Privacy Policy

Last updated: August 17, 2026

Dermévia operates this online store and website, including the related information, content, features, products, tools and services made available through it (collectively, the “Services”).

Our store is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and Services to you.

This Privacy Policy explains how Dermévia collects, uses, stores and shares your personal information when you visit our website, make a purchase, interact with our Services or otherwise communicate with us.

This Privacy Policy is intended primarily for customers and visitors located in the United Kingdom and is designed to reflect applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

Please read this Privacy Policy carefully.

Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you.

Depending on how you interact with Dermévia, we may collect and process the following categories of personal information:

Contact information

• Name
• Email address
• Telephone number
• Billing address
• Shipping address

Order and transaction information

• Products viewed or purchased
• Items added to your basket
• Order history
• Returns, refunds and cancellations
• Shipping and delivery information
• Payment status and transaction details

Payment information

Payments may be processed by third-party payment providers. Depending on the payment method you select, these providers may process information such as your payment card details, billing information and transaction information.

Dermévia does not necessarily receive or store your complete payment card information.

Account information

If you create an account with us, we may process information including your:

• Username
• Password or authentication information
• Preferences
• Account settings

Communications

When you contact us, we may collect the information you provide in your message, including customer service requests, questions, complaints, returns or other correspondence.

Device and technical information

When you use our website, certain information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Network information
• Cookie identifiers
• Other online identifiers

Website usage information

We may collect information about how you interact with our website, including pages viewed, products viewed, links clicked, time spent on pages and interactions with our store.

How We Collect Your Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, contact us, subscribe to marketing communications or otherwise provide information to us.
• Automatically when you browse or interact with our website, including through cookies and similar technologies.
• From service providers that help us operate our website and fulfil orders.
• From payment processors, delivery partners, marketing platforms and other third parties where permitted by law.

How We Use Your Personal Information

We may process your personal information for the following purposes:

Providing Our Services

We use personal information to operate our store and fulfil our contractual obligations to you.

This may include:

• Processing and confirming orders
• Processing payments
• Arranging shipping and delivery
• Providing order and tracking information
• Processing returns, refunds or exchanges
• Managing customer accounts
• Responding to customer service requests
• Remembering your preferences
• Providing relevant product recommendations
• Maintaining and improving our website

Marketing and Advertising

Where permitted by applicable law, we may use personal information to provide marketing and promotional communications.

This may include sending promotional emails or displaying advertisements that may be relevant to your interests.

Where consent is required, we will ask for your consent before sending such communications or using non-essential cookies and similar technologies.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails.

Security and Fraud Prevention

We may use personal information to:

• Protect our customers and our business
• Detect and prevent fraud
• Investigate suspicious transactions
• Protect our website and systems
• Prevent malicious or illegal activity
• Verify transactions or account activity

Customer Communication

We use your information to communicate with you about your orders, enquiries, returns, refunds, delivery updates and other customer service matters.

Legal and Regulatory Obligations

We may process or disclose information where necessary to:

• Comply with UK laws and regulations
• Meet tax, accounting and record-keeping requirements
• Respond to lawful requests from courts, regulators or government authorities
• Establish, exercise or defend legal claims
• Enforce our Terms of Service and other policies

Lawful Bases for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

Contract

We process information where necessary to enter into or perform a contract with you, such as processing and delivering your order.

Legitimate interests

We may process information where necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

This may include improving our Services, preventing fraud, protecting our business and understanding how customers use our website.

Consent

Where required, we may process your information based on your consent, including for certain marketing communications and cookies.

You may withdraw your consent at any time.

Legal obligation

We may process information where necessary to comply with applicable legal or regulatory requirements.

How We Share Personal Information

We may share personal information with third parties where necessary to operate Dermévia and provide our Services.

These may include:

• Shopify and ecommerce technology providers
• Payment processors
• Shipping and fulfilment providers
• Delivery and courier companies
• Customer service providers
• IT and website hosting providers
• Cloud storage providers
• Analytics providers
• Marketing and advertising providers
• Fraud prevention and security providers
• Professional advisers such as accountants or legal advisers

We may also disclose information when required by law, regulation, legal process or a valid request from an authorised UK authority.

If Dermévia undergoes a merger, acquisition, restructuring, sale or other business transaction, relevant personal information may also be transferred as part of that transaction, subject to applicable law.

Our Relationship with Shopify

Our online store is powered by Shopify.

Shopify may collect and process personal information about your access to and use of our store in order to provide its ecommerce services.

Information submitted through our store may therefore be transmitted to Shopify and other service providers that assist in providing the Services.

Some of these providers may operate outside the United Kingdom.

Shopify may also process certain information independently in accordance with its own privacy practices.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the store, remember preferences, analyse website usage and, where permitted, support advertising and marketing activities.

Some cookies are strictly necessary for the website to function.

For non-essential cookies, we will obtain consent where required under applicable UK law.

You can manage your cookie preferences through the cookie controls available on our website and, where applicable, through your browser settings.

Third-Party Websites and Links

Our Services may contain links to third-party websites or platforms.

If you follow a link to a third-party website, that website will operate according to its own privacy policy and terms.

Dermévia is not responsible for the privacy, security, accuracy or practices of third-party websites that we do not control.

We recommend reviewing the privacy policy of any third-party service before providing personal information.

Children's Privacy

Dermévia's Services are intended for adults and are not directed at children.

We do not knowingly collect personal information from children in circumstances where doing so would be prohibited by applicable UK law.

If you believe a child has provided personal information to us improperly, please contact us so that we can review the matter and, where appropriate, delete the information.

Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Please avoid sending sensitive or confidential information through unsecured communication channels.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

The exact retention period depends on the type of information and why we process it.

For example, we may retain certain order and transaction information where necessary to:

• Fulfil orders
• Manage customer accounts
• Provide customer support
• Handle disputes or chargebacks
• Prevent fraud
• Comply with tax and accounting obligations
• Meet other legal requirements

When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

Your Rights Under UK Data Protection Law

If you are located in the United Kingdom, you may have various rights regarding your personal information, subject to applicable conditions and exceptions.

These may include:

Right of access

You may request information about the personal data we hold about you and obtain a copy of that information.

Right to rectification

You may ask us to correct personal information that is inaccurate or incomplete.

Right to erasure

In certain circumstances, you may request deletion of your personal information.

Right to restrict processing

You may have the right to ask us to restrict how we process your personal information in certain circumstances.

Right to object

You may object to certain types of processing, including certain processing based on legitimate interests and direct marketing.

Right to data portability

Where applicable, you may request to receive certain personal information in a structured, commonly used and machine-readable format or ask for it to be transferred to another organisation.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

Rights relating to automated decision-making

Where applicable under UK law, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, please contact us using the details provided below.

We may need to verify your identity before completing your request.

Marketing Preferences

You can unsubscribe from promotional emails at any time by clicking the unsubscribe link contained in our marketing emails.

Even if you unsubscribe from marketing communications, we may still contact you with non-promotional messages that are necessary to provide our Services, such as:

• Order confirmations
• Shipping notifications
• Tracking information
• Customer service communications
• Refund or return information
• Important account or security notices

International Data Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps where required by UK data protection law to ensure that the information receives an appropriate level of protection.

Depending on the destination and circumstances, this may include relying on UK adequacy regulations or appropriate contractual safeguards recognised under UK data protection law.

Complaints

If you have concerns about how Dermévia processes your personal information, please contact us first so that we can investigate and attempt to resolve your concern.

If you are located in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business practices, Services, technology, legal requirements or regulatory obligations.

When we update this Privacy Policy, we will publish the revised version on our website and update the “Last updated” date above.

We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise your data protection rights, please contact us:

Email: info@dermévia.com

Business hours:
Monday – Friday: 09:00–17:00

Dermévia