Privacy Policy
Aafiyah Wellness | Last updated: 19/09/26
1. Who we are
Aafiyah Wellness ("we", "us") is a handmade skincare brand based in the UK, operated by [legal name / company name and registration number]. We are the "data controller" for the personal information described here. You can contact us at contact@aafiyahwellness.co.uk or 427 Wellington Road North, Manchester, SK4 5BA
We're a small, founder-led business. We only collect what we need, and we don't sell your data.
2. What we collect and why
| What | Why | Our lawful basis |
|---|---|---|
| Orders: name, delivery and billing address, email, phone number, order history | To process and deliver your order and handle returns or queries | Contract |
| Payment details: handled by Shopify and our payment providers. We never see or store your full card details. | To take payment | Contract |
| Order and tax records | To meet our accounting and legal obligations | Legal obligation |
| Email address and name when you sign up to our emails | To send news, restocks and offers | Consent (you can unsubscribe at any time) |
| Market research form answers: your email, optional first name, feedback on our products, and what you tell us about your skin and skin concerns | To improve our products and content, and to send your thank-you discount code | Consent. For information about your health, we ask for your explicit consent on the form. |
| Website usage data: device, browser, pages visited, cookies | To keep the site secure and working, and to understand how it's used | Legitimate interests, or consent where cookies require it |
| Messages and comments you send us on email, TikTok or Instagram | To reply to you | Legitimate interests |
3. Health information
Our research form asks about your skin concerns (for example, eczema). This is "special category" data, so we only collect it with your explicit consent, keep it to what we need, and use it only to improve our products and content. You can skip any question, and you can withdraw your consent and ask us to delete your answers at any time.
If you're answering on behalf of a child, please don't include their name or any details that could identify them.
4. Children
Our website and social channels are for adults. We don't knowingly collect personal information from children under 13. If you think we have, contact us and we'll delete it.
5. Your feedback and reviews
We will only share your feedback publicly (on our website, TikTok, Instagram or in emails) if you've given us permission, and only in the way you chose, either anonymously or with your first name. If you received a discount for giving feedback, we will say so.
6. Who we share your information with
We only share information with providers who help us run the business, and only what they need:
- Shopify: our online store, checkout and email marketing
- Payment providers: to process payments
- Couriers Royal Mail to deliver your order
- Google (Google Forms): to collect research responses
We may also share information where the law requires it. We never sell your personal information.
Some of these providers process data outside the UK. Where they do, we rely on safeguards such as the UK International Data Transfer Agreement or an adequacy arrangement.
7. How long we keep it
- Order and accounting records: 6 years
- Marketing emails: until you unsubscribe
- Research form answers: 12 months, then deleted or anonymised. Sooner if you ask.
- Messages and enquiries: 12 months after we've resolved them
8. Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the information we hold about you
- ask us to correct anything that's wrong
- ask us to delete your information
- ask us to restrict or stop using it
- object to us using it, including for marketing
- receive your information in a portable format
- withdraw your consent at any time (this won't affect anything we've done before you withdrew)
To use any of these rights, email contact@aafiyahwellness.co.uk. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.
9. Cookies
Our website uses cookies to make the store work (like remembering your basket) and, with your consent, to understand how visitors use the site. You can change your cookie choices through the banner on our site or in your browser settings.
10. Security
We take sensible steps to protect your information, including using secure platforms and limiting who can access it. No online service is completely risk-free, so if we ever have a breach that affects you, we'll tell you and the ICO where the law requires it.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the date at the top.
Before you publish
- Fill in the brackets: the legal entity behind Aafiyah Wellness, your postal address, your courier, any analytics tools, and the retention periods you're comfortable with. Only promise a retention period you'll actually stick to.
- ICO fee: most UK businesses that handle personal data have to pay the ICO's data protection fee. Check whether you need to, and if you do, you can add your registration number to section 1.
- Match it to reality: if you use other tools (Meta or TikTok pixels, Klaviyo, a reviews app), add them to section 6, since the policy should list what you actually use.
- Not legal advice: I'm not a lawyer, and this is a solid starting draft, not a substitute for a professional check. Since you're collecting health-related answers, it's worth having a solicitor or a data protection adviser review it once.