Privacy Policy

Effective Date: 2 August 2026

1. Introduction

Sage & Bloom Skincare respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal data when you:

  • visit our website;
  • create an account;
  • place an order;
  • contact us;
  • subscribe to marketing communications;
  • interact with our services.

This policy applies to customers in the United Kingdom and European Union and has been prepared in accordance with:

  • UK General Data Protection Regulation (UK GDPR);
  • Data Protection Act 2018;
  • EU General Data Protection Regulation (EU GDPR), where applicable.

Please read this policy carefully to understand how we handle your information.


2. Who We Are

The organisation responsible for your personal data is:

Sage & Bloom Skincare

Website:

sageandbloomskincare.co.uk

Email:

care@sageandbloomskincare.co.uk

For data protection purposes, Sage & Bloom Skincare is the Data Controller responsible for deciding how and why your personal information is processed.


3. Information We Collect

We may collect the following categories of personal information.

3.1 Information You Provide Directly

When you place an order, create an account or contact us, we may collect:

  • full name;
  • billing address;
  • delivery address;
  • email address;
  • telephone number;
  • order details;
  • payment confirmation information;
  • customer service communications.

3.2 Transaction Information

When you purchase products from us, we may collect:

  • products purchased;
  • order dates;
  • order value;
  • delivery details;
  • refund and return information;
  • payment status.

We do not store complete payment card details.

Payment information is processed securely by authorised third-party payment providers.


3.3 Technical Information

When you visit our website, we may automatically collect:

  • IP address;
  • browser type;
  • device information;
  • operating system;
  • pages visited;
  • website activity;
  • referring website;
  • cookie identifiers.

This information helps us improve website performance, security and user experience.


3.4 Information About Skin or Product Preferences

Where voluntarily provided, customers may provide information relating to:

  • skin type;
  • hair type;
  • product preferences;
  • beauty routines;
  • ingredient preferences.

This information is optional.

We do not require health information to purchase products.

Any information relating to skin conditions, allergies or medical concerns should be considered carefully before sharing, as health data may receive additional protection under data protection laws.


4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Processing Orders

We use your information to:

  • process purchases;
  • manufacture and fulfil made-to-order products;
  • arrange delivery;
  • provide order updates;
  • process refunds and returns.

Legal basis:
Performance of a contract.


4.2 Customer Support

We use your information to:

  • respond to enquiries;
  • resolve complaints;
  • investigate damaged or faulty products;
  • provide assistance.

Legal basis:
Legitimate interests and contractual obligations.


4.3 Website Operation

We use technical information to:

  • maintain website security;
  • prevent fraud;
  • improve website functionality;
  • analyse website performance.

Legal basis:
Legitimate interests.


4.4 Marketing Communications

Where you provide consent, we may use your information to send:

  • product updates;
  • promotions;
  • newsletters;
  • offers;
  • brand communications.

You can withdraw marketing consent at any time.

Each marketing email will include an unsubscribe option.

Legal basis:
Consent.


5. Dropshipping and Fulfilment Partners

As part of our business model, some products may be manufactured, prepared or shipped by trusted third-party fulfilment partners.

Where required to complete your order, we may share information including:

  • name;
  • delivery address;
  • contact details;
  • order information.

Our fulfilment partners are required to:

  • process information only for authorised purposes;
  • protect personal information;
  • comply with applicable data protection laws.

We only share the minimum information necessary to complete your order.


6. Payment Providers

Payments are processed through secure third-party payment providers.

These providers may process:

  • payment details;
  • transaction information;
  • fraud prevention information.

We do not store full payment card details.

Payment providers process your information according to their own privacy policies.


7. Delivery Providers

To deliver your orders, we may share information with courier and logistics providers.

Information shared may include:

  • name;
  • address;
  • telephone number;
  • delivery instructions;
  • tracking information.

This allows your order to be delivered successfully.


8. International Data Transfers

Some service providers used by Sage & Bloom Skincare may operate outside the United Kingdom or European Economic Area.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

  • adequacy decisions;
  • approved contractual protections;
  • appropriate security measures.

We take reasonable steps to ensure your information remains protected.


9. How We Protect Your Information

We use appropriate technical and organisational measures including:

  • secure website connections;
  • access controls;
  • secure payment processing;
  • restricted access to customer information;
  • monitoring and security measures.

While we take reasonable precautions, no internet transmission can be guaranteed to be completely secure.


10. How Long We Keep Your Information

We retain personal information only for as long as necessary.

Retention periods depend on:

  • legal requirements;
  • accounting obligations;
  • warranty obligations;
  • customer support requirements;
  • legitimate business purposes.

Examples:

Order information
Retained for accounting and legal compliance purposes.

Customer communications
Retained as necessary to manage enquiries.

Marketing information
Retained until consent is withdrawn.


11. Your Data Protection Rights

Depending on your location, you may have rights including:

Right of Access

You can request a copy of the personal information we hold about you.


Right to Rectification

You can request correction of inaccurate information.


Right to Erasure

You may request deletion of your personal information where there is no lawful reason for us to continue processing it.


Right to Restrict Processing

You may request that we limit how your information is used.


Right to Object

You may object to processing based on legitimate interests or direct marketing.


Right to Data Portability

Where applicable, you may request your information in a structured, commonly used format.


Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.


12. Exercising Your Rights

To exercise any of your rights, please contact:

Email:

care@sageandbloomskincare.co.uk

We may need to verify your identity before completing your request.

We aim to respond within the timescales required by applicable data protection laws.


13. Cookies

We use cookies and similar technologies to:

  • operate our website;
  • remember preferences;
  • analyse website traffic;
  • improve customer experience;
  • provide relevant marketing.

Further information is available in our Cookie Policy.


14. Marketing Preferences

You can manage your marketing preferences by:

  • clicking the unsubscribe link in emails;
  • contacting us directly;
  • updating account preferences where available.

Unsubscribing from marketing does not affect transactional communications relating to orders.


15. Children's Privacy

Our website and products are intended for adults and individuals who are legally permitted to purchase cosmetic products.

We do not knowingly collect personal information from children without appropriate consent.

If you believe a child has provided personal information to us, please contact us.


16. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of external websites.

We recommend reviewing the privacy policies of any third-party websites you visit.


17. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Any changes will be published on this page with an updated effective date.

We recommend reviewing this policy occasionally to remain informed about how we protect your information.


18. Complaints

If you are unhappy with how we process your personal information, please contact us first:

Email:

care@sageandbloomskincare.co.uk

You also have the right to lodge a complaint with the relevant data protection authority.

United Kingdom

The supervisory authority is:

Information Commissioner's Office (ICO)

Website:

https://ico.org.uk

European Union

EU residents may contact their relevant national Data Protection Authority.


19. Contact Us

For questions about this Privacy Policy or how we handle your personal data:

Sage & Bloom Skincare

Email:

care@sageandbloomskincare.co.uk

Website:

sageandbloomskincare.co.uk