Privacy Policy

Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains how Alma Latina Store Limited ("Alma Latina", "we", "us") collects, uses and shares personal information in connection with almalatina.co.uk. Our processing is subject to applicable UK data protection laws, including the UK GDPR and Data Protection Act 2018.

1. Who is responsible for your information?

Alma Latina Store Limited, 4 Fontmell Close, Swindon, England SN25 2PE, United Kingdom. Email: support@almalatina.co.uk. We act as controller for our retail operations. Certain providers, including Shopify, may act as independent controllers for particular services.

2. Information we collect

Depending on how you use our store, we may process your name, contact details, billing and shipping addresses, order history, payment status and transaction references, account details, enquiries, returns and complaints, marketing preferences and communications, and technical data such as IP address, device and browser information, website interactions and online identifiers. Payment card details are handled by our payment providers; we do not need your card security code to provide customer service.

We receive information from you, from your interactions with our store, and from providers involved in purchases, payments, fulfilment, fraud prevention, communications and, where applicable, analytics or advertising.

3. Purposes and lawful bases

• Orders, delivery, returns, refunds and purchase-related support: to perform our contract with you.
• Accounting, tax and legally required records: to comply with legal obligations.
• Security, fraud prevention, managing enquiries and defending legal claims: our legitimate interests, subject to a balancing of your rights, or a legal obligation where relevant.
• Marketing emails: your consent or a legally permitted soft opt-in, where its requirements are satisfied. You can opt out at any time.
• Optional analytics, personalisation and advertising: consent where required for cookies and similar technologies, with an appropriate separate data protection lawful basis for any subsequent personal-data processing.

We only request information needed for the relevant activity. If essential order details are not supplied, we may be unable to fulfil a purchase.

4. Shopify and other recipients

Our store operates on Shopify, which provides hosting, checkout and ecommerce services. Shopify may process data for us and, for some enhanced services, as an independent controller. Shopify Network Intelligence is enabled for our store and may support Shopify's enhanced consumer services, subject to applicable legal requirements and customer choices. For details of Shopify's independent activities and rights mechanisms, see the Shopify Consumer Privacy Policy.

We share relevant data, as necessary, with ecommerce and payment providers, delivery and fulfilment services, customer service and operational providers, professional advisers and authorities where legally required. Depending on the features used and permissions granted, analytics and advertising partners can include Google, Meta (Facebook and Instagram), TikTok and Shopify-related services. Some apps used for store functions may also process limited information. Partners may act as processors or independent controllers depending on the service.

We do not sell customer contact lists as a standalone product. Certain advertising-related sharing may nevertheless be treated as a sale or sharing under laws applicable in other regions; available opt-out mechanisms and relevant Shopify settings will apply where legally required.

5. Cookies and similar technologies

We use essential technologies to operate our store and may use additional technologies for personalisation, analytics and advertising, where permitted. UK rules may require consent before optional technologies access or store information on your device. For categories, partners and choices, please see our Cookie Policy. Where a Shopify cookie preference panel is available, it can be used to record and change your choices. You can also contact us about privacy preferences.

6. Marketing

If you choose to subscribe to our newsletter, or where applicable law otherwise permits us to contact existing customers, we may email new arrivals, beauty news and offers. You can unsubscribe using the link in any marketing email or by contacting us. Transactional messages about orders are not marketing subscriptions.

7. International transfers

Our service providers may process information outside the United Kingdom. Where UK restricted-transfer rules apply, we take steps to use an applicable adequacy arrangement or approved safeguards, such as the UK International Data Transfer Agreement or UK Addendum, as relevant. You can contact us to request further information about applicable transfer safeguards.

8. Retention and security

We keep information only as long as needed for the purposes described above, including legally required accounting and tax records, customer service, disputes and protection against fraud. Different information has different retention periods; information is securely removed or anonymised when no longer required, subject to applicable legal duties and service-provider processes. We use reasonable technical and organisational measures to protect personal information, but no online system can guarantee absolute security.

9. Your rights

Subject to applicable conditions and exemptions, you may request access, correction, erasure, restriction, portability, object to certain processing and withdraw consent where consent is used. You have an unconditional right to object to direct marketing. Where applicable, you may also challenge qualifying solely automated decisions. Contact support@almalatina.co.uk; we may need to verify your identity and will respond within the relevant legal deadline. Shopify's separate controller activities may also require a request directly to Shopify.

10. Complaints

Please contact us with concerns. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

11. Changes

We may update this policy to reflect legal or service changes. The latest version will be displayed here, with any additional notice required by law.