Effective date: 2nd October 2026

1. Who we are

This notice explains how Whites Beaconsfield Limited ("Whites", "we", "us") collects and uses personal information when you visit whitesbeaconsfield.co.uk, buy from us, subscribe, contact us or otherwise deal with us.

Whites Beaconsfield Limited is the controller of your personal information. We are a company registered in England and Wales (company number 09313438) with our registered office at 11 Penn Road, Beaconsfield, England, HP9 2PN. We are registered with the Information Commissioner's Office (ICO) under registration number ZB743500.

For customers in the European Economic Area, our representative under Article 27 of the EU GDPR is [EU representative name and address, email].

You can contact us about anything in this notice at support@whitesbeaconsfield.co.uk or by post at the address above. We are not required to appoint a Data Protection Officer.

2. The short version

• We use your details to process and deliver your orders and subscriptions, provide customer support, prevent fraud and meet our legal obligations.
• We only send marketing emails and texts if you have agreed, or, for email only, if you have bought from us and did not opt out. You can unsubscribe at any time.
• Non-essential cookies and tracking pixels are only used if you accept them in our cookie banner.
• We never sell your personal information. We do not see or store your full card details.
• You have rights over your information, including to access, correct or delete it, and to complain to the ICO.

3. Information we collect

4. How we use your information and our lawful basis

Data protection law requires us to have a lawful basis for each use of your information. These are the bases we rely on:

Where we rely on legitimate interests, we have balanced our interests against yours. You can ask us for more detail and you have the right to object (see section 14).

5. Marketing emails and texts

Email. We send marketing emails about our products, offers and news if you have signed up, or if you have bought (or started to buy) from us and did not opt out when we collected your email address. This is known as the "soft opt-in" and only covers our own similar products.

Text messages (SMS). We only send marketing texts if you have specifically opted in to SMS, for example by ticking the SMS box at checkout or signing up through a form or keyword, or if you have bought (or started to buy) from us and did not opt out when we collected your mobile number. Message frequency varies. Standard network rates may apply.

Basket and checkout reminders. If you add items to your basket or start checking out and do not complete your order, we may send you a reminder by email or text. We only send these if you have agreed to receive marketing from us by that channel or, for email, the soft opt-in applies. These reminders use information collected by cookies and similar technologies where you have accepted them.

Opting out. You can unsubscribe at any time using the link in any email, by replying STOP to any text, through your account, or by emailing support@whitesbeaconsfield.co.uk. You also have an absolute right to object to direct marketing. We act on opt-outs promptly, normally within 48 hours. We keep a record of your email address or phone number on a suppression list so that we do not contact you again.

Opting out of marketing does not stop service messages about your orders, subscription or account.

We never share your information with other companies for their own marketing.

6. Personalised advertising

We work with advertising platforms including Meta (Facebook and Instagram), Google, TikTok and Microsoft (Bing) to show you relevant adverts and to measure how well our adverts work. This involves:

• Pixels and tags on our website that tell these platforms which pages you visit and what you buy. These only run if you accept marketing cookies in our cookie banner. Where we also share this information with the platforms directly from our servers, we only do so if you have accepted marketing cookies.

• Customer audiences. We may upload a scrambled (hashed) version of your email address or phone number so that the platform can show you, or people with similar interests, our adverts. We only do this for customers who have agreed to receive marketing from us. You can object at any time by emailing us, and we will remove you from future uploads.

For the pixel data collected on our website, we and the relevant platform may act as joint controllers. Each platform's own privacy policy explains how it uses your information. You can also manage advertising settings directly with each platform.

We run affiliate and creator programmes through Webgains and UpPromote. If you accept marketing cookies and arrive at our website from a partner's link, a cookie records that referral so the partner can be paid commission.

7. Cookies

We use cookies and similar technologies. Strictly necessary cookies are always active because the website cannot work without them. All other cookies, including analytics and marketing cookies, are only set if you accept them in our cookie banner. You can change your choice at any time using the "Cookie settings" link in the website footer. Full details are in our Cookie Policy.

8. Who we share your information with

We share personal information only where needed for the purposes above. Most recipients are service providers (processors) who act on our instructions under a contract that requires them to keep your information secure and use it only for our purposes.

9. Buying through marketplaces and retailers

If you buy our products through Amazon, TikTok Shop, OnBuy, Boots, Superdrug or another retailer, that retailer is the controller of your purchase information and its own privacy policy applies. We only receive the information needed to fulfil your order or handle a product query.

10. International transfers

Some of our providers, including Shopify, Klaviyo, Recharge, Gorgias, Loox, Triple Whale, UpPromote, Microsoft, Google, Meta and TikTok, process information outside the UK and European Economic Area, mainly in the United States and Canada. Some outsourced customer service agents working through Onepilot may be located in other countries. Where this happens we make sure your information is protected by one of the following:

• a decision by the UK Government or European Commission that the country provides adequate protection (for example Canada, or the UK-US Data Bridge and EU-US Data Privacy Framework for certified US companies); or
• approved contractual protections, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

You can ask us for more information about the safeguards we use.

11. How long we keep your information

When we no longer need information, we securely delete it or anonymise it so it can no longer identify you.

12. Health information

Information about your health is "special category" data. We do not ask for it, but you may choose to tell us, for example when reporting sensitivity or a reaction to a product. We use it only to deal with your query, with your explicit consent, and, where required, to meet our legal obligations to record and report serious undesirable effects of cosmetic products for reasons of public health. Access is restricted to the staff who need it.

13. Automated decisions

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our ecommerce and payment providers use automated fraud checks, such as temporarily blocking an IP address or card linked to repeated failed payments for a few hours or days. If you think an order has been wrongly blocked, contact us and a person will review it.

We group customers into segments, for example by products bought, to make our marketing more relevant. This does not have a significant effect on you, and you can object to it.

14. Your rights

You have the following rights over your personal information:

• Access: to get a copy of the information we hold about you.
• Rectification: to have inaccurate or incomplete information corrected.
• Erasure:to have your information deleted in certain circumstances. We may need to keep some records, such as order and tax records, for legal reasons.
• Restriction: to ask us to limit how we use your information in certain circumstances.
• Portability: to receive information you gave us in a machine-readable format, or have it sent to another organisation.
• Objection:to object to us using your information based on legitimate interests, and an absolute right to object to direct marketing.
• Withdraw consent: where we rely on consent, at any time. This does not affect what we did before.
• Automated decisions: to ask for human review of, and contest, a significant decision made solely by automated means.

To use any of these rights, email support@whitesbeaconsfield.co.uk. There is normally no charge. We may need to confirm your identity. We will respond within one month, or within three months for complex or multiple requests, in which case we will tell you why. When responding to access requests we carry out reasonable and proportionate searches.

15. Complaints

If you are unhappy with how we have handled your information, please contact us first at support@whitesbeaconsfield.co.uk with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days and respond without undue delay.

You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). If you live in the European Economic Area, you can complain to the data protection authority in your country.

16. Children

Our website and products are intended for adults aged 16 and over. We do not knowingly collect information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.

17. Keeping your information secure

We use appropriate technical and organisational measures to protect your information, including encrypted connections, access controls and contracts with our providers that require them to do the same. If a data breach is likely to put you at high risk, we will tell you without undue delay.

18. Business contacts, creators and affiliates

If you work with us as a retailer, supplier, creator, affiliate or other business contact, we use your name, contact details, payment details where relevant, and records of our dealings to manage our relationship and contracts with you, under our contract with you or our legitimate interests in running our business. Section 14 rights apply to you too.

19. Changes to this notice

We review this notice regularly. If we make significant changes, we will tell you by email or on our website before they take effect. The effective date at the top shows when it was last updated.

20. Contact us

Whites Beaconsfield Limited, 11 Penn Road, Beaconsfield, England, HP9 2PN.

Email: support@whitesbeaconsfield.co.uk

 

PART B

Cookie Policy

Effective date: 2nd October 2026

This policy explains how Whites Beaconsfield Limited uses cookies and similar technologies (such as pixels, tags and local storage) on whitesbeaconsfield.co.uk. Please read it alongside our Privacy Notice.

Your choices

When you first visit our website, our cookie banner lets you accept or reject non-essential cookies, or choose by category. Rejecting is as easy as accepting. Non-essential cookies are not set until you make a choice. You can change your choice at any time using the "Cookie settings" link in the website footer. You can also block or delete cookies in your browser settings, though some parts of the website may then not work.

Categories we use

Some of the items below are stored in your browser's local storage rather than as cookies. They work in a similar way and are covered by this policy.

Cookies on our website

Information shared from our servers

Some advertising platforms also receive information about purchases directly from our systems rather than through your browser (sometimes called a conversions API). We only send this information about visitors who have accepted marketing cookies.

Contact

Questions about cookies: support@whitesbeaconsfield.co.uk.