Privacy

Beyond Aesthetics is the controller of the personal information this shop uses. This notice explains what we collect, why, and who else sees it. It is written for UK GDPR and the Data Protection Act 2018.

What we collect

• Order details: your name, email, delivery address, the pieces and quantities, the totals, the order number, and the Square payment reference.
• Messages: the name, email, and note you send on the contact form.
• Basket: the piece ids and quantities, stored in this browser only.

Card numbers, expiry dates, and security codes are entered in Square’s form. They are not sent to or stored by this shop.

Why we use it

• To take payment, deliver the order, and show you the confirmation. The legal basis is the contract.
• To reply to a message and to deal with a cancellation, return, or fault. The legal basis is the contract, or our legitimate interest in answering you.
• To keep a record of the sale for as long as tax and accounting rules require. The legal basis is a legal obligation.

We do not use your details for advertising. We do not sell them. We do not create customer accounts.

Who else receives it

• Square, our card payment company, receives the card charge, the amount, and the billing details needed to take payment.
• A private Discord channel used by the studio receives the order: the pieces, the delivery address, the email, and the amount paid, so the order can be packed. The link that opens your confirmation page is not included.
• Vercel hosts the website and stores the order record. That storage is private to the studio.

Square, Discord, and Vercel may process information outside the United Kingdom. Where they do, they rely on the UK transfer rules, including adequacy regulations or standard contractual clauses.

How long we keep it

Order records are kept for as long as we need them to deliver, handle a return, and meet accounting duties, and then deleted. Contact messages are kept until the note has been dealt with and any follow-up is finished. The basket stays in your browser until you clear it or the site data for this shop.

Your rights

You can ask for a copy of your information, for a correction, for deletion, for us to restrict or stop a use based on legitimate interests, and for a portable copy of information you gave us. You can complain to the Information Commissioner’s Office at ico.org.uk. None of these rights is absolute. A request to delete an order may be refused while we still have to keep it for the law.

Ask through the contact form and include the email address used on the order so we can find it.

The basket and search

The basket is stored in local storage on your device. It is not sent to us until you check out. A search stays in the page address so a filtered shop link can be opened again. We do not keep a search log.

Also see the terms of sale, returns, privacy, and cookies pages. Questions can be sent through the contact form.