Privacy Policy

When we use the term "personal data" we mean any information about an individual from which that person can be identified. This doesn't include, for example, any information which we have anonymised.We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:Device and Usage Data includes information about how you interact with and use our Website, including your internet protocol (IP) address, device and browser type, operating system and platform, the pages you have viewed, your clicks on our Website, referring pages, and time zone setting and approximate location.

• Why we use your personal data: To use data analytics to improve our Website and understand how visitors use our Website.
• What personal data we use: Device and Usage Data
• Lawful basis of processing: We process this data: because it is necessary for our legitimate interests (to keep our Website updated and relevant, and to develop our business); on the basis of your consent where your personal data is collected via a non-essential cookie.
• Where we collect the information from: From you directly when you use our Website, including using analytical cookies or other automated technologies.
• How long we keep the information for: We delete browsing data collected via analytics every 12 months. Information regarding our usage of cookies and their duration is set out in our Cookies Policy.

We have determined, acting reasonably and considering the circumstances, that we are able to rely on legitimate interests as the lawful basis on which to process your personal information. We have reached this decision by carrying out a balancing exercise to make sure our legitimate interest does not override your privacy rights as an individual.We consider that it is reasonable for us to process your information for the purposes of our legitimate interests outlined above as: (a) we process your information only so far as is necessary for such purpose; and (b) it can be reasonably expected for us to process your information in this way.Where we process your personal information on the legal basis of consent (as indicated in the above table), you may refuse consent to our processing and you may also withdraw your consent at any time by using the cookie consent manager in our cookie notification banner. This would not affect your ability to use any features of our Website. Withdrawing consent does not affect any processing carried out without your consent.We will retain your personal data for the periods set out in the table above, however, we will only retain it for as long as necessary for the purposes set out above and, where we no longer have a need to keep your data, we may delete it earlier than the periods set out above. In some circumstances, you may have a right to ask us to delete your data at any time: please see the "Your Choices and Your Rights" section below.We like to keep your personal data to ourselves. Except as set out in this Privacy Policy, we do not disclose to, or share, your personal data with third parties. We do not use automated decision making in relation to your personal data. Please see "Who We Share Your Personal Data With" below.

We share your personal data in the following circumstances and with the following categories of third party:

‍Website platform providers. We use the Webflow platform to host and provide our Website. To do this, Webflow may collect certain technical data about your visit to our Website on our behalf. Webflow shall handle your personal information in accordance with Webflow's Privacy Policy.

‍Professional advisors. Our professional advisors, including insurance, legal, tax or other corporate advisors who provide professional services to us.

‍Law enforcement. Law enforcement and third parties engaged in fraud prevention and detection, our regulators, the courts, police and other authorised bodies for the purposes of investigating actual or suspected criminal activity or other legal or regulatory matters.

‍Government authorities. Other governmental authorities including HMRC and tax bodies or agencies to comply with our legal and regulatory duties, e.g. to report fraud or in response to a lawful request.

‍Other. If we sell any business assets, the personal data of our website visitors may be disclosed to a potential buyer. In this event, we will make reasonable attempts to ensure the buyer will be bound by the terms of this Privacy Policy.

We store data, and use service providers, based in the UK and around the world. Consequently, your personal data may be processed in countries outside of the UK or the European Economic Area (EEA), including in countries where you may have fewer legal rights in respect of your personal data than you do under UK law. Where we transfer your personal data outside the UK or the EEA, we will ensure a similar level of protection is afforded to your personal data as UK law would afford it by ensuring that at least one of the following safeguards is implemented: We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Secretary of State.

‍For certain service providers, we may use specific contracts which have been approved by the Information Commissioner's Office which give personal data the same protection it has in the UK. For certain service providers based in the US, as an alternative to the specific contracts mentioned above, we may also transfer data to them if they are part of the UK US Data Bridge, which requires them to provide similar protection to personal data shared between the UK and the US. Please contact us if you would like more information about these safeguard.

The protection and security of your personal data is important to us, and we have put in place appropriate policies, rules, technical and organisational measures to safeguard your personal data from accidental loss, damage or destruction and unauthorised or unlawful processing.Our Website ensures that data is encrypted when leaving the Website. This process involves the converting of information or data into a code to prevent unauthorised access. The Website follows this process and employs secure methods such as SSL to protect data when in transit to and from the Website over a secure communications channel.Whilst we do everything within our power to ensure that personal data is protected at all times from the Website, we cannot guarantee the security and integrity of the information that has been transmitted to the Website, nor the internet at large.

Our Website uses cookies and other similar technologies to improve the functionality of, and your experience on, our Website, to gather data so we can analyse Website traffic and understand how you use our Website. Some of the personal data identified in the table above is collected through the use of these cookies and other similar technologies.To learn more about what cookies we use, how and why we use them, and how you can disable them, you can access our Cookie Policy

Our Website is for adults. We do not knowingly target or collect personal data from children and our services are not intended for any person under 16 years of age.

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

What are my rights?What does this mean?
‍
To be informed:
‍You have a right to be informed about the personal data that we collect, use and hold about you.

Access:
‍You have a right to access and receive copies of the personal data we hold about you.

Rectification:
‍If we hold inaccurate personal data about you, you have a right to ask us to rectify this.
‍
Erasure:
‍If you’d like us to delete personal data we hold about you, you have a right to ask us to do so. This is commonly known as the right to be forgotten, but this right will only apply where (for example): we no longer need the personal data for the purpose we originally collected it for; we are relying on the lawful basis of your consent to the collection of data, and you withdraw this consent; or you exercise your right to object (as set out below) to our processing of your personal data.

Restriction of processing:
‍You have a right to limit how we use your personal data in certain circumstances, including (for example) where: you believe that the personal data we hold about you may be inaccurate; we no longer require your personal data to achieve the purpose we collected it for, but you have asked us to retain it so you can establish, exercise or defend a legal claim; you are entitled to ask us to delete your personal data, but you’ve asked us to restrict the processing of it instead; or you’ve asked us to stop processing your personal data, and we are considering your request.

To object:
‍In certain circumstances, you have a right to object to the processing of your data, and this means that we will stop using it, unless we are able to demonstrate that, on balance, we have legitimate grounds for continuing to process your personal data which overrides your rights, or the data is needed for the establishment, exercise or defence of legal claims.

Data portability:
‍Where we are processing your personal data and we are relying on the lawful basis of consent or the performance of a contract (where this is the case, this will be set out in the table above) and we are carrying out that processing by automated means, then you have a right to data portability. This means that if you ask us to, we will provide your personal data to you in a structured, commonly used and machine-readable format and transfer your personal data to an organisation of your choice.

To withdraw consent:
‍If we are processing your data and relying on the lawful basis of your “consent” (where this is the case, this will be set out in the table above), then you are entitled to withdraw your consent at any time. You can do this using the details set out in the “Contact Us” section below.

To complain:
‍We hope that if you have any queries, comments or concerns about the way we handle your personal data, you will raise these with us in the first instance, and you can do so using the contact details contained in the “Contact Us” section below. However, if you are unhappy with the way we have responded, you have the right to complain to the Information Commissioner’s Office, the regulator for data protection in the UK. Their address is: First Contact Team, Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF. You can find more information out at: ico.org.uk/for-the-public/how-to-make-a-data-protection-complaint.

We hope that you find this Privacy Policy easy to understand, but if you have any questions, comments or concerns about this policy or how we handle your personal data, you can contact us by:

Email at investorrelations@thebeautytechgroup.com

‍Any changes to this Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. We will also post a notice on the Website landing page and on appropriate pages on the Website. Please check back frequently to see any updates or changes to this Privacy Policy.