Privacy Policy
Last updated: 29 July 2026
Beauty by Larana ("we", "us") is the data controller for the personal data collected through beautybylarana.com. This policy explains what we collect, why, and what rights you have under the UK GDPR and the Data Protection Act 2018.
1. What we collect
When you order: your name, delivery and billing address, email address, phone number and order details.
When you browse: your IP address, browser type, operating system and pages visited, collected automatically through cookies and analytics.
When you contact us: the content of your message and any details you choose to share.
We do not store your card details. Payments are handled by Shopify Payments and our other payment providers.
2. Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Process and deliver your order, handle returns and refunds | Performance of a contract |
| Send order and delivery updates | Performance of a contract |
| Send marketing emails or SMS | Your consent |
| Prevent fraud and secure the site | Legitimate interests |
| Analytics and improving the store | Consent (via cookie banner) |
| Meet accounting and tax obligations | Legal obligation |
Marketing: we only send marketing emails or texts if you've opted in. You can withdraw consent at any time — use the unsubscribe link in any email, reply STOP to any text, or email us. We send no more than four marketing texts a month.
3. Who we share it with
- Shopify Inc. — our e-commerce platform and hosting provider
- Payment providers — Shopify Payments, PayPal, Klarna, Clearpay
- Delivery partners and our fulfilment supplier — to ship your order
- Email and review platforms — to send updates and collect feedback
We never sell your personal data. We may disclose it where required by law, or to enforce our Terms and Conditions.
4. International transfers
Some of our providers are based outside the UK, including in the United States, Canada and China. Where we transfer your data outside the UK, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with an assessment of the safeguards in place.
5. How long we keep it
Order and transaction records: 6 years, as required by UK tax law.
Marketing contacts: until you withdraw consent, or after 3 years of inactivity.
Website analytics: 26 months.
6. Your rights
Under the UK GDPR you have the right to:
- access a copy of the data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to how we use it
- receive your data in a portable format
- withdraw consent at any time
- object to direct marketing at any time
To exercise any of these, email help@beautybylarana.com. We'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
7. Security
We use SSL encryption across the site and follow PCI-DSS standards for payment processing. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your data against loss, misuse and unauthorised access.
8. Cookies
We use essential cookies to run the site (your basket, your session, checkout security) and, with your consent, analytics and advertising cookies. You can accept, reject or change your preferences at any time through the cookie banner or in your browser settings. Rejecting non-essential cookies won't stop you shopping with us.
9. Age
This site is intended for customers aged 18 or over. We do not knowingly collect data from children.
10. Changes
We may update this policy from time to time. Any changes take effect once published on this page, and we'll update the date at the top.
If our business is sold or merged, your data may be transferred to the new owner so your orders can continue to be fulfilled.