Privacy Policy

**IMPORTANT INFORMATION**

This policy (together with our Terms of Website Use, and any other documents referred to within) sets out the basis on which any Personal Data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our practices regarding your Personal Data. By visiting www.cosmeticregistration.com (our site) you are accepting and consenting to the practices described in this policy.

For the purpose of the General Data Protection Regulations (GDPR), the data controller is LEL Ltd, 129 hendon lane,United Kingdom.

LEL Ltd has appointed a Data Protection Officer (DPO) who can be contacted at: info@cosmeticregistration.com.

We know that you value your privacy and the security of personal information held about you. We are committed to handling your Personal Data and personal sensitive data in line with data protection law and principles, which means that your data will be:

- Used lawfully, fairly, and in a transparent way.

- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.

- Relevant to the purposes we have told you about and limited only to those purposes.

- Accurate and kept up to date.

- Kept only as long as necessary for the purposes we have told you about.

- Kept securely.

This website is not intended for children, and we do not knowingly collect data relating to children.

Thank you for visiting our site. This Privacy Policy will come into force on 1/1/2024.

**What is Personal Data?**

- Personal Data refers to information that can directly or indirectly identify an individual. This typically includes details such as your name, address, email address, telephone number, and can also encompass other data like an IP address.

**How Do We Collect Personal Data?**

1. **Direct Interactions:**

   - Personal Data can be collected through direct interactions, such as:

     - Applying for or purchasing products or services.

     - Creating an account on the website.

     - Subscribing to services or publications.

     - Requesting marketing materials.

     - Providing feedback.

     - Registering product warranties.

2. **Automated Technologies or Interactions:**

   - When interacting with the website, data about your equipment, browsing actions, and patterns may be automatically collected. This is done using technologies like cookies.

3. **Third Parties or Publicly Available Sources:**

   - Personal Data might also be obtained from third parties or public sources, including:

     - Technical data from analytics providers (like Google).

     - Contact and financial data from technical, payment, and delivery service providers.

     - Contact data from publicly available sources (like Companies House).

**Legal and Contractual Requirements:**

- In cases where personal data is required by law or for the execution of a contract, failure to provide this data might lead to an inability to fulfill the contract (such as providing goods or services). In such instances, there may be a need to cancel a product or service, but notification will be provided at that time.

**Data Usage, Retention, and Security:**

- For detailed information on what personal data is collected, the purposes for its collection, how it is used, retained, and secured, specific categories and sections in the policy or website should be referred to.

Apologies for the oversight. Here's the revised section with the updated contact information:

Your Rights

- **Right to Confidentiality:** Under the General Data Protection Regulation (GDPR) and the common law duty of confidence, you have a right to the confidentiality of your personal information.

- **Staff Obligations:** All staff members are contractually obligated to keep customer information confidential, in line with the Code of Practice on Confidential Information.

- **Principle of Confidentiality:** The organization is committed to processing your records with strict confidentiality.

**Access to Your Records:**

- **Right to Access:** You have the right to request a copy of all records about you, available in paper or electronic form.

- **No Charge for Access:** Generally, there is no charge for obtaining a printed copy of the information held about you.

- **Response Time:** The organization must respond to your request within one month.

- **Identification Requirements:** You will need to provide sufficient information (such as full name, address, date of birth) and identification (like a passport, driving license, or credit/debit card) for your request to be processed.

**Accuracy of Information:**

- If you believe any information held about you is inaccurate or incorrect, please inform the organization.

**Objections and Queries:**

- **Right to Object:** You have the right to object to the organization holding your information.

- **Further Inquiries:** For more details about this policy or your rights, contact the Data Protection Officer at info@cosmeticregistration.com.

**Purpose of Processing:**

- The main purpose of processing Personal Data is to provide products or services and to handle payments for these products or services as requested by the customer.

**Data Storage:**

- **Location:** Personal Data is stored securely, either on-site or in securely archived off-site locations within the UK.

- **Duration:** This data is retained as long as legally required, which is typically up to six years.

**Data Sharing:**

- Personal Data may be shared with employees to ensure the provision of safe and secure services and with merchant payment services providers.

**Legal Basis for Processing:**

- The processing of Personal Data is necessary for the performance of a contract, such as processing orders or other services requested by the customer.

- If sensitive data (e.g., skin information) is needed, customers will be transparently informed about the legal obligations for processing such data.

- The data is not used for any other purposes, including marketing.

**COOKIES**

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our website.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

**ACCESS TO INFORMATION**

Under the General Data Protection Regulations, you have the following rights:

- Obtain confirmation as to whether or not we process Personal Data from you and, where that is the case, access to your Personal Data.

- Rectification of inaccurate Personal Data.

- Erasure of Personal Data.

- Objection to the processing of Personal Data.

- Restriction of processing of Personal Data.

- Portability of Personal Data – to receive the Personal Data you have provided to us in a structured, commonly used, and machine-readable form and transmit it to another data controller.

In some instances, our legal obligations or public duties may override your rights under data protection laws.

You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Learn more about these rights at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/. For further queries about this policy, or to find out more about your rights, please contact the Data Protection Officer at info@cosmeticregistration.com.

Where your consent is the legal basis for the processing of your Personal Data, you can withdraw your consent for marketing communications by logging into your account or using the unsubscribe link in any of our marketing communications or by sending us an email to info@cosmeticregistration.com. Note that withdrawing your consent will not affect the lawfulness of the processing before the withdrawal.

If you believe that the processing of Personal Data by us violates data protection laws, you can lodge a complaint with the Information Commissioner in the UK (www.ico.org.uk) or the data protection commissioner in the Republic of Ireland (www.dataprotection.ie).

**CHANGES TO OUR PRIVACY POLICY**

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

**CONTACT**

Questions, comments, and requests regarding this privacy policy are welcomed and should be addressed to:

Email: info@cosmeticregistration.com

Address: LEL Ltd, 129 hendon lane , London United Kingdom