your name, username, review, photograph, video or other content.

Please do not submit personal information belonging to another person unless you have permission to do so.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time we retain information depends on factors including:

  • The purpose for which the information was collected

  • Whether we need the information to provide our services

  • Legal, accounting and tax requirements

  • The need to resolve disputes

  • The need to establish or defend legal claims

  • Security and fraud-prevention requirements

When personal information is no longer required, we will securely delete it or anonymise it where appropriate.

11. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have rights including:

  • Right of access — to request a copy of personal information we hold about you.

  • Right to rectification — to ask us to correct inaccurate or incomplete information.

  • Right to erasure — to request deletion of your personal information in certain circumstances.

  • Right to restriction — to ask us to restrict certain processing.

  • Right to object — to object to certain processing, including processing based on legitimate interests and certain direct marketing.

  • Right to data portability — to request certain personal information in a structured, commonly used and machine-readable format.

  • Right to withdraw consent — where we rely on consent as our lawful basis.

  • Rights relating to automated decision-making and profiling — where applicable under law.

These rights are not absolute and may be subject to legal exceptions.

For example, we may need to retain certain information to comply with legal obligations or establish, exercise or defend legal claims.

12. How to Exercise Your Rights

To exercise your privacy rights, please contact:

contact@ellieyoungbeauty.com

Please include enough information for us to understand your request.

We may need to verify your identity before processing certain requests in order to protect your personal information.

We will respond to your request within the timeframe required by applicable law.

13. Children's Privacy

Our website and services are not directed at children.

We do not knowingly collect personal information from children where prohibited by applicable law.

If you believe that a child has provided personal information to us, please contact us and we will consider appropriate steps to remove the information where required.

14. Third-Party Websites

Our website may contain links to third-party websites, social media platforms or other online services.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policies of any third-party websites you visit.

15. Data Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

If you believe your personal information has been compromised, please contact us immediately.

16. Complaints

If you have concerns about how we use your personal information, please contact us first:

contact@ellieyoungbeauty.com

You also have the right to complain to the relevant data protection supervisory authority.

If you are in the UK, you can contact the Information Commissioner's Office (ICO):

Information Commissioner's Office
Website: https://ico.org.uk/

You may also contact the relevant data protection authority in your country if you are located outside the UK.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our business practices

  • Our website and services

  • Technology

  • Applicable laws and regulations

  • The way we process personal information

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

Where required by law, we will provide additional notice of significant changes.

18. Contact Us

If you have any questions about this Privacy Policy or how we handle personal information, please contact us:

Ellie Young Beauty Ltd
Email: contact@ellieyoungbeauty.com
Registered office: [INSERT YOUR REGISTERED OFFICE ADDRESS]

For the purposes of applicable data protection law, Ellie Young Beauty Ltd is the data controller of your personal information.