Privacy & Cookies

As well as caring for your skin, we’re committed to protecting and respecting your personal information. 

WHAT DO WE DO WITH YOUR INFORMATION?

We collect information from you under the following circumstances: 

When you purchase something from our website, as part of the buying and selling process, we collect the personal information you give us such as your name, address, phone number and email address.

• When you register for an account on our website, we collect your name, address and contact details including telephone number and email address.
• When you complete online forms, take part in surveys, write posts on any message boards, post any blogs, or enter any competitions or prize draws, we may collect your name, address and contact details including telephone number and email address.
• When you contact us offline, for example by telephone, fax, email or post, we may collect your name, address and contact details including telephone number and email address.
• When you visit or browse our website, we collect information about your website visit or use of our products using cookies (see cookie section below for more information).

We will hold your personal information on our systems only for as long as is necessary for the relevant activity. 

OUR LEGAL BASIS FOR PROCESSING PERSONAL DATA

We process your personal data based upon the following lawful bases: 

• Consent: You have given clear consent for us to process your personal data for a specific purpose. 

• Contract: The processing is necessary for a contract we have with the you, or because you have asked us to take specific steps before entering into a contract. 

• Legal obligation: The processing is necessary for us to comply with the law (not including contractual obligations). 

• Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.  

CONSENT 

How do you get my consent?

When you provide us with personal information to complete a transaction, verify your payment card, place an order, arrange for a delivery or return a purchase, we understand that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will ask you directly for your expressed consent and provide you with an opportunity to say no.

How do I withdraw my consent?

If you change your mind after you opt in, you may at any time withdraw your consent for us to contact you, and for the continued collection, use or disclosure of your information, by using any ‘unsubscribe’ link in marketing received, by contacting us at info@tropicskincare.com, or mailing us at Tropic Skincare Unit 2A & 2B Beddington Lane Industrial Estate, Beddington Lane, Croydon, Surrey, CR0 4TD, United Kingdom. 

DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

SHOPIFY

Our website is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

TEXT AND EMAIL MARKETING NOTIFICATIONS

We are using a CX platform for all SMS and Email marketing communications, which is subject to the following terms and conditions. By opting in for our text marketing and notifications, you agree to these terms and conditions. For full details of this vendor please review our vendor table.

By entering your phone number in the checkout and initialising a purchase, subscribing via our subscription form or a keyword, you agree that we may send you text notifications (for your order, including abandoned cart reminders) and text marketing offers. You acknowledge that consent is not a condition for any purchase.
Your phone number, name, and purchase information will be shared with our CX Platform “Ometria”. This data will be used for sending you targeted marketing messages and notifications. Upon sending the text messages, your phone number will be passed to a text messages operator to fulfil their delivery.
If you wish to unsubscribe from receiving text marketing messages and notifications reply with STOP to any mobile message sent from us or use the unsubscribe link we provided you within any of our messages. You understand and agree that alternative methods of opting out, such as using alternative words or requests will not be accounted as a reasonable means of opting out. Message and data rates may apply.
For any questions please text "HELP" to the number you received the messages from. You can also contact us for more information. If you wish to opt out please follow the procedures above.

By entering your email address in the checkout and initialising a purchase, subscribing via our subscription form or a keyword, you agree that we may send you email notifications (for your order, including abandoned cart reminders). You acknowledge that consent is not a condition for any purchase. Your email, name, and purchase information will be shared with our CX platform "Ometria”. This data will be used for sending you abandoned cart emails and targeted marketing messages and notifications.

If you wish to unsubscribe from receiving email marketing messages and notifications use the unsubscribe link we provided you within any of our email communications.

PAYMENT

We will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. We will never store your credit/debit card information on our website. All electronic transactions you make to or receive from us will be encrypted using SSL technology delivered by “Let’s Encrypt” and will be transferred and processed by Shopify Payments, PayPal and ClearPay. Data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. You are responsible for keeping your password and user details confidential. We will not ask you for your password.

THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. 

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. 

Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service. 

LINKS 

When you click on links on our website, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practice to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your payment card information, the information is encrypted using secure socket layer technology (SSL). Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

Non-sensitive details (your email address etc.) are transmitted normally over the internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

COOKIES

We use cookies to ensure that we give you the best experience on our website. 'Cookies' are small pieces of information stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. For example, we use cookies to store your country preference. This helps us to improve our website and deliver a better, more personalised service.

If you continue without changing your settings, we'll assume that you are happy to receive all cookies on the Tropic website. However, if you would like to, you can change your cookie settings at any time. Here is a list of cookies that we use. We’ve listed them here so you can choose if you want to opt-out of cookies or not.

 

gs_v_GSN-636966-N	A cookie to anonymously count the visitors of this website (new visitor to an existing one). Expires after 695 days.
__utma           __utmc            __utmz __utmb            __utmt	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
_hjIncludedInSample	Lets Hotjar know whether that visitor is included in the sample which is used to generate funnels. Expires after session.
gs_u_GSN-636966-N	A cookie to anonymously count the visitors of this website (last page visited within the website) for the duration of the session. Expires after 694 days.
__atuvc __atuvs	These 3rd party __atuvc and _atuvs cookies are persistent cookies that are created and read by the AddThis social sharing site in order to make sure you see the updated count if you share a page and return to it before our share count cache is updated. __atuvc expires after 2 years, __atuvs expires after 30 minutes.
frontend	This cookie is essential for our site to make your browsing experience more convenient, for example, by allowing you to store items in an electronic shopping basket between visits. If you register with us or complete our online forms, we will use cookies to remember your details during your current visit, and any future visits provided the cookie was not deleted in the interim.

 

List of 3rd party cookies Cookies deployed by our website:

 

VISITOR_INFO1_LIVE PREF  YSC	These cookies are used to collect anonymous statistics and performance data for embedded YouTube videos on our website. VISITOR_INFO1_LIVE and PREF have no expiry date and YSC expires after the session.
test_cookie	This cookie is used by DoubleClick to check if the user's browser supports cookies.
IDE	Used for serving targeted advertisements that are relevant to you across the web. Targeted advertisements may be displayed to you based on your previous visits to this website.
External_no_cache	Magento cookie that indicates whether cache is enabled or not.
uvc xtc di2 bt2 uid vc loc ck oo Pt sess uuid2 mus	These cookies track usage of the Addthis.com service. It allows a user to share a webpage with many social sites. They expire after 1 year.
PHPSESSID	This cookie stores the logged in user's username and a 128bit encrypted key. This information is required to allow a user to stay logged in to a web site without needing to submit their username and password for each page visited. Without this cookie, a user is unable to proceed to areas of the web site that require authenticated access. Expires after 1 year.
Mage	Messages used by Magento caching to improve website speed.
exp_last_visit exp_last_activity Exp_tracker exp_csrf_token exp_shortlist_session_id            Exp_cartthrob_session_id	These cookies are used to improve the user experience of the website by building up anonymous data profiles that enable us to understand user journeys and behaviour across the site They all expire after the session except exp_shortlist_session_id and exp_cartthrob_session_id which expire after 1 week.
TDID TDCPM	Set by the CloudFlare service to register a unique ID that identifies a returning user’s device. The ID is used for targeted ads. Expire after 1 year.
SEUNCY	Registers a unique ID that identifies the user's device for return visits. Expires after 180 days.
bkdc	This cookie is generated by double-click floodlight tags. This cookie holds random strings. Expires after 30 days.
Bku	This cookie is generated by double-click floodlight tags. This cookie holds random strings. Expires after 180 days
TapAd_TS TapAd_DID	Both these cookies provide technology to track users across devices to enhance targeting capabilities
wfivefivec	Collects data on the user's visits to the website, such as what pages have been loaded. The registered data is used for targeted ads. Expires after 1 year.
Matchaddthis	Advertising cookie used by www.w55c.net for marketing. Expires after 30 days
_cc_cc	Collects anonymous statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to segment the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising. Expires after session.
_cc_aud _cc_id _cc_dc B- unknown Wui - unknown	Collects anonymous statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to segment the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising. All expire 270 days after session.
AFFICHE_W	Tracking cookie enables DoubleClick to build up a detailed picture of your interests and your browsing habits in order to display adverts which they believe will be of interest to you.
Wam-sync targeting/advertising	WAM software controls what users can access when using a web browser to interact with web-based enterprise assets. Expires 1 week after session.

 

ANALYTICAL TRACKING

Our website has Google Analytics installed which allows us to track and compile anonymous visitor statistics. The information collected ranges from simple traffic volume to the type of browser you are viewing our website with. This information is valuable to us not just for marketing analysis and quantification, but to improve the usability, security and load speed of our website content. Google Analytics is a popular, secure, flagship webmaster product from Google. The privacy and security of Google Analytics data is a high priority at Google that you can read more about on Google's Analytics Data Safeguarding page. Google also offer a Google Analytics Opt-out Browser Add-on that will allow you to automatically Opt-out of all websites that track your activity via Google Analytics. No personal information is collected by Google Analytics.

SOCIAL NETWORK SHARING

We encourage users to share our content and/or like our own profile on the popular Social Media websites Facebook, Twitter, YouTube, Google+ and LinkedIn. In order to make 'Social Sharing' accessible, our website utilises widgets either provided directly from the Social Networks and/or via amalgamated widgets from third parties such as AddThis. Cookies and privacy implications from the social networks vary and will be dependent on your nominated privacy settings with each Social Network. Social Sharing buttons will only deploy cookies if you are signed in to that respective Social Network at the time of being on our website.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our website is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information please contact our Support Team by email at info@tropicskincare.com or our Privacy Compliance Officer at privacy@tropicskincare.com, alternatively you can write to us at Data Privacy Officer, Tropic Skincare Limited, 115-117 Beddington Lane, Croydon, England CR0 4TD.

 

©Tropic Skincare Limited, 115-117 Beddington Lane, Croydon, England CR0 4TD

Company Registration: 7840950
VAT Registration Number: 123916914