Privacy Policy

Customer privacy notice

This Privacy Policy describes how nahthen.co.uk (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

1. Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at hello@nahthenskincare.co.uk or by mail using the details provided below:

Nah Then Skincare, Burleigh, 897 Manchester Road, Linthwaite, Huddersfuield, HD7 5NE.

2. Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We refer to any information about an identifiable individual as “Personal Information”.

Device Information

Purpose: To load the Site accurately and perform analytics to optimize our services.
Source: Collected automatically via cookies, log files, web beacons, tags, or pixels.
Data Collected: Web browser version, IP address, time zone, cookie information, viewed products, search terms, and Site interaction data.

Order Information

Purpose: To fulfill our contract with you (processing payments, shipping, invoices), communicate with you, screen for fraud, and provide marketing (where consented to).
Source: Collected directly from you.
Disclosure: Shared with relevant delivery partners.
Data Collected: Name, billing address, shipping address, payment information (including credit/debit card numbers), email address, and phone number.

Customer Support Information

Purpose: To provide dedicated support and resolve queries.
Source: Collected directly from you via email or contact forms.

3. Minors

The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you believe your child has provided us with Personal Information, please contact us at the address above to request deletion.

4. Sharing Personal Information

We may share your Personal Information with service providers to help us provide our services and fulfill our contracts with you. For example:

We may share your information to comply with applicable laws, respond to lawful requests, or protect our rights.

5. Behavioural Advertising

We may use your Personal Information to provide targeted advertisements or marketing communications we believe may be of interest to you.

Marketing Partners: We may share information about your use of the Site and your purchases with advertising partners (like Meta or Google) to show you relevant ads on other platforms.

You can opt out of targeted by clearing your cookies stored.

6. Lawful Basis & Your Rights (UK & EEA)

If you are a resident of the United Kingdom or the European Economic Area (EEA), we process your personal information under the following lawful bases pursuant to the UK GDPR and EU GDPR:

Your explicit consent;
The performance of the contract between you and the Site;
Compliance with our legal obligations;
Our legitimate interests (such as preventing fraud or improving the Site), provided these do not override your fundamental rights.

Your Rights

You have the right to:

Access: Request a copy of the Personal Information we hold.
Correction: Ask us to update or correct inaccurate data.
Erasure: Ask us to delete your data in certain circumstances.
Portability: Request that we transfer your data to another service.
Object: Object to processing based on "legitimate interests" or for direct marketing.

To exercise these rights, please contact us via the email above.

7. Retention

When you place an order, we will retain your Personal Information for our records for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or tax reporting requirements (typically 6 years for UK tax purposes).

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

Cookies necessary for the functioning of the shop.

Cookie Name XSRF-TOKEN

Purpose Cookie for fraud detection of calls

Duration Session

Cookie Type Essential

Cookie Name HS

Purpose Security Cookie for Hive (legacy)

Duration Session

Cookie Type Essential

Cookie Name svSession

Purpose Cookie for security, stability, and core site function

Duration 12 months

Cookie Type Essential

Cookie Name SSR-caching

Purpose Performance cookie for rendering

Duration 24 hours

Cookie Type Essential

Cookie Name TS*

Purpose Cookies for attack detection

Duration Session

Cookie Type Essential

Cookie Name bSession

Purpose Used for system effectiveness measurement

Duration 24 hours

Cookie Type Essential

Cookie Name fedops.logger.sessionId

Purpose Tracking session errors and issues (resilience)

Duration 12 months

Cookie Type Essential

Cookie Name _wixAB3|*

Purpose Cookie for site experiments

Duration 6 months

Cookie Type Essential

Cookie Name server-session-bind

Purpose Cookie for API protection

Duration Session

Cookie Type Essential

Cookie Name client-session-bind

Purpose Cookie for API protecction

Duration Session

Cookie Type Essential

Cookie Name oAuthState

Purpose Session cookie for identification

Duration Session

Cookie Type Essential

Cookie Name wixSession

Purpose Cookie for security, stability and core site function

Duration 12 months

Cookie Type Essential

Cookie Name sec-fetch-unsupported

Purpose Used to indicate browser limitations preventing the enabling of site security features

Duration Session

Cookie Type Essential

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

As noted above, if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: [For example: https://ico.org.uk/make-a-complaint/]