Privacy policy

Last updated: 1 November 2026

Who we are

This website is run by PROOF Skincare Limited, trading as PROOF. We are registered in England and Wales, company number 17092103, and our registered office is Suite 1 Riverside House, Normandy Road, Swansea, SA1 2JA, United Kingdom.

We are the controller of the personal information described here. To ask a question about it or to use any of your rights, email hello@proofskincare.co.uk or write to us at the address above. We do not have a telephone number.

What we collect, why, and our legal basis

  • Orders. Your name, delivery and billing address, email address, phone number if you give one at checkout, and what you ordered. We use it to take payment, send your order and tell you about it. Legal basis: it is needed for our contract with you.
  • Payment details. Card payments are taken by Shopify Payments. If you choose Shop Pay, Shop Pay Instalments (provided by Affirm), Apple Pay, Google Pay or Klarna, that provider also receives your details to process your payment and handles them under its own privacy policy. Klarna, and Affirm for Shop Pay Instalments, may check your credit status before offering you a pay-later or instalment option. Legal basis: it is needed for our contract with you.
  • Accounting records. We must keep records of our sales for tax and company law. We keep them for six years from the end of the company financial year they relate to. Legal basis: a legal obligation.
  • Your emails and messages to us. We keep what you send and our replies so we can help you and deal with any later question. We keep them for two years after we last wrote to you. Legal basis: our legitimate interest in answering customers properly and keeping a record of what we said.
  • Fraud prevention and security. Shopify checks orders and protects the site. Legal basis: our legitimate interest in preventing fraud and keeping the site secure.
  • Your account, if you make one. Your email address and the details you save, so you can check out faster and see past orders. Legal basis: it is needed for our contract with you.
  • Device and visit information. Information about the browser and device you use and how you move around the site, collected through cookies and similar technologies (see 'Cookies' below). Legal basis: our legitimate interest in running a secure shop, for essential cookies; your consent, for analytics, preference and marketing cookies.

You do not have to give us your information, but if you do not give your name, address and payment details we cannot deliver your order. Shopify's fraud checks may flag or decline a payment automatically if it looks risky. If your payment is declined and you think that is a mistake, email us and ask for a person to review it; you can also tell us if you disagree with the outcome.

Our email list

If you join our email list, from the sign-up box on this website or by ticking the box at checkout, we use your email address to send you news of new batches and products. When you join through the sign-up box you also receive your WELCOME10 code for 10% off your first order.

Legal basis: your consent. You can withdraw it at any time, as easily as you gave it, by using the unsubscribe link in any email or by emailing us. We will then stop sending marketing emails and keep your address on a list of people who have asked not to hear from us, so that we do not email you again by mistake. Buying from us does not depend on joining.

We send these emails using Shopify's email tools, which process your email address, your name if you gave one, and what you do with our emails on our behalf.

We do not send text messages or use your information to show you adverts on other websites. If that changes we will update this policy first and ask for your consent where the law requires it.

Who we share your information with

  • Shopify hosts this shop, takes payments, runs the checkout and sends our emails. See 'Shopify and your information' below.
  • The payment provider you choose at checkout (Shop Pay, Affirm for Shop Pay Instalments, Apple Pay, Google Pay or Klarna) receives your payment, contact and order details to process your payment.
  • Royal Mail and any carrier we use receive your name, address and, where needed, phone number and email address, to deliver your order.
  • Our professional advisers, such as our accountant, where we need them to run the business.
  • Google receives information about your visit through Google Analytics (see 'Cookies' below).
  • Authorities and courts, if the law requires it.

We do not sell your information.

Shopify and your information

This shop is hosted by Shopify, which collects and processes personal information about your access to and use of the site in order to provide and improve the service. Information you submit is passed to Shopify, which may be located in countries other than where you live. For most of this, Shopify acts on our instructions and we are the controller. Where we use certain Shopify enhanced features that draw on your interactions with our shop, other merchants and Shopify, Shopify is responsible for that processing, including requests to use your rights over it. To learn more, see the Shopify Consumer Privacy Policy. Depending on where you live, you can use certain rights through the Shopify Privacy Portal.

Cookies

Cookies are small files placed on your device. Some are essential to make the shop work, such as keeping items in your basket and keeping checkout secure. We set these without asking.

Others measure how the site is used (analytics), remember your choices (preferences) or are used for marketing. We use Shopify's cookie banner, which asks for your consent to these other cookies in the United Kingdom before Shopify's tools set them. You can change your choices at any time through the cookie preferences link on the site.

For analytics we use Google Analytics. It shows us how visitors find and use the site, for example which pages are visited and whether an order is completed, so we can improve the shop. Google Analytics cookies are only set if you accept analytics cookies in our cookie banner. We do not use it to show you adverts. Google processes this information for us under its data processing terms. To learn more, see how Google uses information from sites that use its services.

Sending information abroad

Shopify, Google and some of our other suppliers may handle your information outside the United Kingdom, including in Canada and the United States. When your information leaves the UK, we make sure it is covered by a legal safeguard, such as a UK adequacy decision for the country, or the UK's international data transfer agreement or addendum. Email us if you would like a copy of the safeguards we rely on. The payment provider you choose at checkout is responsible for any transfer of your information it makes, under its own privacy policy.

How long we keep your information

  • Order and accounting records: six years from the end of the company financial year they relate to.
  • Emails and messages to us: two years after we last wrote to you.
  • Email list: until you unsubscribe; then only a record that you have asked not to be emailed, which we keep for as long as we trade so that we respect your choice. Legal basis for that record: our legitimate interest in respecting your choice.
  • Your account: until you ask us to delete it.
  • Fraud and security checks: with the order record they relate to.
  • Cookies: for as long as each cookie lasts, which varies by cookie.
  • Google Analytics information about your visits: 14 months, then Google deletes it.

Your rights

You can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or pass it to someone else in a usable form.

You can object to our use of your information based on our legitimate interests, and you can object to marketing at any time. We will always honour an objection to marketing.

Where we rely on your consent, you can withdraw it at any time without affecting what we did before. Email hello@proofskincare.co.uk. We may need to check who you are first, and we will reply within one month.

Complaints

If you are unhappy with how we have used your information, please tell us first at hello@proofskincare.co.uk. We will acknowledge your complaint within 30 days, look into it, and tell you what we found.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection authority: ico.org.uk/make-a-complaint, helpline 0303 123 1113, or write to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Children

This shop is not meant for children and we do not knowingly collect their information. If you think a child has given us theirs, email us and we will delete it.

Changes to this policy

We will update this policy when what we do changes, for example if we add a new supplier or start using a new kind of cookie. The date at the top shows when it last changed.