Privacy policy

Customer-facing privacy notice for CuratedGlow website, orders and customer service
Last updated: 10 June 2026

This Privacy Policy explains how CuratedGlow collects, uses, shares and protects personal information when customers visit our website, place an order, contact us, join our rewards programme, sign up to marketing or otherwise interact with us. It is intended to support transparency under the UK GDPR, the Data Protection Act 2018, the EU GDPR where applicable, and other applicable privacy laws where relevant.

1. Who is responsible for your information

CuratedGlow Ltd is the data controller for personal information collected through the CuratedGlow website and customer service channels, unless stated otherwise.

  • Website: curatedglowbeauty.com
  • Customer service and privacy contact: customerservices@curatedglowbeauty.com
  • Registered office: 297 Fishguard Way, London, United Kingdom, E16 2RY
  • Company number: 16616138

2. Information we collect

Depending on how you interact with us, we may collect:

  • Identity and contact details, such as name, email address, delivery address, billing address and phone number.
  • Order and transaction details, such as products purchased, order number, delivery status, returns/refunds, offers used and customer service history.
  • Account, rewards and referral information, such as account details, reward status, Glow Points, referral codes and preferences.
  • Marketing preferences, such as consent to receive emails, SMS or other updates, and whether you unsubscribe.
  • Technical and website information, such as IP address, device type, browser, pages viewed, cookies, cart activity and website performance data.
  • Customer support content, such as messages, photos or evidence sent to us for order, delivery, return, damage, complaint or product-safety review.
  • Health-related product safety information only where you choose to report an irritation, reaction or other health-related concern.

3. How we use your information

We use personal information to:

  • process and deliver orders;
  • take payment and prevent fraud;
  • manage customer accounts, rewards, referrals and promotions;
  • respond to customer service, returns, refunds, delivery and product enquiries;
  • handle health-related product safety reports where necessary;
  • send marketing communications where you have consented or where otherwise allowed by law;
  • improve our website, products, customer journey and security;
  • comply with legal, tax, accounting, consumer protection, product safety and regulatory obligations.

4. Lawful basis for processing

Where UK GDPR or EU GDPR applies, we rely on one or more lawful bases depending on the purpose:

  • Contract: to process orders, payments, delivery, returns and customer accounts.
  • Legal obligation: for tax/accounting records, consumer rights, product safety and regulatory obligations.
  • Legitimate interests: to operate our business, improve our services, prevent fraud, manage customer service, protect our rights and keep records.
  • Consent: for optional marketing, some cookies and any processing where consent is required.

5. Shopify, payments and checkout

Our website may be hosted and supported by Shopify and other third-party service providers. Shopify and payment providers may process personal information needed to provide checkout, payment, fraud prevention, order management, analytics and related services.

CuratedGlow does not intentionally store full payment card numbers on its own systems. Payment information is handled through secure third-party checkout/payment services, including Shopify-supported services where used. Shopify-powered stores are PCI compliant by default. Customers should also read the privacy information presented by Shopify, Shop Pay or any payment provider used at checkout.

6. Who we share information with

We may share personal information with trusted third parties where necessary, including:

  • e-commerce platform providers, including Shopify;
  • payment processors and fraud-prevention providers;
  • delivery/courier partners;
  • email, CRM, rewards, referral, customer service, returns, fulfilment and marketing service providers;
  • website analytics, cookie and advertising partners, subject to consent where required;
  • professional advisers, insurers, accountants, legal advisers, IT/cloud/security providers and platform/channel providers where relevant;
  • product safety, responsible person, regulatory advisers, manufacturers or authorities where needed for safety, compliance or legal reasons.

We do not sell customer personal information as a standalone business activity. If advertising or analytics cookies are used, those tools may involve sharing information for targeted advertising where applicable law treats that as sharing. Customers can manage cookie and marketing preferences where available.

7. International transfers

Some service providers may process information outside the UK or European Economic Area. Where this happens, we take steps designed to ensure appropriate protection, such as relying on adequacy decisions, standard contractual clauses or other lawful safeguards where required.

8. How long we keep information

We do not keep personal information forever. We keep personal information only for as long as needed for the purpose collected, including legal, tax, accounting, consumer protection, dispute, product safety, regulatory, insurance and business-record reasons. Where a specific law or business reason no longer applies, we will delete, anonymise or securely archive the data where appropriate. Typical retention periods may include:

  • order, payment and accounting records: normally up to 6 years after the relevant tax/accounting period;
  • customer service, returns and complaint records: normally up to 6 years where needed for dispute or legal protection;
  • marketing data: until you unsubscribe or withdraw consent, plus a suppression record to respect your choice;
  • health-related product safety reports: for as long as required or reasonably necessary for cosmetic safety, regulatory, insurance and legal reasons;
  • website/cookie data: according to the cookie type and provider settings.

9. Security

We use reasonable organisational and technical measures to protect personal information. These may include Shopify-supported secure checkout, access controls, password protection, data minimisation and supplier controls. No website, email or online service is completely risk-free, but we aim to use reputable platforms and reasonable safeguards.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, request portability of your personal information and withdraw consent where we rely on consent. You may also have the right to complain to a supervisory authority, such as the UK Information Commissioner's Office for UK matters.

To exercise privacy rights, contact customerservices@curatedglowbeauty.com. We may need to verify your identity before responding.

11. Marketing

We will only send marketing communications where we have a lawful basis to do so. You can unsubscribe using the link in our marketing emails or by contacting us. Service messages about orders, deliveries, refunds, safety or account administration are not marketing and may still be sent where necessary.

12. Cookies and similar technologies

Our website may use cookies and similar technologies to operate the website, remember cart/account activity, measure website performance, support analytics and provide marketing/advertising features. Where required, we will ask for consent before using non-essential cookies.

13. Children

Our website and products are not intended for children under 16. We do not knowingly collect personal information from children under 16 without appropriate consent. If you are under 18, you should use our website and buy products only with the permission or involvement of a parent or guardian. If you believe a child has provided personal information to us, please contact us.

14. California and other US privacy rights

CuratedGlow is UK-first and EU-focused at launch. If we later actively sell to the United States or if US privacy laws apply, eligible US residents may have additional privacy rights, including rights to know, access, correct, delete and opt out of certain sale/sharing of personal information. We will update this policy before any full US launch or where required by law.

15. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be posted on our website with the updated date.

16. Contact

For privacy questions or requests, contact: customerservices@curatedglowbeauty.com