Privacy policy

Privacy Policy

Last updated: April 2026

Strawberry Glow ("we", "us", "our") is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller: Strawberry Glow, 289 High Road, Loughton, Essex, IG10 1AH Contact: info@strawberryglow.co.uk | 020 8508 2828

1. Information We Collect

When you place an order:

  • Name, email address, phone number
  • Billing and delivery address
  • Payment details (processed securely by our payment provider — we do not store full card numbers)
  • Order history and transaction records
When you create an account:
  • Email address and password (encrypted)
  • Saved addresses and preferences
When you book a treatment:
  • Name, contact details, and any relevant health or skin information provided at the time of booking
When you contact us or sign up for marketing:
  • Email address and any information you include in your message
  • Marketing preferences
Automatically collected:
  • IP address, browser type, device type
  • Pages visited and time spent (via cookies and analytics tools)

2. How We Use Your Data

Purpose Legal Basis
Processing and fulfilling your orders Performance of a contract
Managing appointments and bookings Performance of a contract
Sending order confirmations and updates Performance of a contract
Responding to enquiries and complaints Legitimate interests
Sending marketing emails (with your consent) Consent
Improving our website and services Legitimate interests
Fraud prevention and security Legitimate interests / Legal obligation
Complying with legal and tax obligations Legal obligation

3. Marketing Communications

We will only send you marketing emails if you have opted in. You can unsubscribe at any time by clicking the unsubscribe link in any email or by emailing info@strawberryglow.co.uk. Opting out of marketing does not affect any service-related communications (order confirmations, booking reminders).

4. Who We Share Your Data With

We share data only where necessary to deliver our services:

  • Shopify — our e-commerce platform (processes orders and payments). Shopify's privacy policy: shopify.com/legal/privacy
  • Payment processors — (e.g. Shopify Payments / Stripe) for secure card processing
  • Treatwell — appointment booking platform, where you choose to book via their system
  • Email marketing providers — to send newsletters and promotions (only to opted-in subscribers)
  • Delivery/courier services — your name and address, to fulfil physical product orders
  • HMRC and other authorities — where required by law
We do not sell your personal data to third parties.

5. Cookies

Our website uses cookies to ensure it works correctly, remember your preferences, and understand how visitors use the site. You can control cookies through your browser settings. A detailed cookie notice is presented when you first visit the site.

6. Data Retention

  • Order data: retained for 7 years to comply with HMRC requirements
  • Account data: retained while your account is active; you may request deletion at any time
  • Marketing data: retained until you unsubscribe or request removal
  • Booking/treatment records: retained for a minimum of 3 years for insurance purposes

7. International Transfers

Shopify and some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as UK International Data Transfer Agreements or adequacy decisions).

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Erase your data ("right to be forgotten") — subject to legal retention requirements
  • Restrict or object to certain processing
  • Portability — receive your data in a structured, machine-readable format
  • Withdraw consent for marketing at any time
To exercise any of these rights, email info@strawberryglow.co.uk. We will respond within 30 days.

9. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or via a notice on our website. The date at the top of this page shows when it was last updated.