Privacy Policy
Introduction
Specialist Beauty Designs, trading as SBD London, takes the security and privacy of your personal data seriously.
This Privacy Policy explains how we collect, use, store, share and protect your personal data when you use our website, create an account, place an order, contact us, subscribe to our marketing, or otherwise interact with SBD London.
This policy also explains your rights under UK data protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations where applicable.
We may update this Privacy Policy from time to time. Any changes will be posted on this page, so please check this policy regularly.
Who we are
SBD London is a professional beauty and nail product brand operated by Specialist Beauty Designs.
For data protection queries, you can contact us using the details below:
Email: dpr@sbdlondon.com
Post: Data Protection Team, PO BOX 604, Rotherham, S63 3GW, UK
What personal data we collect
We only collect personal data that is necessary for the purposes explained in this Privacy Policy.
The personal data we may collect includes:
- Full name
- Email address
- Billing address
- Delivery address
- Phone or mobile number
- Account login details
- Order details and purchase history
- Payment confirmation details
- Beauty certification, trade status or professional verification evidence
- Contact preferences
- Marketing preferences
- SMS, RCS and text message opt-in status
- SMS, RCS and text message consent status
- Message opt-out or unsubscribe status
- Support ticket or enquiry information
- Website usage information
- Device, browser, cookie and analytics information where applicable
We do not intentionally collect more information than we need and we will not retain your personal data for longer than necessary.
Customers and account holders
We process customer personal data to provide our products and services, manage customer accounts, process orders, verify professional or trade status where required, provide customer support, improve our website and communicate with customers.
When a customer creates an account, places an order or submits information through our website, we may use the information provided for:
- Account creation and account management
- Order processing
- Delivery of goods
- Customer service
- Trade or professional verification
- Internal reporting
- Fraud prevention
- Website functionality
- Marketing, where permitted
- Compliance with legal and regulatory obligations
For customers, we collect and hold information such as name, email address, address, phone/mobile number, order details and any relevant professional verification information.
How we collect your personal data
We may collect your personal data when you:
- Visit our website
- Create an online account
- Place an order
- Contact us directly
- Submit a support ticket
- Complete a website enquiry form
- Sign up to marketing
- Opt in to SMS, RCS or text message communications
- Update your contact preferences
- Provide professional certification or verification information
- Interact with our website, emails or digital marketing
We may also collect limited technical information through cookies and similar technologies. Please see our Cookie Policy for further information.
Why we use your personal data
We use your personal data for the following purposes:
To process and fulfil orders
We use your personal data to accept orders, process payments, arrange delivery, provide order updates and deal with returns, refunds or customer service queries.
Legal basis: Contract and legitimate interests.
To manage customer accounts
We use your data to create, maintain and manage customer accounts, including login access, order history and customer support.
Legal basis: Contract and legitimate interests.
To verify professional or trade status
As SBD London supplies professional beauty and nail products, we may request beauty certification, trade status or similar evidence where needed to verify eligibility.
Legal basis: Legitimate interests, contract and legal compliance where applicable.
To communicate with you
We may contact you about your account, order, delivery, customer service enquiry, support ticket, product updates or important service information.
Legal basis: Contract and legitimate interests.
To send marketing communications
Where you have opted in, or where we are otherwise legally permitted to do so, we may send marketing communications about SBD London products, services, offers, launches, events, surveys, industry news and similar products or services.
Legal basis: Consent or legitimate interests, depending on the communication type and applicable law.
You can unsubscribe from marketing communications at any time.
To send SMS, RCS and text message communications
Where you choose to opt in to receive SMS, RCS or other text message communications from us, we may collect and process your mobile phone number, text message opt-in status, consent status, message preferences, message history and opt-out status.
We may use this information to send you marketing messages, service messages, order updates, delivery updates, abandoned basket reminders, promotional offers, product launch information and other communications you have agreed to receive.
Legal basis: Consent for marketing SMS, RCS and text messages. Contract or legitimate interests may apply to necessary service messages relating to orders, delivery or account management.
You can opt out of receiving marketing text messages at any time by following the unsubscribe instructions included in our messages, including replying STOP where available.
Text message consent and data sharing
We will not share your text message opt-in status, SMS consent status, RCS consent status or text message consent status with any third party for purposes unrelated to providing the messaging service.
We may share this information with trusted vendors who help us deliver, manage and monitor text message, SMS and RCS communications. This may include messaging platform providers, marketing automation platforms, phone companies, network operators, carriers, delivery partners, compliance providers and other service providers involved in the operation of our messaging services.
These providers may process your mobile number, consent status, opt-in status, opt-out status, message preferences and related messaging data only where necessary to provide the messaging service, maintain compliance, deliver messages, process opt-outs, prevent misuse or support the service.
Who we share your personal data with
We do not sell your personal data.
We only share personal data where necessary for the purposes explained in this Privacy Policy.
We may share your personal data with:
- Delivery and courier companies, so they can deliver your order
- Payment processors, so your payment can be processed securely
- Website, hosting and technical service providers
- Customer support and ticketing providers
- Email marketing providers
- SMS, RCS and text message service providers
- Marketing automation platforms, including providers such as Klaviyo where applicable
- Professional advisers, such as accountants, legal advisers or insurers
- Regulators, authorities or law enforcement bodies where legally required
- Internal staff who need access to perform their role
For delivery purposes, your name, address and contact number may be shared with delivery providers so they can deliver your ordered goods.
Where we use third-party service providers, we only provide the personal data they need to perform their services. We work to ensure that service providers keep your data secure and do not use it for their own unrelated purposes.
If we stop using a service provider, any personal data held by them will either be deleted, returned to us or anonymised where appropriate.
International data transfers
Some of our service providers may process personal data outside the United Kingdom. Where this happens, we will take steps to ensure that your personal data is protected in accordance with applicable data protection laws.
This may include using approved contractual safeguards, adequacy decisions or other lawful transfer mechanisms.
Data retention
Whenever we collect or process your personal data, we will only keep it for as long as necessary for the purpose for which it was collected.
Retention periods may vary depending on the type of data and the reason we hold it. For example:
- Order and transaction records may be kept for accounting, tax and legal purposes
- Account information may be kept while your account remains active
- Marketing consent records may be kept to evidence consent and manage preferences
- SMS/RCS opt-in and opt-out records may be kept to comply with messaging and marketing rules
- Support records may be kept for customer service and complaint handling
- Verification records may be kept where needed to confirm professional or trade status
Where we no longer need personal data, we will delete it, anonymise it or securely archive it where appropriate.
Anonymised data may be used for statistical analysis, reporting and business planning in a way that does not identify you.
Data security
We recognise the importance of data security and take measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These measures include staff training, controlled access, password protection, internal procedures, digital security controls and ongoing reviews of our organisational and technical security measures.
Access to your personal data is limited to staff members and service providers who need it to perform their role. Any misuse of personal data by employees is treated seriously and may be considered a disciplinary offence.
All data breaches are recorded in a breach log where required. If a data breach is discovered, it should be reported immediately to:
Email: dbr@sbdlondon.com
Marketing preferences
We may send relevant information such as newsletters, industry news, product launches, similar products and services, invitations to events, surveys and offers in accordance with your preferences.
You can change your marketing preferences or unsubscribe at any time by:
- Using the unsubscribe link in our emails
- Replying STOP to SMS/RCS/text messages where available
- Updating your preferences where a preference centre is available
- Contacting us at dpr@sbdlondon.com
We will respect your opt-out choices and will maintain suppression records where necessary to ensure we do not continue sending marketing to people who have opted out.
Cookies and website tracking
Our website may use cookies and similar technologies to improve your browsing experience, deliver personalised content, analyse website traffic and support website functionality.
Some cookies are necessary for the website to work. Other cookies may be used for analytics, personalisation or marketing where permitted.
For more information, please see our Cookie Policy.
How you can access your data
We try to be as open as possible about the personal data we hold.
You have the right to ask whether we hold personal data about you by making a Subject Access Request.
There is no charge for making a Subject Access Request. We will usually respond within 30 days of receiving a verified request.
If we hold personal data about you, we will:
- Give you a description of the personal data
- Explain why we hold it
- Tell you who it may be disclosed to
- Provide you with a copy of the information in an intelligible form
To make a Subject Access Request, please contact us in writing:
Email: dpr@sbdlondon.com
Post: Data Protection Team, PO BOX 604, Rotherham, S63 3GW, UK
To protect the confidentiality of your information, we may ask you to verify your identity before we respond to your request.
If you have authorised a third party to submit a request on your behalf, we may ask them to prove that they have your permission to act.
Your data protection rights
Depending on the circumstances, you may have the following rights:
- The right to access your personal data
- The right to correct inaccurate or incomplete personal data
- The right to request deletion of your personal data
- The right to restrict how we process your personal data
- The right to object to processing based on legitimate interests
- The right to object to direct marketing at any time
- The right to withdraw consent where we rely on consent
- The right to request a copy of your data in a portable format
- The right to complain to the Information Commissioner’s Office
Where we process your personal data based on consent, such as certain electronic marketing communications, you can withdraw your consent at any time.
Where we process your personal data based on legitimate interests, you can object to us using your personal data in that way for reasons connected to your individual situation. We will stop unless we have a lawful reason to continue.
Where you object to direct marketing, we will stop using your personal data for direct marketing purposes.
To exercise your rights, please contact:
Email: dpr@sbdlondon.com
Post: Data Protection Team, PO BOX 604, Rotherham, S63 3GW, UK
Corrections and updates
If the personal data we hold about you is incorrect or incomplete, you can ask us to correct it.
In the first instance, you can contact us directly or raise a support ticket.
Refusing a request
In some circumstances, we may not be able to action a request. If we refuse a request, we will explain why.
If we feel your request is not covered under the definition of a Subject Access Request or another data protection right, we will still try to assist you where possible.
Complaints
If you have a concern about how we use your personal data, please contact us first so we can try to resolve the issue.
Email: dpr@sbdlondon.com
Post: Data Protection Team, PO BOX 604, Rotherham, S63 3GW, UK
You also have the right to complain to the UK Information Commissioner’s Office if you are unhappy with how we handle your personal data.
Contact us
If you have any questions about this Privacy Policy, your personal data, your marketing preferences or anything not covered in this document, please contact us:
Email: dpr@sbdlondon.com
Post: Data Protection Team, PO BOX 604, Rotherham, S63 3GW, UK