Privacy and Cookie Policy

Last updated: 3 August 2026

Medico Beauty Limited respects your privacy and is committed to protecting your personal information. This Privacy and Cookie Policy explains what information we collect, why we collect it, how we use it and the choices and rights available to you.

It applies when you:

  • visit the Medico Beauty website on which this policy appears;

  • use our skin quiz, routine finder or expert-advice services;

  • sign up for email, SMS or WhatsApp communications;

  • download one of our skincare guides;

  • contact our customer-care team;

  • participate in our rewards or referral programmes;

  • provide a skin photograph, testimonial or before-and-after story; or

  • follow a link from this website to purchase through our main Medico Beauty shop.

1. Who we are

Medico Beauty Limited is the controller responsible for the personal information described in this policy.

Company: Medico Beauty Limited
Company number: 03779950
Registered office: 5 Luke Street, London, EC2A 4PX
Email:enquiries@medicobeauty.com
Freephone: 0808 258 4000

When we use the words “Medico Beauty”, “we”, “us” or “our”, we mean Medico Beauty Limited.

2. The information we collect

The information we collect depends on how you interact with us.

Information you give us

This may include:

  • your name;

  • email address;

  • telephone number;

  • delivery and billing address;

  • account or rewards-programme details;

  • purchases, returns and payment status;

  • products you have used or purchased;

  • your skincare concerns, preferences and routine;

  • answers submitted through a skin quiz or routine finder;

  • messages sent to our customer-care or expert-advice team;

  • photographs you choose to submit;

  • reviews, testimonials and before-and-after stories;

  • marketing preferences;

  • referral information;

  • competition or promotion entries; and

  • any other information you choose to provide.

We do not normally receive or store your complete payment-card information. Payment details are handled by the payment provider shown during checkout.

Skin and health-related information

Answers about rosacea, acne, allergies, pregnancy, medication, sensitivity or other health-related matters may constitute special-category personal information under data-protection law.

We will only ask for this information when it is relevant to the service you have requested. Where required, we rely on your explicit consent to use it.

You do not have to provide health-related information or a photograph. However, this may limit our ability to provide personalised skincare guidance.

Our skincare guidance is educational and cosmetic in nature. It is not medical diagnosis or medical treatment.

Information collected automatically

When you use our website, we may collect:

  • your IP address;

  • browser and device type;

  • operating system;

  • approximate location derived from your IP address;

  • pages viewed and links selected;

  • time spent on the website;

  • referring website or advertising source;

  • cookie identifiers;

  • interactions with forms, emails or marketing messages; and

  • diagnostic, security and error information.

We collect some of this information through cookies and similar technologies.

Information received from other sources

We may receive information from:

  • Squarespace, which supports or hosts parts of the website;

  • Shopify and our main Medico Beauty online shop;

  • payment providers;

  • delivery and fulfilment partners;

  • Klaviyo and other email or messaging platforms;

  • WhatsApp, Meta and SMS service providers;

  • rewards and referral platforms;

  • customer-service platforms;

  • analytics providers;

  • advertising platforms;

  • social-media platforms; and

  • professional skincare experts participating in our referral programme.

3. How we use your information

We use personal information to:

  • operate and secure the website;

  • provide a skin quiz, routine finder or expert-advice service;

  • recommend relevant skincare products or educational content;

  • respond to enquiries and customer-service requests;

  • process purchases, payments, deliveries, returns and refunds;

  • manage customer accounts, rewards and referrals;

  • provide downloadable guides and requested information;

  • send service, account and order messages;

  • send marketing where permitted;

  • personalise website content and communications;

  • understand how customers use the website;

  • measure the performance of campaigns;

  • prevent fraud, misuse and security incidents;

  • maintain appropriate business and financial records;

  • manage complaints and disputes;

  • meet product-safety and regulatory obligations;

  • establish, exercise or defend legal claims; and

  • comply with applicable law.

4. Our lawful bases

Data-protection law requires us to have a lawful reason for using personal information.

We rely on the following lawful bases.

Contract

We use information when it is necessary to:

  • process an order;

  • provide a requested service;

  • manage an account;

  • fulfil rewards or referral benefits;

  • arrange delivery or returns; or

  • respond to a request made before entering into a contract.

Consent

We rely on consent for activities including:

  • non-essential cookies;

  • certain analytics and advertising technologies;

  • email, SMS or WhatsApp marketing where consent is required;

  • processing health-related information where explicit consent is required;

  • using photographs, reviews or testimonials publicly; and

  • publishing before-and-after stories.

You can withdraw your consent at any time. Withdrawing consent does not affect any processing that took place before it was withdrawn.

Legitimate interests

We may use information where it is reasonably necessary for our legitimate business interests, including:

  • operating and improving the website;

  • providing customer service;

  • protecting our business and customers;

  • preventing fraud and misuse;

  • maintaining records;

  • understanding the performance of our services;

  • personalising content; and

  • sending limited marketing to existing customers where permitted by law.

We consider the effect on your privacy before relying on legitimate interests.

Legal obligation

We may use or retain information when necessary to comply with tax, accounting, consumer-protection, product-safety, regulatory or other legal obligations.

Special-category information

Where information reveals or concerns your health, our Article 6 lawful basis will normally be consent or contract, depending on the service requested.

Our additional Article 9 condition will normally be your explicit consent.

We will not use skin or health-related information for unrelated advertising without your explicit permission.

5. Skin quizzes and routine recommendations

Our quizzes and routine finders may use your answers to place you into a general skincare-concern category and display suitable educational content or product options.

These recommendations do not produce legal or similarly significant effects. They are not medical decisions.

You may contact us for human assistance if you would prefer an expert to review your skincare concerns.

6. Email, SMS and WhatsApp

If you sign up for marketing, we may contact you through email, SMS or WhatsApp with:

  • skincare guidance;

  • product recommendations;

  • new-product information;

  • offers and promotions;

  • rewards updates;

  • reminders; and

  • invitations to complete your routine or skin quiz.

We may use Klaviyo, WhatsApp, Meta, DelightChat or other messaging providers to deliver these communications.

We may also send non-marketing service messages relating to an order, account, enquiry or requested service.

You can stop marketing at any time by:

  • selecting the unsubscribe link in an email;

  • following the opt-out instructions in an SMS or WhatsApp message;

  • replying STOP where that option is provided;

  • changing your account preferences; or

  • contacting enquiries@medicobeauty.com.

Opting out of marketing will not prevent essential order or customer-service messages.

We do not sell or share SMS or WhatsApp opt-in information with unrelated organisations for their own marketing.

7. Cookies and similar technologies

Cookies are small files or identifiers placed on or accessed from your device.

We may use the following categories.

Strictly necessary cookies

These are required for the website to work, remain secure, remember privacy choices or provide a service you requested.

Consent is not normally required for strictly necessary cookies.

Preference cookies

These remember choices such as language, location or website settings.

Analytics cookies

These help us understand how visitors find and use the website, which pages are most useful and whether technical problems occur.

Advertising cookies

These may be used to:

  • measure advertising;

  • understand whether an advert led to a website visit or purchase;

  • build marketing audiences; and

  • show more relevant advertising on other websites or platforms.

Providers may include Google and Meta where those services are enabled.

We will not place or access non-essential cookies until you have made a choice through the cookie banner, except where the law permits otherwise.

You can accept, reject or change your cookie choices through the Cookie Settings link on the website.

A current list of cookies, providers, purposes and durations should be available through the website’s cookie settings or cookie declaration.

Disabling certain cookies may affect optional website features but should not prevent access to the basic website.

8. When we share information

We may share personal information with trusted organisations that help us operate our business, including:

  • Squarespace and website-support providers;

  • Shopify and ecommerce providers;

  • payment processors;

  • fulfilment centres, warehouses and couriers;

  • Klaviyo and other email or marketing platforms;

  • WhatsApp, Meta, SMS carriers and messaging providers;

  • customer-service and communications platforms;

  • analytics, advertising and conversion-measurement providers;

  • rewards and referral-programme providers;

  • IT, hosting, security and data-storage providers;

  • professional skincare experts involved in a referral;

  • accountants, auditors, insurers, lawyers and professional advisers;

  • regulators, courts, law-enforcement agencies or public authorities; and

  • a purchaser or successor if our business or assets are reorganised, sold or transferred.

These organisations may act as our processors, independent controllers or, in limited cases, joint controllers.

We require service providers acting on our behalf to protect personal information and use it only for authorised purposes.

We do not sell personal information.

9. Referrals

If you participate in a referral programme, we may share limited information with the skincare professional or referral partner connected with the referral.

This may include confirmation that a qualifying registration or purchase occurred and the information needed to calculate or administer a reward.

We do not share payment-card information or detailed skincare information with a referral partner unless you have specifically requested or authorised this.

10. Photographs, reviews and customer stories

If you provide a skin photograph, review, testimonial or before-and-after story, we will explain how we intend to use it.

Providing material for private skincare guidance does not automatically give us permission to publish it.

We will obtain separate permission before using identifiable photographs, names, quotations or stories publicly for advertising, education or case studies.

You may withdraw permission for future use by contacting us. We will take reasonable steps to stop new uses, although we may not be able to recall materials already printed, distributed or lawfully published.

11. International transfers

Some of our service providers may process information outside the United Kingdom or European Economic Area.

Where required, we use appropriate safeguards such as:

  • a UK adequacy regulation;

  • an EU adequacy decision;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to the EU Standard Contractual Clauses;

  • EU Standard Contractual Clauses; or

  • another transfer mechanism permitted by applicable law.

You can contact us if you would like more information about the safeguards used for a particular transfer.

12. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting or reporting requirements.

Our anticipated retention periods are:

  • Orders, invoices and financial records: generally seven years after the relevant transaction.

  • Customer accounts: while the account remains active and for up to six years afterwards where required for legal or record-keeping purposes.

  • Customer-service records and general enquiries: normally up to three years after the last interaction.

  • Skin quizzes and personalised routine information: normally up to three years after the last interaction.

  • Skin photographs and health-related information: normally up to two years after the last relevant consultation or interaction, unless you request earlier deletion or agree to a longer period.

  • Marketing information: until you unsubscribe, withdraw consent or remain inactive for the period set by our retention process.

  • Cookie and analytics information: for the duration stated in the website’s cookie settings.

  • Testimonials and case studies: for as long as the material remains in use, subject to the permission given and any withdrawal request.

  • Fraud, security and legal records: for as long as reasonably necessary to protect our rights, meet legal obligations or resolve a dispute.

We may retain limited suppression information after you unsubscribe so that we can respect your request and avoid contacting you again.

Some information may be anonymised so that it can no longer identify you. Anonymised information may be retained for statistical or business-analysis purposes.

13. Your rights

Depending on where you live and the circumstances, you may have the right to:

  • receive information about how we use your data;

  • request access to the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to erase information;

  • ask us to restrict its use;

  • object to processing based on legitimate interests;

  • object to direct marketing at any time;

  • receive certain information in a portable format;

  • withdraw consent;

  • complain about our use of your information; and

  • request human review of certain automated decisions, where applicable.

These rights are not absolute and may be subject to legal exceptions.

To exercise a right, email enquiries@medicobeauty.com or use the Customer Data Request page on our website.

We may ask for information to verify your identity before completing a request.

We will normally respond within one month, although the law may allow additional time for a complex request.

14. Complaints

Please contact us first so that we have an opportunity to resolve your concern.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk

If you are located in the European Economic Area, you may also have the right to complain to the supervisory authority in your country.

15. Security

We use appropriate organisational and technical measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

Access is limited to people and service providers who need the information for an authorised purpose.

No internet service can be guaranteed to be completely secure. Please use care when sending sensitive information by email or through an online form.

16. Children

Our website and skincare services are intended for adults.

We do not knowingly collect personal information directly from anyone under 18 without appropriate parental or guardian involvement.

If you believe a child has provided personal information to us, please contact enquiries@medicobeauty.com.

17. Third-party websites

Our website may contain links to other websites, including our main ecommerce store, social-media pages and external professional services.

Those websites may collect information under their own privacy policies. We are not responsible for the privacy practices of websites we do not control.

We encourage you to review the privacy information shown on any external website you visit.

18. Changes to this policy

We may update this policy when our services, technology or legal obligations change.

The latest version will be published on this page with a revised “Last updated” date.

If a change materially affects how we use personal information, we will provide an appropriate additional notice.

19. Contact us

For questions, requests or complaints concerning privacy, contact:

Medico Beauty Limited
5 Luke Street
London
EC2A 4PX

Email: enquiries@medicobeauty.com
Freephone: 0808 258 4000