Privacy Policy

Welcome to Red Light Beauty Tech, The Beauty Tech Experts (the “Website).

This Website is provided by The Beauty Tech Group Ltd (company number 06805380) with registered office located at Glasshouse, Alderley Park, Congleton Road, Nether Alderley, Cheshire, SK10 4ZE, United Kingdom. The Beauty Tech Group Ltd is the controller and responsible for your personal data (“CurrentBody“, “we“, “us“, or “our” in this Privacy Policy).

We are committed to protecting your privacy and complying with the UK GDPR and other applicable data protection rules (including the Data Protection Act 2018 and marketing and cookie laws, together with associated guidance) (the “Data Protection Laws“).

This Privacy Policy explains how we use, store and share the information we collect about you, how you can exercise your rights in respect of that information and the procedures that we have in place to safeguard your privacy. This Privacy Policy supplements any other fair processing or privacy notice that may be provided to you from time to time. Please contact us by email at info@redlightbeautytech.com if you have any questions, comments or concerns about this Privacy Policy or how we handle your personal information, or if such information changes at any time.

For individuals based outside the UK please refer to our supplemental terms at the end of this Privacy Policy which set out the additional information about processing of your personal data and your rights, as applicable under the relevant country’s laws.

Please note: this Privacy Policy does not cover third party websites that we may link to from our Website unless specifically mentioned in this Privacy Policy. We are not responsible for the privacy policies and practices (including use of cookies) of such third parties even if you accessed the third-party website using links from our Website. We recommend that you check the policy of each website you visit and contact the owner or operator of such website if you have concerns or questions.

1. What Personal Data We Collect About You

When we use the term “personal data” we mean any information about an individual from which that person can be identified. This doesn’t include, for example, any information which we have anonymised.

We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:

  • Identity Data includes first name, last name, title.
  • Contact Data includes your email address, phone number, billing/delivery address(es), or social media handle.
  • Transaction Data includes details about the products you have purchased from us, such as order history, purchase amounts, and whether you have successfully made a payment.
  • Account Data includes username, login, password, preferences, and product wish-lists.
  • Communications Data includes the information you provide to us when you communicate and correspond with us, such as when you make an enquiry or a complaint, communicate with us using our online chat, telephone us, or provide us with feedback by completing a survey or a review.
  • Device and Usage Data includes information about how you interact with and use our Website, including your internet protocol (IP) address, your login data, device and browser type, operating system and platform, the pages you have viewed, your clicks on our Website, referring pages, and time zone setting and approximate location.
  • Marketing Data includes your preferences in receiving marketing from us and our third parties and your communication preferences, profiles that we build relating to you and information collected when you engage with our marketing messages

2. How We Use Your Personal Data

Under the Data Protection Laws, we are required to explain what information we collect from you and how and why we use your personal information (the “processing activity”). We are also required to have a “lawful basis” on which to process your personal information. This is summarised in the table below.

Processing activity: Why we use your personal data What personal data we use Lawful basis of processing Where we collect the information from How long we keep the information for
To enter into, and administer, a contract with you when you purchase products from us including to process and deliver your order, including so: (a) we can manage any payments made by you, or additional fees and charges; (b) we can collect and recover any money owed to us; or (c) we can facilitate returns of any products you have ordered. (a) Identity Data (b) Contact Data (c) Transaction Data (d) Communications Data We process this data because it is necessary for the performance of a contract with you. From you directly via our Website, or when you interact with us. We keep information regarding your orders for up to 6 years from the date your order is complete because we are legally required to do so, and so we can exercise or defend a legal claim.
To manage our relationship with you, including so: (a) you can register for, and create, a customer account on the Website; (b) we can notify you about changes to our terms or this Privacy Policy; (c) we can respond to your requests, comments, complaints, or queries; or (d) we can ask you to leave a review, take a survey or provide feedback. (a) Identity Data (b) Contact Data (c) Account Data (d) Communications Data We process this data: (a) because it is necessary for the performance of a contract with you; (b) because it is necessary for our legitimate interests to obtain data about our customers and how they use our products so we can offer the best products, and in communicating with you in accordance with your wishes and expectations and for providing good customer service. From you directly via our Website, or when you interact with us. We retain information relating to your customer account for as long as your account continues to be active, and 2 years thereafter, so we can manage our relationship with you. We may keep records relating to the terms accepted by you for 6 years following your acceptance.
To enable you to partake in a prize draw, competition or promotion which you may enter. (a) Identity Data (b) Contact Data (c) Account Data (d) Device and Usage Data (e) Communications Data We process this data: (a) because it is necessary for the performance of a contract with you when you enter into a competition; (b) because it is necessary for our legitimate interests (to study how customers use our products and services, to develop them and grow our business); (c) because it is necessary in order to comply with our legal obligations when running a competition, including compliance with the relevant UK advertising codes of practice in place from time to time; or (d) where we use your information for publicity purposes, we will do so with your consent. From you directly when you enter a competition, prize draw or promotion, or when you interact with us. We will retain data relating to, and held in connection with, the management of competitions, prize draws and promotions for 24 months. We may retain data used for publicity reasons for longer than this, for example, where it is published on our Website or social media pages. Please see Competitions, Prize-draws, and Promotions below for further information.
To market our products to you, including by: (a) delivering advertisements and other content to you, and measuring the effectiveness of this advertising; and (b) sending you newsletters and marketing emails and SMS/text messages. (a) Identity Data (b) Contact Data (c) Account Data (d) Device and Usage Data (e) Communications Data (f) Marketing Data Please see Marketing and Online Ads below for further information. We process this data: (a) in some cases subject to your consent when you tick a box or provide your details expressly to news, special offers and other promotional material; (b) in some cases, where you make a purchase with us and do not choose to opt out from receiving our emails or messages (‘soft opt in’) we will use your personal data to provide you with news, special offers and other promotional material and do so on the basis of our legitimate interests; (c) because it is necessary for our legitimate interests (to promote and grow our business and our products); and (d) on the basis of your consent, where your personal data is collected via a non-essential cookie. From you directly via our Website, or when you otherwise interact with us, or via social media platforms or other third-party advertising platforms or otherwise when you make a purchase with us. We retain data related to direct marketing for as long as we think you will be interested in receiving our marketing communications. This is usually until you opt-out of direct marketing or 24 months from the date of our last communication from you. Information regarding our usage of cookies and their duration is set out in our cookies policy.
To administer and protect our business and this Website (including troubleshooting, data analysis, testing, system maintenance, support, fraud prevention, reporting and hosting of data). (a) Identity Data (b) Contact Data (c) Account Data (d) Device and Usage Data We process this data: (a) because it is necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise); (b) because it is necessary to comply with a legal obligation; and (c) on the basis of your consent, where your personal data is collected via a non-essential cookie. Directly from you when you visit our Website, including using analytical cookies or other automated technologies. Information regarding our usage of cookies and their duration is set out in our cookies policy 
To use data analytics to improve our Website, products and services, customer relationships and experiences and to measure the effectiveness of our communications and marketing. (a) Account Data (b) Device and Usage Data We process this data: (a) because it is necessary for our legitimate interests (to define types of customers for our products and services, to keep our Website updated and relevant, to develop our business and to inform our marketing strategy); (b) on the basis of your consent where your personal data is collected via a non-essential cookie. From you directly when you use our Website, including using analytical cookies or other automated technologies. We delete browsing data collected via Google Analytics every 12 months. We may also collect information about your use of our Website for data analytics purposes using our own website platform (Shopify) and this data may be retained for up to 30 months following collection. Information regarding our usage of cookies and their duration is set out in our Cookies Policy. In respect of any data not collected via cookies, we will generally only retain this for 6 months following collection.
To allow us to provide you with enhanced, more personal features on the Website. (a) Account Data (b) Device and Usage Data We process this data: (a) because it is necessary for our legitimate interests (for improving our customer experience); (b) on the basis of your consent where your personal data is collected via a non-essential cookie. From you directly when you use our Website using functional cookies or other automated technologies. Information regarding our usage of cookies and their duration is set out in our cookies policy. In respect of any data not collected via cookies, we will generally only retain this for 6 months following collection.

We have determined, acting reasonably and considering the circumstances, that we are able to rely on legitimate interests as the lawful basis on which to process your personal information in certain circumstances (we have stated this above and set out our legitimate interests). We have reached this decision by carrying out a balancing exercise to make sure our legitimate interest does not override your privacy rights as an individual.

We consider that it is reasonable for us to process your information for the purposes of our legitimate interests outlined above as: (a) we process your information only so far as is necessary for such purpose; and (b) it can be reasonably expected for us to process your information in this way.

Where we process your personal information on the legal basis of consent (as indicated in the above table), you may refuse consent to our processing and you may also withdraw your consent at any time: (i) in respect of cookies and other tracking mechanisms on our Website, by using the cookie consent manager in our cookie notification banner, (ii) in respect of marketing communications, by clicking ‘unsubscribe’ in the footer of the relevant emails, or (iii) in respect of other matters, by using the contact details below. This would not affect your ability to use any features of our Website. Withdrawing consent does not affect any processing carried out without your consent.

We will retain your personal data for the periods set out in the table above, however, we will only retain it for as long as necessary for the purposes set out above and, where we no longer have a need to keep your data, we may delete it earlier than the periods set out above. In some circumstances, you may have a right to ask us to delete your data at any time: please see the ‘Your Choices and Your Rights’ section below.

We like to keep your personal data to ourselves. Except as set out in this Privacy Policy, we do not disclose to, or share, your personal data with third parties. We do not use automated decision making in relation to your personal data but be aware that some of our third parties (for example, Klarna) may do so; for more information, please see our third parties’ privacy policies. Please see ‘Who We Share Your Personal Data With’ below.

We will need certain of your personal data to allow us to fulfil an order you place with us. If you refuse to supply such personal data, then we will not be able to fulfil your order and will let you know that this is the case.

3. Who We Share Your Personal Data With

We share your personal data in the following circumstances and with the following categories of third party:

  • Group companies. Other companies in our group of companies for internal business purposes such as management, accounting and marketing.
  • Third party suppliers. Our third-party suppliers who process your personal data on our behalf, including: (a) our business partners and sub-contractors for business administration, support and processing services or IT purposes; (b) for advertising and marketing purposes, including (but not limited to) the third parties set out below, and agents who tailor marketing communications on our behalf and offer you products which you might be interested in, as well as analytics and search engines so we can improve your experience of our Website; (c) for e-commerce purposes, including e-commerce platform providers (please see below regarding Shopify), payment gateway and processors and suppliers of cookie-consent management solutions; and (d) our delivery and third-party logistics providers who deliver our products to you on our behalf.
  • Payment platform providers. Our payment platform providers who offer you their payment solutions to allow you to pay for products purchased via our Website.
  • Professional advisors. Our professional advisors, including insurance, legal, tax or other corporate advisors who provide professional services to us.
  • Law enforcement. Law enforcement and third parties engaged in fraud prevention and detection, our regulators, the courts, police and other authorised bodies for the purposes of investigating actual or suspected criminal activity or other legal or regulatory matters.
  • Government authorities. Other governmental authorities including HMRC and tax bodies or agencies to comply with our legal and regulatory duties, e.g. to report fraud or in response to a lawful request.
  • Other. If we sell any business assets, the personal data of our customers may be disclosed to a potential buyer. In this event, we will make reasonable attempts to ensure the buyer will be bound by the terms of this Privacy Policy.

We may also share your personal data with the third parties listed below. Some data (where collected by third party cookies) is also collected directly (or jointly with us) by such third party (as explained further below). Once data is shared with the third party, they will be responsible for ensuring your personal data is processed in compliance with Data Protection Laws, so please make sure you have read their privacy policies (linked to below) carefully.

 

 

3.1 Third party analytics providers

We use third party analytics providers to help us understand how customers use our Website, including the following:

3.5 Advertising partners & social media platforms

Social media platforms and advertising partners, who may where personal data is collected via a cookie be a joint controller with us in relation to the processing of your personal data, including:

(together the “Ad Partners“).

We want to make sure you have all the information you require to make informed decisions about how your personal data is used. So, we would like to make you aware of the following:

3.6 Meta

Where you have consented for us to do so, we will collect and share your personal data with Meta Platforms Ireland Limited (Meta Ireland) in order to advertise to you via Facebook, and Instagram, and in certain instances we are the joint controller of your personal data with Meta Ireland.

We have entered into an agreement with Meta Ireland to ensure that your information is protected, and the steps we each shall take to comply with Data Protection Laws with regard to the joint processing of your information.

To exercise your rights in relation to your information processed by Meta, Meta Ireland will be your primary contact. Please contact Meta Ireland directly to:

  • request access to your personal data;
  • request correction of your personal data;
  • request erasure of your personal data;
  • object to the processing of your personal data;
  • request restriction to the processing of your personal data; and/or
  • request the transfer of your personal data.

Further information regarding how to exercise your rights, together with the following further information, may be found in Meta Ireland’s Privacy Policy and Terms of Service, including: how Meta Ireland processes your personal data in the capacity of a joint controller, including the legal basis that Meta Ireland relies upon for such use; how to exercise your data protection rights against Meta Ireland; and the name and contact details of Meta Ireland’s data protection officer

3.7 Social Media

On our Website, we provide links to our YouTube, Instagram, Facebook, and TikTok social media business pages. We use them because it makes it easy for you to access our social media business pages.

As noted above we also use social media as some of our advertising partners. Where the data is collected via a cookie which is placed when you grant consent on our site to such cookies we may be joint controller with the relevant third party in respect of certain processing activities, which means we and they are each responsible for your personal data. We and each third party have put appropriate arrangements in place to determine our and their respective responsibilities to ensure compliance with Data Protection Laws. If you would like more information about this, please contact us using the information set out below.

More information on how we interact with social media platforms, as well as the types of personal data which may be shared and/or collected is set out in our Cookies Policy.

4. International Transfers, Storage, and Retention of Personal Data

We store data, and use service providers, based in the UK and around the world. Consequently, your personal data may be processed in countries outside of the UK or the European Economic Area (EEA), including in countries where you may have fewer legal rights in respect of your personal data than you do under UK law. Where we transfer your personal data outside the UK or the EEA, we will ensure a similar level of protection is afforded to your personal data as UK law would afford it by ensuring that at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Secretary of State. You can find out more information.
  • For certain service providers, we may use specific contracts which have been approved by the Information Commissioner’s Office which give personal data the same protection it has in the UK. You can find out more information.
  • For certain service providers based in the US, as an alternative to the specific contracts mentioned above, we may also transfer data to them if they are part of the UK US Data Bridge, which requires them to provide similar protection to personal data shared between the UK and the US. You can find out more information.

Please contact us if you would like more information about these safeguards.

Our Ad Partners may transfer personal data collected by cookies set by those Ad Partners outside the UK and/or the EEA. You can read more about such personal data in each relevant third-party’s privacy policy.

5. Marketing & Online Ads

We love to communicate with our customers and so, depending on your marketing preferences, we may use your personal data to send you marketing messages by email or text message. Some of these messages may be tailored to you, based on your previous browsing or purchase activity, and other information we hold about you.

We send marketing messages on the basis of your consent when you complete a request form online for our news, special offers or other promotional material, or where you make a purchase with us and you do not opt out (‘soft opt in’).

In addition, our Website uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart, and this information is (provided you have consented to the use of cookies and us sending you marketing messages) used to determine when to send cart reminder messages via text message and/or by email. You can read more about how we use cookies in our Cookies Policy.

Although we hope you find our marketing messages interesting and useful, if you no longer want to receive marketing communications from us (or would like to opt back in!), you can change your preferences at any time by contacting us (using the details below), clicking on the ‘unsubscribe’ link in our emails (for email marketing), or by replying STOP to our text messages (for text message marketing). If you unsubscribe from marketing, please note we will still contact you with service messages from time to time (e.g. order and delivery confirmations, and information about your legal rights), and we will retain some of your personal data to make sure we don’t send you marketing communications you don’t want to receive.

You may also see ads for our products and Website on third party websites, including on social media (including via Instagram, Facebook, and TikTok), and we may share your personal data with these social media platforms in order to deliver marketing to you. These ads may, if you have provided your consent to the use of cookies, be tailored to you using cookies (which track your web activity, so enable us to serve ads to customers who have visited our Website). Where you see an ad on social media, this may be because we have engaged the social media platform to show ads to our customers, or users who match the demographic profile of our customers. In some cases, this may involve sharing your email address or other personal data with a social media platform. If you no longer want to see tailored ads you can change your cookie and privacy settings on your browser and these third-party websites. You can also withdraw your consent to our sending you marketing at any time. We will not use your personal data for third-party marketing without separate consent. Please note that due to the nature of our IT systems, it may take a few days for any opt-out request to be implemented.

6. Competitions, Prize-draws and Promotions

We may process your information in connection with competitions, prize draws and competitions (as stated above) you may enter from time to time. Please refer to the relevant terms and conditions of such competition, prize draw and competition for further information.

Unless you ask us not to, we will make your surname and county of residence available: (a) on request to anyone who sends us a self-addressed envelope within 10 weeks of the closing date of the competition; and (b) to the Advertising Standards Authority (ASA) if they ask us. We do this because it is necessary for the purpose of our legitimate interests in complying with the ASA codes and regulations in force from time to time.

You have the right to object to our publication of your information. To do so, please contact us as soon as possible, and within a week of receiving your winner’s notification should wish you wish to object.

If we haven’t heard from you within a week, and we are asked to publish your information, we will do so. If you object later, we may have already published your information.

Where we are asked to disclose your information to the ASA, and you object before we have done so, we will consider your reasons for objecting and aim to comply with your request (where we are able to do so). However, please note that we may still be required by law or regulation to disclose your information, if for example, we are required to demonstrate that a valid award took place.

Should you win one of our competitions, prize draws or promotions, we may also write to you to request your agreement to reasonable publicity and the use of your initial, surname, county of residence and any photograph provided by you as part of that publicity on our Website and any of our social media accounts. We may also write to request your agreement to the creation of further materials based on competition entries which will be hosted on our Website. We use your information in this way on the basis of your consent. You can withdraw your consent at any time after you’ve agreed but please bear in mind that, due to the nature of social media, once your information has been made publicly available for promotional purposes, it will be public and potentially copied or otherwise further distributed beyond our control.

7. Security

The protection and security of your personal data is important to us, and we have put in place appropriate policies, rules, technical and organisational measures to safeguard your personal data from accidental loss, damage or destruction and unauthorised or unlawful processing.

Our Website ensures that data is encrypted when leaving the Website. This process involves the converting of information or data into a code to prevent unauthorised access. The Website follows this process and employs secure methods to ensure the protection of all credit and debit card transactions. Encryption methods such as SSL are utilised to protect customer data when in transit to and from the Website over a secure communications channel.

Whilst we do everything within our power to ensure that personal data is protected at all times from the Website, we cannot guarantee the security and integrity of the information that has been transmitted to the Website, nor the internet and email at large.

8. Cookies

Our Website uses cookies and other similar technologies (including pixels (web beacons) and social plug-ins) to improve the functionality of, and your experience on, our Website, to gather data so we and our partners can analyse Website traffic and understand how you use our Website, deliver advertising and marketing communications to you as well as tailored adverts, and monitor the effectiveness of these advertising and marketing materials. Some of the personal data identified in the table above is collected through the use of these cookies and other similar technologies.

To learn more about what cookies we use, how and why we use them, and how you can disable them, you can access our cookies policy.

9. Children

Our Website is for adults. We do not knowingly target or collect personal data from children and our products and services are not intended for any person under [16 years of age].

10. Automated Decision-Making

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

11. Your Choices and Your Rights

You have legal rights in relation to your personal data under Data Protection Laws, and these are set out below. You can exercise these rights by contacting us – please see the “Contact Us” section below, but please be aware that there are limitations to these rights, and there may be circumstances where we are not able to comply with your request fully or at all. Where this is the case, we will promptly let you know why.

What are my rights? What does this mean?
To be informed: You have a right to be informed about the personal data that we collect, use and hold about you.
Access: You have a right to access and receive copies of the personal data we hold about you.
Rectification: If we hold inaccurate personal data about you, you have a right to ask us to rectify this.
Erasure: If you’d like us to delete personal data we hold about you, you have a right to ask us to do so. This is commonly known as the right to be forgotten, but this right will only apply where (for example): we no longer need the personal data for the purpose we originally collected it for; we are relying on the lawful basis of your consent to the collection of data, and you withdraw this consent; or you exercise your right to object (as set out below) to our processing of your personal data.
Restriction of processing: You have a right to limit how we use your personal data in certain circumstances, including (for example) where: you believe that the personal data we hold about you may be inaccurate; we no longer require your personal data to achieve the purpose we collected it for, but you have asked us to retain it so you can establish, exercise or defend a legal claim; you are entitled to ask us to delete your personal data, but you’ve asked us to restrict the processing of it instead; or you’ve asked us to stop processing your personal data, and we are considering your request.
To object: In certain circumstances, you have a right to object to the processing of your data, and this means that we will stop using it, unless we are able to demonstrate that, on balance, we have legitimate grounds for continuing to process your personal data which overrides your rights, or the data is needed for the establishment, exercise or defence of legal claims.
Data portability: Where we are processing your personal data and we are relying on the lawful basis of consent or the performance of a contract (where this is the case, this will be set out in the table above) and we are carrying out that processing by automated means, then you have a right data portability. This means that if you ask us to, we will provide your personal data to you in a structured, commonly used and machine-readable format and transfer your personal data to an organisation of your choice.
To withdraw consent: If we are processing your data and relying on the lawful basis of your “consent” (where this is the case, this will be set out in the table above), then you are entitled to withdraw your consent at any time. You can do this using the details set out in the “Contact Us” section below.
To complain: We hope that if you have any queries, comments or concerns about the way we handle your personal data, you will raise these with us in the first instance, and you can do so using the contact details contained in the “Contact Us” section below. However, if you are unhappy with the way we have responded, you have the right to complain to the Information Commissioner’s Office, the regulator for data protection in the UK. Their address is: First Contact Team, Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF. You can find more information out at: ico.org.uk/for-the-public/how-to-make-a-data-protection-complaint.

12. Contact Us

We hope that you find this Privacy Policy easy to understand, but if you have any questions, comments or concerns about this policy or how we handle your personal data, you can contact us by:

  • Email at info@redlightbeautytech.com

This Privacy Policy was last updated in September 2025.

Any changes to this Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. We will also post a notice on the Website landing page and on appropriate pages on the Website. Please check back frequently to see any updates or changes to this Privacy Policy.

Subscribe Our Newsletter.