Privacy Policy
Last updated: September 2026 · Rejuvenate Skin Ltd. is the data controller
REJNA Skin (Rejuvenate Skin Ltd.) is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, how long we keep it, who we share it with, and what your rights are.
We are the data controller for the personal information you provide to us. Our Data Protection contact is: contact@rejnaskin.com
1. What Data We Collect
| Data type | Why we collect it | Legal basis |
|---|---|---|
| Name and email address | To process your order, send order confirmations, and manage your account | Contract performance |
| Delivery address | To fulfil and deliver your order | Contract performance |
| Payment information | To process payment (we do not store full card details — these are handled by our payment processor) | Contract performance |
| Email address (newsletter) | To send you marketing communications where you have opted in | Consent |
| Purchase history | To process returns, handle complaints, and improve our service | Legitimate interest / Contract |
| Website usage data (cookies) | To improve website performance and understand how visitors use our site | Consent (see Cookie Policy) |
| Communications with us | To respond to your enquiries and keep a record of correspondence | Legitimate interest |
| Product reviews | To publish and use your review in marketing with your consent | Consent |
2. How We Use Your Data
- To process and fulfil your orders and send you order confirmation and dispatch notifications
- To manage your account and subscription if applicable
- To send you marketing emails where you have given us consent to do so
- To respond to your customer service enquiries
- To comply with our legal obligations including fraud prevention and tax record-keeping
- To improve our products and website based on anonymised usage data
- To send you important updates about products, ingredients, or safety information where we have a legitimate interest to do so
3. Marketing Communications
We will only send you marketing emails if you have actively opted in. You can unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting us at contact@rejnaskin.com. Unsubscribing from marketing will not affect your ability to receive transactional emails (such as order confirmations).
4. Who We Share Your Data With
We do not sell your personal data to third parties. We may share your data with:
- Delivery partners (e.g. Royal Mail, DPD, FedEx): to fulfil your order
- Payment processors (Squarespace Payments and Stripe): to process your payment securely
- Email marketing platform: to send you marketing communications you have consented to
- Website and e-commerce platform (Squarespace): to operate our website and store
- Analytics providers (e.g. Google Analytics): to understand website usage (anonymised data only)
- Legal and regulatory authorities: where required by law, including HMRC, Trading Standards, and the OPSS
All third parties are required to process your data in compliance with UK GDPR and are bound by data processing agreements where required.
5. How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Order and transaction records | 7 years (legal requirement for tax purposes) |
| Customer account data | For the duration of your account plus 2 years after last activity |
| Marketing email list | Until you unsubscribe |
| Customer service communications | 3 years from the date of communication |
| Website analytics data | 26 months (Google Analytics default) |
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right to access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate or incomplete data
- Right to erasure — you can ask us to delete your data in certain circumstances
- Right to restrict processing — you can ask us to pause processing your data in certain circumstances
- Right to data portability — you can ask us to provide your data in a portable format
- Right to object — you can object to us processing your data on the basis of legitimate interest
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at contact@rejnaskin.com. We will respond within 30 days.
7. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
8. International Data Transfers
Some of our third-party service providers are based outside the UK. Where your data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses or transfers to countries with UK adequacy decisions.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available at rejnaskin.com/privacy. Material changes will be communicated to you by email where we hold your email address.
Continue