Política de privacidad

Privacy Policy

Last updated: [20th October 2026]

This policy explains how Unique Skin Ltd collects and uses your personal data when you visit cellumauk.co.uk, buy from us or contact us. We are the UK distributor of Celluma LED light therapy devices.

1. Who we are

Unique Skin Ltd ("Unique Skin", "we", "us") is the data controller for personal data collected through this website. We are responsible for deciding how your data is used and for keeping it safe.

Unique Skin Ltd Unit 1, The Cam Centre Wilbury Way Hitchin Hertfordshire SG4 0TW United Kingdom

Company registration number: 09713343 (England and Wales) ICO registration number: ZB391744

For any question about this policy or your data, email info@uniqueskin.co.uk.

2. The data we collect

We collect the following personal data, mostly directly from you:

Identity and contact data: name, business name, email address, phone number, billing and delivery addresses.
Order data: products bought, order value, delivery details and order history.
Payment data: handled by our payment providers. We do not see or store your full card number.
Account data: login email and password if you create an account, plus saved addresses.
Communications: messages you send us by email, web form, live chat or phone. Calls may be recorded for training and quality purposes.
Professional data: for professional customers, your clinic or business details and any qualifications you share with us.
Device registration data: device serial number and purchase date if you register a Celluma device for warranty.
Marketing preferences: whether you have agreed to receive marketing from us.
Technical data: IP address, browser and device type, pages viewed and how you reached our site, collected through cookies (see our Cookie Policy below).
Reviews: if you leave a product review, your name and review content.

We do not knowingly collect special category data, such as health information. Please do not send us medical details unless we ask for them for a specific reason.

3. How we use your data

Under UK GDPR we must have a lawful basis for each use of your personal data.

What we use it for	Data used	Lawful basis
Processing and delivering your order, including returns	Identity, contact, order, payment	Contract
Managing your account	Identity, contact, account	Contract
Answering questions and providing customer service	Identity, contact, communications	Contract or legitimate interests (helping customers)
Registering devices and handling warranty claims	Identity, contact, device registration	Contract
Sending marketing emails or SMS	Identity, contact, marketing preferences	Consent (or soft opt-in for existing customers, see section 8)
Preventing fraud and keeping our website secure	Identity, order, technical	Legitimate interests (protecting our business and customers)
Improving our website and products	Technical, reviews	Legitimate interests (developing our business) or consent for non-essential cookies
Keeping accounting and tax records	Identity, order, payment	Legal obligation

Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that assessment.

4. If you do not provide your data

We need certain data to process an order or register a device. If you do not provide it, we may not be able to complete that order or service.

We only share personal data where needed for the purposes above. We never sell your data.

Website and e-commerce platform: Shopify, which hosts our store and processes orders.
Payment providers: Shopify Payments, Shop Pay, PayPal and Klarna. Each handles your payment details under its own privacy policy.
Couriers: delivery companies such as Royal Mail, DPD or DHL, who receive your name, address and contact details to deliver your order.
Email and marketing services: our email platform, used to send order updates and, with your consent, marketing.
Reviews services: to collect and display product reviews.
Analytics and advertising providers: such as Google and Meta, where you have consented to the relevant cookies.
Professional advisers: accountants, auditors, lawyers and insurers, where necessary.
Celluma (BioPhotas Inc.): the device manufacturer, only where needed to handle a warranty claim or product safety matter.
Authorities: HMRC, the police or other regulators where the law requires it.

If we sell or restructure our business, your data may pass to the new owner, who must use it in line with this policy.

Our service providers may only use your data on our instructions and must keep it secure.

6. International transfers

Some of our providers, including Shopify and Google, store or process data outside the UK. When this happens, we make sure your data is protected by one of the following:

the country has been found by the UK Government to provide adequate protection;
the transfer is covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses; or
the transfer is to a US company certified under the UK Extension to the EU-US Data Privacy Framework.

7. How long we keep your data

We keep personal data only as long as we need it for the purposes it was collected for.

Type of data	How long we keep it
Order, payment and invoice records	6 years after the end of the financial year, as required for tax
Customer account data	Until you close your account, or 3 years after your last order
Device registration and warranty data	For the warranty period plus 6 years
Customer service messages	3 years after the last contact
Marketing preferences	Until you unsubscribe, then a suppression record so we do not contact you again
Cookie data	See our Cookie Policy below

After these periods we delete or anonymise the data.

8. Marketing

We will only send you marketing emails or text messages if you have agreed to receive them. If you have bought from us, we may email you about similar products unless you opted out when you ordered (the "soft opt-in").

You can unsubscribe at any time by clicking the link in any marketing email, replying STOP to a text message, or emailing info@uniqueskin.co.uk. Unsubscribing does not affect messages about your orders.

If you sign up for SMS messages, standard network rates may apply.

9. Keeping your data secure

We use appropriate technical and organisational measures to protect your data from loss, misuse or unauthorised access. Access is limited to staff and providers who need it. Payments are processed over encrypted connections by our payment providers.

If a data breach is likely to put your rights at risk, we will tell you and the ICO where the law requires us to.

10. Your rights

Under UK data protection law you have the right to:

Access a copy of the personal data we hold about you.
Rectification: ask us to correct data that is wrong or incomplete.
Erasure: ask us to delete your data where there is no good reason for us to keep it.
Restriction: ask us to pause using your data, for example while a correction is checked.
Objection: object to our use of your data based on legitimate interests, and to direct marketing at any time.
Portability: receive data you gave us in a common electronic format, or have it sent to another organisation.
Withdraw consent at any time where we rely on consent. This does not affect anything we did before you withdrew it.

To use any of these rights, email info@uniqueskin.co.uk. There is usually no fee. We may ask you to confirm your identity, and we will reply within one month. This can be extended by two further months for complex or multiple requests, and we will tell you if so.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint or 0303 123 1113.

12. Children

Our website and products are not intended for children under 18, and we do not knowingly collect their personal data. If you believe a child has given us their data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will tell you by email or through a notice on our website.

14. Contact us

For any question about this policy or your personal data:

Email: info@uniqueskin.co.uk

Post: Data Protection, Unique Skin Ltd, Unit 1, The Cam Centre, Wilbury Way, Hitchin, Hertfordshire, SG4 0TW, United Kingdom

Cookies are small text files placed on your device when you visit a website. We use them to make our site work, to understand how it is used and, with your consent, for advertising.

Under UK law (PECR) we only use non-essential cookies if you agree to them. When you first visit our site, our cookie banner lets you accept or reject them.

Types of cookies we use

Type	What it does	Needs your consent?
Strictly necessary	Keeps your basket, lets you check out and log in, and keeps the site secure	No
Preferences	Remembers choices such as your region or cookie settings	Yes
Analytics	Tells us how visitors use the site, for example through Google Analytics, so we can improve it	Yes
Marketing	Lets us and our advertising partners, such as Google and Meta, show you relevant ads and measure them	Yes

Some cookies are set by third parties, such as Shopify, Google and Meta. These providers process data under their own privacy policies.

You can change your choice at any time through the cookie settings link at the bottom of our website.

You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site, such as checkout, from working. Guidance for common browsers:

To opt out of Google Analytics on all websites, you can install the Google Analytics opt-out add-on. For more about cookies and online advertising, visit youronlinechoices.com/uk.

If you have any questions about our use of cookies, email info@uniqueskin.co.uk