We (Cosmetics à la Carte Ltd (UK registered company 01112024)) are committed to protecting your privacy.
What information do we collect?
We collect information from you when you register for an account on our site, fill out a questionnaire, order goods or fill out a contact or feedback form.
If you visit our site without signing in, then we cannot associate that activity with you personally, but as is normal our web servers record details of which pages have been requested from which internet ("IP") addresses. We also use "cookies" to associate your current "session" with information our end.
How do we use this information?
If you register on our site, we use the information you choose to provide to point you towards appropriate products. We ask you many questions when you register but keep the mandatory ones to a minimum. If you choose to answer the optional ones, we can generally provide a better service to you - for example, if you indicate your age we can recommend products more suited to the type of skin you are likely to have.
How do we keep your information safe?
We implement a number of measures to keep your information secure. We do not store your credit card numbers on our site - card details are processed by one or more of Sagepay, Paypal and Lloyds Cardnet, all level 1 PCI DSS payment service providers. We also do not store your passwords in cleartext - this means that in the unlikely event our systems were compromised it would virtually impossible for your password to be reconstructed and then tried out on other sites (thought we recommend you do not use the same password with us as elsewhere).
Who else sees your information?
We have never, and never will, share your information with any third party who would use them for marketing purposes or for any business other than that of Cosmetics A La Carte. We will never sell your data. Apart from our staff, we use a small number of trusted third parties to handle our data, such as our website hosting company and email service provider. In all of these cases, the third parties are ones we trust to keep our information private. We would also release information about individual’s information stored on our computers if we were compelled to by law.
Cookies are small fragments of text stored in your browser that allow websites to follow you as you move from page to page through their site. This site uses two types of cookies: session cookies, and analytics cookies.
The session cookie (stored in 'SessionKey') is a number which is used to maintain a list of what items you have added to your shopping basket, and then if you choose to buy the goods, to be able to associate you with an email address when you sign in. Buying items on the web is virtually impossible without the use of session cookies. The session cookie is only associated with you personally if you choose to register for an account, fill in a contact form where you give your email address for a reply, or sign in to buy goods.
We use Google Analytics ("GA") to track site usage which involves the 6 cookies '_ga', '__utma', '__utmb', '__utmc', '__utmz' and '_utmv'. Analytics cookies are not associated with you specifically but are used to work out how our site is used, which pages are popular and which are not. You can read Google's own statement about their cookie use here. The GA cookies store non-personally identifiable information.
The display of the pop-in to request your email is governed by the cookie 'email_collector'. If you have requested that it not be shown, your response will be stored in this cookie on your device and the pop-in suppressed on further visits from the same device.
We use Kissmetrics to track marketing campaign effectiveness which involves the 3 cookies 'km_ai', 'km_lv', 'km_uq'. Kissmetrics uses standard first-party cookies to generate a random identity assigned to visitors to our site. This identity by itself does nothing. You can read Kissmetrics’ own statement about their cookie use and opt-out here. [https://www.kissmetrics.com/user-privacy/]
If you don't want any cookies from our site on your computer, you will need to close the window in which you are viewing this site, and then remove the cookies by following the correct instructions for your browser.
Who can you speak to at Cosmetics à la Carte about this policy?
Questions, comments and the exercise of your rights regarding this notice and your information are welcomed and should be addressed to the Data Protection Team by email at firstname.lastname@example.org or by post at Cosmetics à la Carte Limited, 102 Avro House, Havelock Terrace, London SW8 4AS.
Who is the supervisory authority and how can you contact them?
The Information Commissioner’s Office (“ICO”) is the supervisory authority in the UK responsible for the implementation and enforcement data protection law. You have the right to complain to the ICO about our collection and use of your data.
You can contact the ICO via the ICO website - https://ico.org.uk/concerns/ - or by calling their helpline – 0303 123 1113.
Revised: 22nd May 2018