Introduction
GLYÀURA operates this store and website, including all related information, content, features, tools, products and services (the “Services”). The Services are powered by Shopify. This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to personal information.
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. Please also review our Terms of Service for additional important information.
Personal Information We Collect or Process
“Personal information” means information that identifies, relates to, or could reasonably be linked to you. It does not include anonymised or de‑identified data. We may collect or process the following categories:
- Contact details: name, billing/shipping address, phone number, email address.
- Financial information: payment card details, financial account numbers, payment confirmations.
- Account information: username, password, preferences, settings.
- Transaction information: items viewed, added to cart, purchased, returned, exchanged or cancelled; purchase history.
- Communications: information you include when contacting us.
- Device information: browser, IP address, network, device identifiers.
- Usage information: how and when you interact with the Services.
Sources of Personal Information
- Directly from you — when you place orders, create an account, or contact us.
- Automatically through the Services — via your device while browsing or using our features.
- From service providers — payment processors, fulfilment and shipping partners, analytics providers.
- From partners/third parties — where permitted by law.
How We Use Your Personal Information
- Provide, tailor, and improve the Services: process payments, fulfil orders, manage accounts, ship products, support returns/exchanges, remember preferences, recommend products.
- Marketing & promotions: we send marketing emails or postal promotions only if you have explicitly opted in (UK PECR compliant). You can withdraw consent at any time.
- Security & fraud prevention: verify identity, detect and prevent fraud, protect our Services and customers.
- Customer communications: respond to inquiries, provide support, and update you about orders.
- Legal reasons: comply with law, respond to lawful requests, and enforce our terms/policies.
How We Disclose Personal Information
- Shopify — to host and operate the Services.
- Vendors/service providers — payment processing, IT, fulfilment, shipping, analytics, marketing platforms.
- Business & marketing partners — for lawful promotional activities, subject to your consent and applicable law.
- Corporate affiliates — within our group structure.
- Legal purposes — to comply with legal obligations, enforce agreements, protect rights and safety.
- Business transactions — mergers, acquisitions, asset transfers, bankruptcy.
Third-Party Services & Links
Our Services integrate with third-party providers (for example, payment processors, couriers, analytics and marketing platforms) and may include links to third-party websites. Their processing of your personal information is governed by their own privacy policies. We are not responsible for the privacy, security, or information practices of such third parties, and we encourage you to review their policies.
Relationship with Shopify
Our Services are hosted by Shopify, which processes personal information to help us deliver a seamless shopping experience. Shopify may also process data for its own purposes in accordance with its privacy policy. To learn more about how Shopify uses your personal information and any rights you may have, visit Shopify’s Consumer Privacy Policy.
Children’s Data
The Services are not intended for children under the age of majority in your jurisdiction, and we do not knowingly collect children’s personal information. If you believe a child has provided us information, please contact info@glyaura.com.
Security & Retention
We retain personal information only as long as necessary for the purposes described in this policy, including legal, accounting, and reporting obligations. Typically, this is no longer than 6 years, unless a longer period is required by law.
No Absolute Security: While we implement commercially reasonable technical and organizational safeguards, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your personal information and are not responsible for unauthorized access, disclosure, alteration, or destruction of information by third parties beyond our reasonable control.
Your Rights
Depending on where you live and subject to applicable law, you may have the following rights:
- Access/Know — request a copy of personal information we hold about you.
- Delete — request deletion of your personal information.
- Correct — request corrections to inaccurate data.
- Portability — request your data in a portable format.
- Object/Restrict — ask us to stop or restrict processing for certain purposes.
- Withdraw consent — revoke marketing consent at any time (you can still receive transactional emails).
To exercise these rights, contact info@glyaura.com. We may verify your identity before processing a request. You may appoint an authorised agent where permitted by law.
Your Responsibilities
You are responsible for ensuring that any personal information you provide to us is accurate, up-to-date, and that you have the right and authority to share it. If you submit personal information of another person, you represent that you have obtained all necessary permissions to do so.
Medical & Allergy Disclaimer
Information you provide in reviews or communications may include details about your skin type or product use. We recommend patch testing all skincare products before use. GLYÀURA accepts no liability for adverse reactions, as outlined in our Skincare Disclaimer.
Complaints
If you have concerns about our privacy practices, please contact info@glyaura.com. You may also contact the UK Information Commissioner’s Office (ICO) or your local data protection authority. In the UK, you can contact the Information Commissioner's Office via their official website.
International Transfers
Your personal information may be stored or processed outside your home country. Where we transfer personal information outside the UK or EEA, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses or the UK’s equivalent mechanisms. By providing your personal information to us, you acknowledge and consent to such transfers, processing, and storage in jurisdictions that may not offer the same level of data protection as your home country.
Limitation of Liability (Privacy)
To the fullest extent permitted by applicable law, our total aggregate liability arising out of or related to our processing of your personal information under this Privacy Policy shall not exceed the total amount you paid to us for the Services, if any, during the twelve (12) months preceding the event giving rise to the claim. Nothing in this Privacy Policy excludes or limits any liability that cannot be excluded or limited under applicable law.
Jurisdiction & Compliance Limitation
We process personal information primarily under the laws of the United Kingdom and, where applicable, the European Union. We will comply with applicable laws to the best of our ability; however, we cannot be held responsible for obligations arising solely under foreign laws outside the UK/EEA that do not apply to us.
Changes to This Policy
We may update this Privacy Policy to reflect operational, legal, or regulatory changes. Updates will be posted on this page with a revised “Last updated” date.
Contact Us
If you have questions about this Privacy Policy or your data rights, please contact:
- Email: info@glyaura.com
- Postal: Unit 3, 19 Queensway, Ponders End, Enfield, ENG, EN3 4SA, GB