This section provides additional information for people in the European Economic Area (EEA) or United Kingdom (UK). The terms used in this section have the same meaning as in the General Data Protection Regulation and the UK Data Protection Act (GDPR). The term “personal information” as used in this notice has the same meaning as “personal data” in the GDPR.

Collection and Disclosure of Personal Data

The personal data we collect and how we share it is described above in our Privacy Policy.

We may disclose your personal information to the following third party controllers for business purposes:Apple Pay, Instagram Ads, Microsoft Ads, BDO Accountancy and Business Advice, TWM Solicitors LLP, Google Ads, Facebook Ads, Shop Pay. To understand how these parties handle your data, please refer to their respectiveprivacy policies.

Cookie Notice

We use cookies to improve your experience on our site and to allow us and third parties to personalize the marketing content you see on other websites and social media. Website visitors from European Privacy Law regions can control cookie settings. Manage your region specific consent settings here.

Essential Cookies

We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.

List of Essential Cookies
Cookie Name	Provider	Duration
_cmp_a	Shopify	1 Day
_shg_session_id	Shopify	1 Day
_shg_user_id	Shopify	4 Years 29 Days
_vuid	Listrak	1 Day
AWSALBCORS	Listrak	7 Days
AWSALBCORS	Listrak	7 Days
cart_currency	Shopify	14 Days
data-timeout	Shopify	7 Days
gsid	Listrak	10 Years
keep_alive	Shopify	1 Day
localization	Shopify	1 Year
ltkpopup-session-depth	First Party	Session
ltkSubscriber-Footer	First Party	Session
scasid	Listrak	1 Year
secure_customer_sig	Shopify	1 Year
shopify_pay_redirect	Shopify	1 Day
swym-cu_ct	Shopify	30 Days
swym-email	Shopify	30 Days
swym-instrumentMap	Shopify	30 Days
swym-o_s	Shopify	1 Day
swym-pid	Shopify	30 Days
swym-session-id	Shopify	1 Day
swym-swymRegid	Shopify	30 Days
tpc_id	Attentive	2 Years
usid	Listrak	2 Months 29 Days

Analytics Cookies

These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.

List of Analytics Cookies
Cookie Name	Provider	Duration
__attentive_cco	Attentive	59 Years 16 Days
__attentive_dv	Attentive	1 Day
__attentive_id	Attentive	59 Years 16 Days
__attentive_pv	Attentive	1 Day
__attentive_ss_referrer	Attentive	1 Day
_attn_	Attentive	9 Years 28 Days
_clck	Microsoft Ads	30 Days
_clsk	Microsoft Ads	1 Day
_ga	Google Analytics	1 Year 30 Days
_ga_84ZSS53F3K	Google Analytics	1 Year 30 Days
_ga_CZ38QXKQCL	Google Analytics	1 Year 30 Days
_gat	Google Analytics	2 Mins
_gid	Google Analytics	1 Day
_landing_page	Shopify	14 Days
_orig_referrer	Shopify	14 Days
_s	Shopify	1 Day
_shopify_s	Shopify	1 Day
_shopify_sa_p	Shopify	1 Day
_shopify_sa_t	Shopify	1 Day
_shopify_y	Shopify	30 Days
_y	Shopify	30 Days
CLID	Microsoft Ads	30 Days
GSIDk9pCTckIU6mH	Google Analytics	10 Years

Personalization Cookies

We use these cookies to enhance functionality and personalize content for you. For example, they allow us to remember you when you return to our website or app. If you do not allow these cookies then some or all of these services may not function properly.

List of Personalization Cookies
Cookie Name	Provider	Duration
pixel	Yotpo	30 Days

Advertising Cookies

These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.

List of Advertising Cookies
Cookie Name	Provider	Duration
_fbp	Meta Ad Network	2 Months 29 Days
_uetsid	Microsoft Ads	1 Day
_uetvid	Microsoft Ads	1 Year 24 Days
ANONCHK	Microsoft Ads	11 Mins
MR	Microsoft Ads	7 Days
MR	Microsoft Ads	7 Days
MR	Microsoft Ads	7 Days
MUID	Microsoft Ads	1 Year 24 Days
MUID	Microsoft Ads	1 Year 24 Days
SM	Microsoft Ads	Session
SRM_B	Microsoft Ads	1 Year 24 Days

Lawful Bases and Legitimate Interests

We process personal data on the following lawful bases:

Complying with legal obligations
Fulfilling contracts
Consent
Legitimate interests

Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Conducting Surveys, Creating Customer Profiles, Analyzing Data, Delivering Targeted Ads, Fulfilling Customer Orders, Meeting Compliance & Legal Requirements, Processing Payments, Providing Customer Support, Sending Promotional Communications, Storing and Managing Data, and Tracking Purchases & Customer Data.

International Data Transfers

We may send the personal data of individuals in the EEA/UK to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we rely either on Adequacy Decisions as adopted by the European Commission (EC) or the UK Information Commissioner's Office (ICO) on the basis of Article 45 of Regulation (EU) 2016/679 (GDPR), the EU-US Data Privacy Framework and UK-US Data Bridge agreements, Standard Contractual Clauses (SCCs) issued by the EC or International Data Transfer Agreements (IDTAs) approved by the ICO. Data protection authorities have determined that the SCCs and IDTAs provide sufficient safeguards to protect personal data transferred outside the EEA/UK. You may read more about international data transfer mechanisms at the following links:

Privacy Rights

Individuals in the EEA/UK have the following rights regarding their personal data.Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.

Right to access. You have the right to request a copy of the personal data we hold about you.

Right of portability. You have the right to ask us to transfer your data to another party.

Right to rectification. You have the right to request that we rectify any incorrect information we have about you.

Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.

Right to withdraw consent. You have the right to withdraw your consent at any time when we rely on your permission to process your personal data.

Right to object. You have the right to object to our use of data about you.

Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit theInformation Commissioner’s Office website at https://ico.org.uk/, or see a list of EU Data Protection Authorities athttps://www.gdprregister.eu/gdpr/dpa-gdpr/.

Inquiries

Controller contact information

Image Skincare UK

gdprprivacy@imageskincare.com

Data Protection Officer information

GDPR Privacy

gdprprivacy@imageskincare.com