Home / Privacy Policy

Legal

Privacy Policy

Last updated: September 2026

1. Introduction

The SkinWish respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, place an order, contact us, request personalised skincare advice, subscribe to marketing communications or otherwise interact with The SkinWish.

It also explains your rights under applicable UK data protection law.

2. Who We Are

The SkinWish is operated by:

Tetiana Tonkonoh, a sole trader trading as The SkinWish

Business address:
43 Leven Walk, Livingston, EH54 5AL, Scotland

Email:
info@theskinwish.co.uk

For the purposes of applicable UK data protection law, Tetiana Tonkonoh, trading as The SkinWish, is the controller responsible for the personal information described in this Privacy Policy.

3. Personal Information We Collect

Depending on how you interact with The SkinWish, we may collect the following categories of personal information.

Identity and Contact Information

This may include your name, billing address, delivery address, email address and telephone number.

Order and Transaction Information

This may include products purchased, order numbers, order values, discounts, delivery methods, payment status, returns, refunds and order history.

Payment Information

Payments may be processed by third-party payment service providers.

The SkinWish may receive payment status, transaction identifiers and limited payment-related information necessary to administer your order, prevent fraud or process a refund.

We do not necessarily receive or store full payment-card details.

Delivery Information

This may include your delivery address, delivery instructions, tracking information, delivery status and information relating to delivery problems or claims.

Account Information

Where account functionality is available, this may include information associated with your customer account with The SkinWish.

Communications

This may include customer service enquiries, complaints, returns or refund requests, correspondence and information you provide when communicating with The SkinWish.

Skincare Consultation Information

If you request personalised skincare advice, we may collect information reasonably relevant to your request.

This may include your skin type, skincare concerns, current skincare routine, products you use, product preferences, sensitivities, allergies, previous reactions, relevant skin conditions and other information you choose to provide.

Where relevant to your enquiry and where you choose to disclose it, this may also include information concerning medication or treatment.

Some consultation information may reveal information about your health and may therefore constitute special category personal data under UK data protection law.

Marketing Information

This may include your marketing subscriptions, preferences, consents, opt-outs and relevant interactions with marketing communications.

Website and Device Information

Depending on the technologies used on our website and your choices, this may include IP address, browser and device information, website activity, referring information, cookie identifiers and similar online identifiers.

Fraud and Security Information

We may collect information reasonably necessary to investigate or prevent fraud, misuse, security incidents, payment disputes or abuse of our services.

If you request personalised skincare advice from The SkinWish, we may ask you to provide information that is reasonably relevant to understanding your skincare needs and providing appropriate cosmetic product advice.

This may include information about:

your skin type;
your skincare concerns;
products you currently use;
sensitivities or allergies;
previous reactions to skincare products;
relevant skin conditions;
medication or treatment where you choose to disclose it and it is relevant to your enquiry; and
other information you choose to provide in connection with your request.

Some information you provide may reveal information about your health and may therefore constitute special category personal data under UK data protection law.

Why We Use This Information

We use consultation information to respond to your request and provide personalised skincare and product-selection advice.

For ordinary personal information required to respond to a skincare-advice request, the applicable lawful basis will depend on the circumstances and may include taking steps at your request in connection with a service you have asked us to provide or our legitimate interests in responding to customer enquiries and providing our services, where those interests are not overridden by your rights.

Where information constitutes special category health data, The SkinWish must also have an additional condition permitting that processing under applicable data protection law.

Where we rely on explicit consent for special category health information, we will ask for that consent separately and clearly before processing the information for the relevant purpose.

You do not have to provide health-related information that is not relevant to your request.

However, where particular information is reasonably necessary for us to provide appropriate personalised skincare advice, we may be unable to provide that advice if you choose not to provide it.

Health-related information provided for a skincare consultation will be used only for purposes compatible with the reason for which it was collected and in accordance with applicable data protection law.

We will not use information about your skin condition, allergies, medication, medical treatment or other health-related information to create advertising audiences or target you with advertising solely on the basis of that health information.

We will not sell health-related consultation information.

Where we rely on your explicit consent to process special category personal data, you may withdraw that consent at any time by contacting The SkinWish.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

If information is still required for another lawful purpose, such as dealing with an existing legal claim or complying with a legal obligation, we may retain or process relevant information to the extent permitted by law.

Consultation Records

We will not retain identifiable consultation information for longer than reasonably necessary for the purpose for which it was collected and any applicable legal, complaint-handling or dispute-resolution requirements.

Where consultation information is no longer required, it will be deleted, anonymised or otherwise securely disposed of as appropriate.

Advice for Someone Under 18

Our personalised skincare advice service is intended for customers aged 18 and over.

Where advice is requested for a person under 18, we ask that the request is made by their parent or legal guardian.

Where personal information about a person under 18 is provided to us, we will take particular care to use only information reasonably necessary for the relevant purpose and to handle it in accordance with applicable data protection requirements.

5. How We Collect Personal Information

We may collect personal information:

directly from you when you place an order;
when you contact The SkinWish;
when you request personalised skincare advice;
when you request a return or refund;
when you subscribe to marketing communications;
when you use or interact with our website;
automatically through cookies or similar technologies where applicable and permitted; and
from service providers involved in payments, delivery, fraud prevention, website operation or other services connected with your interaction with The SkinWish.

6. How and Why We Use Personal Information

We only process personal information where we have an appropriate lawful basis under applicable data protection law.

Depending on the circumstances, we may use personal information to:

process and fulfil your order;
process or confirm payment;
arrange and manage delivery;
communicate with you about an order;
process cancellations, returns and refunds;
respond to customer-service enquiries and complaints;
provide personalised skincare advice that you request;
administer promotions;
prevent, identify or investigate fraud or abuse;
protect our website, customers and business;
operate and improve our website and services;
comply with legal, accounting, tax, consumer-protection and product-safety obligations;
establish, exercise or defend legal claims where necessary; and
send marketing communications where permitted by law.

Depending on the purpose and circumstances, our lawful basis may include:

Contract — where processing is necessary to perform a contract with you or take steps at your request before entering into a contract.

Legal obligation — where processing is necessary for us to comply with a legal obligation.

Legitimate interests — where processing is necessary for our legitimate business interests or those of another person and those interests are not overridden by your rights and interests.

Examples may include appropriate fraud prevention, website security, responding to customer enquiries and improving our services.

Consent — where we ask you to make a genuine choice and you give consent for a specific processing purpose.

Where we process special category personal data, such as certain health-related information provided during a skincare consultation, we will also identify an appropriate additional condition under applicable data protection law.

Where we rely on explicit consent for that special category processing, the consent will be sought separately and clearly.

7. Marketing Communications

We may send you information about The SkinWish products, launches, offers or promotions where permitted by law.

Where consent is required, we will ask for it.

In circumstances where applicable law permits marketing to existing customers without separate marketing consent, we may rely on the applicable rules, including providing a clear opportunity to opt out.

You may unsubscribe from marketing communications at any time using the unsubscribe mechanism provided or by contacting The SkinWish.

Opting out of marketing does not prevent us from sending necessary service communications relating to your order, payment, delivery, return, refund or a skincare-advice request you have made.

Health-related information provided during a skincare consultation will not be used to target you with advertising solely on the basis of that health information.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies for essential website operation and, depending on the technologies implemented and your choices, functionality, analytics or advertising.

Where consent is legally required, relevant non-essential technologies will only be used in accordance with the choices you make.

For further information, please see our Cookie Policy.

Where reasonably necessary for the purposes described in this Privacy Policy, we may share personal information with trusted third parties including:

payment providers;
Royal Mail and other delivery providers used by The SkinWish;
website, hosting and technology providers;
customer communications providers;
marketing providers;
analytics and advertising providers, where applicable and legally permitted;
professional advisers;
insurers where relevant;
fraud-prevention or security providers; and
regulators, law-enforcement bodies, courts or other authorities where required or permitted by law.

We do not sell your personal information.

Where a third party processes information on our behalf, we will use appropriate arrangements required by applicable data protection law.

Some third parties may act as independent controllers for particular processing activities, in which case their own privacy information may also apply.

We do not provide health-related consultation information to advertising platforms for the purpose of targeting advertising solely on the basis of that health information.

10. Service Providers

The SkinWish may use third-party service providers to help operate our website and business.

These may provide services such as website hosting, ecommerce functionality, payment processing, delivery, email communications, customer support, analytics, marketing, security or fraud prevention.

Service providers acting on our behalf should only process personal information in accordance with appropriate instructions and data protection requirements.

The particular providers used by The SkinWish may change as our business and website develop.

11. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where personal information for which The SkinWish is responsible is transferred internationally, we will use an appropriate transfer mechanism required by UK data protection law.

Depending on the circumstances, this may include applicable adequacy regulations, approved contractual safeguards or other lawful transfer mechanisms together with additional measures where required.

12. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may differ depending on the type of information and why we hold it.

When deciding how long information should be retained, we may consider:

the purpose for which the information was collected;
whether an order or customer-service matter remains active;
legal, accounting or tax requirements;
consumer-protection obligations;
potential disputes or legal claims;
fraud-prevention requirements;
product-safety matters; and
the nature and sensitivity of the information.

Identifiable skincare-consultation information, particularly information relating to health, will not be retained for longer than reasonably necessary for the relevant consultation purpose and any applicable complaint-handling, legal or dispute-resolution requirements.

Where personal information is no longer required, it will be deleted, anonymised or otherwise securely disposed of as appropriate.

13. Security

We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised disclosure or access.

Access to personal information should be limited to persons and service providers who reasonably require it for legitimate purposes.

No online service can be guaranteed to be completely secure.

14. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of information in certain circumstances;
request restriction of processing;
object to certain processing;
receive certain information in a portable format where applicable;
withdraw consent where processing relies on consent; and
object to direct marketing.

These rights are not absolute and may be subject to legal conditions or exemptions.

You will not normally be charged for exercising your rights.

We may request information reasonably necessary to verify your identity before responding to a request.

To exercise a data protection right, contact:

info@theskinwish.co.uk

Where The SkinWish relies on consent to process personal information, you may withdraw that consent at any time.

This includes explicit consent where we rely on it to process health-related special category personal data provided in connection with personalised skincare advice.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

If you withdraw consent, we will stop the relevant consent-based processing unless another lawful basis permits or requires continued processing.

Withdrawing marketing consent does not affect necessary communications concerning orders or other services you have requested.

16. Complaints About Personal Information

If you have concerns about how The SkinWish handles your personal information, please contact us so that we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority responsible for data protection.

Information about data protection rights and complaints is available from the ICO.

17. Third-Party Websites

Our website may contain links to websites operated by skincare brands, payment providers or other third parties.

The SkinWish does not control those websites.

This Privacy Policy does not govern how those third parties process personal information, and you should review their privacy information where appropriate.

18. Children's Privacy

Our website and products are not specifically directed at children.

However, we recognise that people under 18 may access websites offering skincare products.

Our personalised skincare advice service is intended for customers aged 18 and over.

Where skincare advice is requested in relation to someone under 18, we ask that the request is made by their parent or legal guardian.

Where we process personal information concerning a person under 18, we will take particular care to limit processing to information reasonably necessary for the relevant purpose and to apply appropriate protections required by applicable data protection law.

We do not knowingly use children's health-related information for targeted advertising.

We do not knowingly target children with marketing in circumstances where doing so would be unlawful.

If we become aware that personal information relating to a child has been collected or used inappropriately, we will take appropriate steps in accordance with applicable law.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our website, services, business practices, service providers or legal obligations.

The current version will be published on our website with the date it was last updated.

Where required, we will provide additional notice of material changes.

20. Contact Us

For questions about this Privacy Policy, our use of personal information or your data protection rights, contact:

Tetiana Tonkonoh
trading as The SkinWish