Privacy policy

Last updated: 14th April 2026

Only This Ltd (“Only This”, “we”, “us” or “our”) is committed to protecting and respecting your privacy and personal data.

This Privacy Policy explains how we collect, use and protect your personal data when you visit our website, place an order, contact us, or sign up to hear from us.

This policy should be read alongside our Terms of Service and Cookie settings.

1. Who we are

This website is owned and operated by Only This Ltd.

We are registered in England and Wales under company number 14731026.

Our registered office is:
Riverside Business Centre, Riverside Road, Lowestoft, England, NR33 0TQ

Our principal place of business is:
71-75 Shelton St, London WC2H 9JQ

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
hello@onlythisbeauty.com

For the purposes of data protection law, we are the data controller of the personal data you provide to us.

2. The personal data we collect

We may collect and process the following personal data:

• Information you provide directly to us
• This may include:
• your name
• billing and delivery address
• email address
• telephone number
• account login details
• order details
• payment-related information such as transaction confirmations, but not full payment card details
• correspondence you send to us
• marketing preferences
• reviews, feedback or survey responses
• Information collected automatically

When you use our website, we may automatically collect certain technical and usage information, including:

• IP address
• browser type and version
• device type
• operating system
• referral source
• pages viewed
• time spent on pages
• navigation paths through the website
• date and time of access
• Information from third parties
• We may receive personal data from trusted third parties involved in operating our business and website, including:
• Shopify, which powers and hosts our online store
• payment providers used to process transactions
• delivery and fulfilment partners
• email marketing platforms such as Klaviyo or Mailchimp, where used
• analytics providers such as Google Analytics
• advertising and social media platforms such as Meta, where used
• fraud prevention and website security providers

3. How we use your personal data

We use your personal data to:

• operate and maintain our website and online store
• process and fulfil your orders
• take payment and issue refunds where appropriate
• arrange shipping and delivery
• communicate with you about your orders, enquiries or account
• provide customer service and support
• send marketing communications where you have consented to receive them
• improve our website, products and customer experience
• analyse website traffic, shopping behaviour and campaign performance
• maintain records for accounting, tax and legal purposes
• prevent fraud, misuse and security issues
• comply with legal and regulatory obligations

4. Legal bases for processing

Under UK data protection law, we must have a lawful basis for using your personal data. We rely on one or more of the following:

Contract

Where processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract. For example, processing your order, taking payment, and arranging delivery.

Legitimate interests

Where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include:

• running and improving our website and business
• responding to customer enquiries
• maintaining records
• preventing fraud
• securing our website and systems
• understanding how customers use our website and services

Consent

Where you have given us clear consent to process your personal data for a specific purpose, such as:

• sending email marketing
• placing non-essential cookies on your device
• using certain analytics or advertising tools where consent is required

Legal obligation

Where we need to process your data to comply with a legal or regulatory obligation.

5. Marketing communications

If you sign up to receive marketing from us, we may send you emails about our products, launches, offers, brand updates and related news.

We will only send you marketing where we are permitted to do so by law, including where you have given consent if required.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email, or by contacting us at hello@onlythisbeauty.com.

We may keep a record of your marketing preferences so that we can respect your choices.

6. Sharing your personal data

We do not sell your personal data.

We may share your personal data with trusted third parties where reasonably necessary to run our business and provide our services. This may include:

• Shopify, which hosts and powers our online store
• payment processors and gateways that securely handle payments
• shipping, fulfilment and courier partners that deliver orders
• website hosting, IT, security and backup providers
• analytics providers such as Google Analytics
• email marketing providers such as Klaviyo or Mailchimp, where used
• advertising and social media partners such as Meta, where used
• accountants, legal advisers, insurers and other professional advisers
• fraud prevention, compliance and security service providers

These third parties will only process your personal data where necessary for their services and in accordance with their own legal obligations.

We may also disclose your personal data:

• where required by law
• to enforce our legal rights
• to prevent fraud or security threats
• in connection with a business reorganisation, sale, merger or investment transaction

7. Payments

We do not store full payment card details on our own servers.

Payments made through our website are processed by third-party payment providers. These providers process your payment information in accordance with their own privacy policies and security procedures.

We only receive the information necessary to confirm payment, manage your order, issue refunds where applicable and maintain proper business records.

8. International transfers

Some of our third-party providers may process personal data outside the UK.

Where your personal data is transferred outside the UK, we will take appropriate steps to ensure it remains protected, including by relying on lawful transfer mechanisms and appropriate safeguards where required.

9. Data retention

We will not keep your personal data for longer than necessary for the purposes for which it was collected.

In general:

• order and transaction records may be kept for up to 6 years for tax, accounting and legal purposes
• customer service and correspondence records may be kept for up to 6 years
• enquiry data may be kept for up to 24 months
• marketing data may be kept until you unsubscribe or withdraw consent, and for a limited period afterwards to maintain suppression records
• technical and cookie-related data may be retained in line with the relevant cookie durations and platform settings

We may retain data for longer where necessary to comply with legal obligations or to establish, exercise or defend legal claims.

10. Your rights

Under UK data protection law, you may have the right to:

• request access to the personal data we hold about you
• request correction of inaccurate or incomplete data
• request erasure of your personal data in certain circumstances
• request restriction of processing in certain circumstances
• object to processing based on legitimate interests
• object to direct marketing at any time
• request transfer of your personal data to you or another provider, where applicable
• withdraw consent at any time where processing is based on consent
• lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk

To exercise any of these rights, please contact us at hello@onlythisbeauty.com.

We may need to verify your identity before responding to your request.

11. Cookies and similar technologies

Our website uses cookies and similar technologies to make the site work, improve performance, understand how visitors use the site, remember preferences and support marketing activities where permitted.

Cookies may include:

• strictly necessary cookies required for website functionality, shopping basket, checkout and security
• preferences cookies that remember your settings
• analytics cookies that help us understand website traffic and usage
• marketing cookies that help us measure campaigns and show more relevant advertising

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

You can manage your cookie preferences through our cookie banner or your browser settings. Please note that disabling some cookies may affect how the website functions.

12. Third-party services and links

Our website may contain links to third-party websites, plugins or platforms. If you follow a link to any third-party site, please note that they have their own privacy policies and practices. We are not responsible for those third-party policies or content.

13. Security

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

14. Children

Our website and products are not intended for children, and we do not knowingly collect personal data from children.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal obligations or website functionality.

Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

16. Contact us

If you have any questions about this Privacy Policy or our use of your personal data, please contact:

Only This Ltd
hello@onlythisbeauty.com