Privacy policy
Last updated: June 26, 2026
Montesse Beauty ("we," "us," or "our") operates the store and website located at montessebeauty.store, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Montesse Beauty is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.
1. Data Controller Information
For the purposes of applicable data protection laws (including the UK General Data Protection Regulation / UK GDPR and the Data Protection Act 2018), Montesse Beauty is the data controller responsible for your personal information.
- Trading Name: Montesse Beauty
- Address: 25 Dewartown, Gorebridge, EH23 4NX
- Phone: +44 7561 323111
- Email: Team@montessebeauty.store
- Website: https://montessebeauty.store
2. Personal Information We Collect or Process
When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or de-identified so that it cannot reasonably identify you.
We may collect or process the following categories of personal information depending on how you interact with our Services:
- Contact details: Your name, billing address, shipping address, phone number, and email address.
- Financial information: Credit card, debit card, financial account numbers, payment card details, transaction details, form of payment, payment confirmation, and related details.
- Account information: Your username, password, security questions, preferences, and settings.
- Transaction information: Items you view, place in your cart, add to your wishlist, purchase, return, exchange, or cancel, as well as your past purchase history.
- Communications: Any information included in your messages or interactions with customer support inquiries.
- Device information: Information about your device, browser, network connection, IP address, and unique online identifiers.
- Usage information: Data regarding your interaction with the Services, including navigation logs, access times, and click paths.
3. Sources of Personal Information
We collect personal information from the following sources:
- Directly from you: When you create an account, place an order, communicate with us, or otherwise submit information directly.
- Automatically through the Services: Collected from your device when you browse our site through cookies, log files, and similar tracking technologies.
- Service providers: When third parties (such as payment processors, cloud hosts, and customer support channels) collect or process data on our behalf.
- Marketing partners & Third parties: Platforms that assist us in marketing, advertising, and analytics.
4. How We Use Your Personal Information & Legal Bases for Processing
Under the UK GDPR, we process your personal information relying on specific legal bases depending on how you interact with us:
-
Performance of a Contract:
- Order Processing & Service Delivery: Fulfilling orders, processing payments, arranging shipping, managing returns and exchanges, and maintaining your store account.
- Customer Support: Communicating with you regarding your orders, responding to inquiries, and managing customer support requests.
-
Legitimate Business Interests:
- Improving the Services: Remembering your shopping preferences, personalizing your user experience, and developing product recommendations.
- Security & Fraud Prevention: Authenticating user accounts, securing payment processing, detecting fraudulent or malicious activity, and protecting system integrity.
-
Consent:
- Marketing & Advertising: Sending promotional emails, newsletters, or SMS updates, and displaying targeted online advertisements across third-party websites based on browsing behavior. You may withdraw consent at any time.
-
Legal Compliance:
- Legal & Regulatory Obligations: Complying with tax, accounting, or statutory requirements, responding to legal requests from law enforcement, and enforcing our terms or legal rights.
5. How We Disclose Personal Information
In certain circumstances, we may share personal information with third parties for legitimate operational or legal purposes, including:
- Shopify: We use Shopify to host our storefront, process payments, analyze performance, and manage fulfillment.
- Vendors and Service Providers: Third-party providers including payment gateways, shipping couriers (e.g., Royal Mail), IT management, analytics services, and cloud storage providers.
- Business & Marketing Partners: Partners who support direct marketing and online advertising initiatives.
- Corporate Group & Affiliates: Entities within our business group where relevant to service delivery.
- Legal and Business Transfers: In connection with a corporate restructuring, merger, or asset sale, or to comply with valid legal processes (e.g., subpoenas or court orders).
6. Relationship with Shopify
Our Services are hosted by Shopify. Shopify collects and processes personal information regarding your access to and usage of our store in order to provide and enhance their platform.
Information you submit to the Services will be transmitted to and stored by Shopify and its international subprocessors. Shopify uses personal data to offer enhanced platform features across merchants. For these shared operations, Shopify acts as an independent data controller. To learn more about how Shopify processes data and your choices, visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
7. Third-Party Websites and Links
Our site may include links to third-party platforms. We do not control or endorse the privacy practices, safety, or content of external sites. We strongly encourage you to review the privacy policies of any third-party website you visit.
8. Children's Data
Our Services are not intended for children under the age of 18 (or the legal age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or legal guardian and believe your child has submitted personal information to us, please contact us at Team@montessebeauty.store to request its deletion.
9. Data Security and Retention
While we implement appropriate technical and organizational safeguards to protect your personal information, no internet transmission or electronic storage solution is 100% secure. We encourage you to use secure channels and strong passwords when interacting with your account.
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, satisfy legal or legal-accounting requirements, resolve disputes, and enforce contractual obligations.
10. Your Privacy Rights (UK & EEA Residents)
If you reside in the United Kingdom or European Economic Area, you hold the following statutory rights under data protection law:
- Right to Access / Know: Request details regarding the personal information we hold about you and request a copy of that data.
- Right to Rectification: Request that inaccurate or incomplete personal information be updated or corrected.
- Right to Erasure ("Right to be Forgotten"): Request that we delete your personal data, subject to statutory retention obligations.
- Right to Restrict Processing: Request that we restrict or suspend the processing of your personal data under certain conditions.
- Right to Object: Object to our processing of your personal data for direct marketing or where processing is based on legitimate interests.
- Right to Data Portability: Request a structured, commonly used machine-readable copy of your personal data to transfer to another controller.
- Right to Withdraw Consent: Where we rely on your consent to process personal data, you may withdraw your consent at any time without affecting prior lawful processing.
To exercise any of these rights, please contact us at Team@montessebeauty.store. We will verify your identity before processing your request. You will not face discrimination or diminished service for exercising your privacy rights.
11. International Data Transfers
As we use global infrastructure (including Shopify), your personal data may be transferred, stored, or processed outside the United Kingdom or European Economic Area. When transferring data outside the UK, we ensure appropriate safeguards are implemented, such as the UK International Data Transfer Agreement (IDTA), standard contractual clauses approved by the European Commission, or statutory adequacy decisions.
12. Complaints
If you have questions or concerns regarding how we process your personal data, please contact us directly at Team@montessebeauty.store.
If you are not satisfied with our response, you have the right to lodge a complaint with the UK supervisory authority:
- Information Commissioner's Office (ICO)Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United KingdomWebsite: https://ico.org.uk/Telephone: +44 303 123 1113
13. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Updated versions will be published on this page with a revised "Last updated" date.
14. Contact Information
If you have questions, wish to exercise your rights, or need support, please reach out to us:
Trading Name: Montesse Beauty
Physical Address: 25 Dewartown, Gorebridge, EH23 4NX
Email: Team@montessebeauty.store
Phone: +44 7561323111
Customer Support Hours: Monday to Friday, 7:00 AM – 11:00 PM GMT
Note: We aim to respond to all queries within 24-48 working hours (Monday to Friday).