Privacy Policy for IndiB Skincare
Effective Date: March 2025
IndiB Skincare ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information about you when you visit our website at www.indibskincare.com ("Site"), use our services, or purchase products. By using our Site and services, you consent to the practices outlined in this Privacy Policy.
This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (UK), ensuring that your data is handled securely and in line with your rights.
1. Information We Collect
We collect the following types of information to provide and improve our services to you:
1.1. Personal Identification Information
When you visit our Site, purchase products, or sign up for our newsletter, we may collect personal information, including but not limited to:

• Name

• Email address

• Postal address

• Phone number

• Payment information (e.g., credit card details)

• Date of birth (if necessary to verify age)

1.2. Technical Information
We automatically collect certain technical data when you visit our Site, such as:

• IP address

• Browser type

• Device type and operating system

• Referring/exit pages

• Date and time of visit

• Clickstream data

1.3. Cookies
We use cookies to improve your experience on our Site. Cookies are small text files stored on your device that help us remember your preferences, analyze Site traffic, and personalize your visit. You can control cookie settings in your browser. For more details, please refer to our Cookie Policy.
2. How We Use Your Information
We use the information we collect for the following purposes:

• To Process Orders: We use your personal information, including payment details, to process your orders, deliver products, and provide customer service.

• To Communicate with You: We may contact you regarding your orders, promotions, product recommendations, or updates related to our products and services.

• To Improve Our Site and Services: We analyze technical data to improve the functionality and user experience of our Site.

• To Comply with Legal Obligations: We may use your data to comply with applicable laws, such as fraud prevention, taxation, and accounting.

• To Customize Your Experience: We use cookies and similar technologies to personalize content and advertisements based on your browsing history and preferences.

3. Legal Basis for Processing Your Personal Data
Under the GDPR, we are required to have a legal basis for processing your personal data. Our legal bases include:

• Consent: You have consented to us processing your data, such as when you subscribe to our newsletter or opt-in for marketing emails.

• Contractual Necessity: We process personal data to fulfill our contract with you, such as completing your purchase and delivering products.

• Legitimate Interests: We may process your personal data based on our legitimate interests, such as improving our services or marketing our products to you.

• Legal Obligation: We may process personal data to comply with a legal obligation, such as maintaining records for tax purposes.

4. Sharing Your Information
We may share your personal information with the following parties under specific circumstances:

• Service Providers: We may share your data with trusted third-party service providers who assist us in operating our business, such as payment processors, shipping companies, and email marketing platforms.

• Legal Authorities: We may disclose your information if required by law, such as to comply with a court order or regulatory request.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction.

We ensure that any third parties we share your data with have appropriate data protection measures in place.
5. Security of Your Information
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, alteration, or destruction. These measures include encryption, secure payment gateways, and access controls.
However, no method of data transmission or storage can be guaranteed to be 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
6. Your Rights Under Data Protection Laws
As a data subject, you have the following rights under the GDPR:

• Right to Access: You have the right to request a copy of the personal data we hold about you.

• Right to Rectification: You can request that we correct any inaccuracies in your personal data.

• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data, subject to certain conditions.

• Right to Restriction of Processing: You can ask us to limit how we process your data under certain circumstances.

• Right to Object: You can object to our processing of your personal data in certain situations, such as for direct marketing.

• Right to Data Portability: You have the right to receive your personal data in a commonly used format and transmit it to another data controller.

• Right to Withdraw Consent: If we process your data based on your consent, you can withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us using the details provided below. We will respond to your request within the timeframes required by law.
7. Retention of Data
We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements.
If you wish to request that we remove your data from our records, please contact us, and we will take appropriate action.
8. International Transfers of Data
We do not transfer your personal data outside the UK or European Economic Area (EEA) unless necessary to fulfill your order or provide services, and we will ensure that any such transfer complies with the data protection laws. Where applicable, we will use appropriate safeguards such as standard contractual clauses to protect your data.
9. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please read their privacy policies before providing any personal data.
10. Children’s Privacy
Our products and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected personal data from a child under 16, we will take steps to delete such data.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or other factors. Any changes will be posted on this page, and the “Effective Date” will be updated accordingly.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
IndiB Skincare
Last updated: March 2025