Privacy Policy
Lipstick London - Privacy Policy
Last updated: 8 September 2026
Lipstick London is operated by Lipstick Retail Ltd, a company registered in England and Wales under company number 16376177, with its registered office at 3rd Floor, 9 Hatton Street, London NW8 8PL, United Kingdom ("Lipstick London", "we", "us" or "our").
Lipstick Retail Ltd is the data controller responsible for the personal information described in this Privacy Policy.
This Privacy Policy explains how we collect, use, store and share your personal information when you visit or use our website, create an account, make a purchase, sign up to receive marketing communications, contact us or otherwise interact with Lipstick London (the "Services").
Our online store is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and Services to you.
Please read this Privacy Policy carefully to understand how and why we use your personal information and the rights available to you.
1. PERSONAL INFORMATION WE COLLECT
Depending on how you interact with Lipstick London, we may collect and process the following categories of personal information:
• Identity and contact information - including your name, email address, telephone number, billing address and delivery address.
• Account information - including your login details, account preferences and settings.
• Order and transaction information - including products purchased, returned, exchanged or cancelled, order history, delivery information and payment status.
• Payment information - payments are processed by Shopify and/or our payment service providers. We may receive limited payment and transaction information but do not necessarily receive or store your complete payment card details.
• Shopping and preference information - including products you view, add to your basket or wishlist, and information about your shopping preferences.
• Communications - including information you provide when contacting our customer service team, making an enquiry, submitting feedback or otherwise communicating with us.
• Marketing information - including your marketing preferences and information about how you interact with our marketing communications.
• Technical and device information - including your IP address, browser type, device information, operating system and other technical identifiers.
• Website usage information - including information about how you browse and interact with our website, subject to your cookie and privacy choices.
We only collect personal information that is reasonably necessary for the purposes described in this Privacy Policy.
2. SOURCES OF PERSONAL INFORMATION
We may collect personal information:
• Directly from you, for example when you create an account, place an order, join our VIP List or other marketing list, contact us, submit a review or otherwise provide information to us.
• Automatically when you use our website, including through cookies and similar technologies, subject to your cookie and privacy choices.
• From Shopify and service providers that support our website and business, such as payment, delivery, fulfilment, customer service, IT, analytics and marketing providers.
• From advertising, social media and other business partners where permitted by law and in accordance with your privacy choices.
• From companies within our corporate group where there is a lawful basis for the sharing.
3. HOW WE USE YOUR PERSONAL INFORMATION AND OUR LAWFUL BASES
We use your personal information only where we have a lawful basis to do so. Depending on the circumstances, we may process your information for the following purposes:
• To process and fulfil your orders - including processing payments, arranging delivery, managing returns, exchanges and refunds, and communicating with you about your order. We process this information because it is necessary to perform our contract with you.
• To manage your account - including creating and maintaining your Lipstick London account and remembering your account preferences. We process this information where necessary to perform our contract with you.
• To provide customer service - including responding to questions, requests, complaints and other communications. We process this information where necessary to perform our contract with you and/or for our legitimate interests in providing effective customer service.
• To improve our website and Services - including understanding how customers use our website, improving functionality and the customer experience, and developing our products and Services. Where applicable, we rely on our legitimate interests and/or your consent, particularly where cookies or similar technologies are used.
• To prevent fraud and protect our Services - including detecting and preventing fraudulent transactions, misuse, security incidents and other unlawful activity. We process this information where necessary for our legitimate interests in protecting our customers, business and Services and, where applicable, to comply with our legal obligations.
• To send marketing communications - where you have consented to receive them or where we are otherwise permitted to do so by applicable law. You can unsubscribe from marketing communications at any time.
• To personalise marketing and advertising - including showing you relevant products or advertising where permitted by law and subject to your cookie and privacy choices.
• To comply with legal obligations - including tax, accounting, consumer protection and other legal and regulatory requirements.
Where we rely on legitimate interests, we consider whether the processing is necessary for those interests and whether your rights and interests override them.
4. MARKETING AND ADVERTISING
We may use your personal information to send you information about Lipstick London products, launches, events, offers and other marketing where you have consented to receive it or where we are otherwise permitted to do so by law.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in our emails or by contacting us. If we offer marketing by other channels, such as SMS, you can use the opt-out method provided for that channel.
Opting out of marketing will not prevent us from sending service messages that are necessary in connection with your account, orders, deliveries, returns or other transactions.
Where we use cookies or similar technologies for personalised advertising, analytics or other non-essential purposes, we will do so subject to applicable law and your cookie and privacy choices.
5. HOW WE SHARE PERSONAL INFORMATION
We may share personal information where necessary for the purposes described in this Privacy Policy and where we have a lawful basis to do so, including with:
• Shopify, which hosts and supports our ecommerce store.
• Payment service providers that process and authorise payments.
• Delivery, logistics and fulfilment providers that help us deliver and manage orders.
• IT, hosting, cloud, security and customer-support service providers.
• Analytics, CRM, email, marketing and advertising providers, subject to applicable law and your privacy choices.
• Professional advisers, including legal, accounting, audit and insurance advisers where necessary.
• Companies within our corporate group where there is a lawful basis for the sharing.
• Regulators, law-enforcement authorities, courts or other public bodies where disclosure is required or permitted by law.
• Relevant parties in connection with a proposed or completed sale, merger, restructuring or transfer of all or part of our business, subject to appropriate safeguards.
We may also share information where you ask or authorise us to do so, for example when using certain third-party integrations or social media features.
We do not permit service providers acting on our behalf to use your personal information for their own purposes except where permitted by law or expressly described in their own applicable privacy notices.
6. RELATIONSHIP WITH SHOPIFY
Our Services are hosted by Shopify. Shopify collects and processes personal information relating to your access to and use of our store in order to provide and improve its services.
Information submitted through our store may be transmitted to Shopify and to service providers located in countries other than the country in which you live. Shopify may also process information about your interactions with our store and, where applicable, other Shopify merchants and Shopify services in connection with features it provides.
In circumstances where Shopify determines the purposes and means of its own processing, Shopify is responsible for that processing and for responding to relevant requests concerning that processing.
To learn more, please review Shopify's Consumer Privacy Policy and Shopify Privacy Controls:
Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers
Shopify Privacy Controls: https://privacy.shopify.com/en
7. THIRD-PARTY WEBSITES AND SERVICES
Our Services may contain links to websites, social media platforms or other online services operated by third parties. If you follow a link to a third-party service, its own privacy and security practices will apply.
We are not responsible for the privacy practices, security or content of third-party services that we do not control. We encourage you to review the relevant privacy notice before providing personal information to a third party.
Information that you choose to make public on social media or other public or semi-public platforms may be visible to other users of those platforms.
8. CHILDREN'S PRIVACY
Our Services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16.
If you are a parent or guardian and believe that a child has provided us with personal information, please contact us using the details below. Where appropriate, we will take steps to delete that information.
9. SECURITY AND RETENTION
We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure. However, no method of transmission or storage can be guaranteed to be completely secure.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to fulfil orders, maintain customer accounts, comply with legal, tax and accounting requirements, resolve disputes and enforce our agreements.
Different categories of personal information may therefore be retained for different periods. When determining retention periods, we consider the nature and sensitivity of the information, the purposes for which it is processed, applicable legal and regulatory requirements and whether the information is needed to establish, exercise or defend legal claims.
When personal information is no longer required, we will delete or anonymise it in accordance with applicable law and our retention practices.
10. YOUR RIGHTS AND CHOICES
If you are in the United Kingdom, you may have the following rights under data protection law, subject to applicable conditions and exceptions:
• Access - to request a copy of the personal information we hold about you.
• Correction - to ask us to correct inaccurate or incomplete personal information.
• Erasure - to ask us to delete your personal information in certain circumstances.
• Restriction - to ask us to restrict how we use your personal information in certain circumstances.
• Data portability - to receive certain personal information in a structured, commonly used and machine-readable format and, where applicable, ask us to transfer it to another organisation.
• Withdrawal of consent - where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
RIGHT TO OBJECT: You have the right to object at any time to the use of your personal information for direct marketing. You may also have the right to object to certain processing based on our legitimate interests.
You can opt out of promotional emails at any time using the unsubscribe link in our emails. We may still send you non-marketing communications relating to your account, orders or transactions.
To exercise your rights, please contact us using the details in the Contact section below. We may need to request information to verify your identity before responding to certain requests.
If you are located outside the United Kingdom, you may have additional or different privacy rights under the laws that apply where you live. We will honour applicable rights as required by law.
For rights relating to personal information processed independently by Shopify, please refer to Shopify's privacy information and privacy controls.
11. COMPLAINTS
If you have concerns about how we use your personal information, please contact us first so that we can try to resolve your concern.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. You can find information about making a complaint on the ICO website:
Information Commissioner's Office: https://ico.org.uk/
If you live outside the United Kingdom, you may also have the right to complain to the relevant data protection authority in the country where you live.
12. INTERNATIONAL TRANSFERS
Some of our service providers, including Shopify, may process or store personal information outside the United Kingdom.
Where we make a restricted transfer of personal information outside the United Kingdom, we will ensure that an appropriate safeguard or other lawful transfer mechanism is used where required. Depending on the circumstances, this may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another mechanism permitted by applicable data protection law.
You may contact us using the details below if you would like further information about the safeguards used for relevant international transfers.
13. COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies to operate our website, remember your preferences, understand how our Services are used and, where you consent, support analytics, personalisation and advertising.
Some cookies and similar technologies are strictly necessary for the website to function and may be used without consent where permitted by law. For non-essential cookies and similar technologies, we will ask for your consent where required before they are used.
You can manage or withdraw your choices through the Privacy Preferences or cookie settings available on our website. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
For more information about the cookies and similar technologies we use, their purposes, providers and duration, please see our Cookie Policy.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our practices, Services, technology, legal or regulatory requirements, or for other operational reasons.
We will publish the updated Privacy Policy on our website and update the 'Last updated' date. Where required by law, we will provide additional notice of material changes.
15. CONTACT
If you have any questions about this Privacy Policy, our privacy practices or your personal information, or if you would like to exercise your data protection rights, please contact us:
Lipstick Retail Ltd, trading as Lipstick London
3rd Floor, 9 Hatton Street
London NW8 8PL
United Kingdom
Email: contactus@lipsticklondon.com
For the purposes of applicable data protection law, Lipstick Retail Ltd is the data controller responsible for the personal information described in this Privacy Policy.
