Last updated: 8 November 2026
Protecting your personal data matters to us. This policy explains what data we collect, why, how long we keep it and how to exercise your rights, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data controller
DERMASILEC LLC, 1209 Mountain Road Pl NE, Albuquerque, NM 87110, United States, registered under number 008122889 (New Mexico).
Data protection contact: Tatiana Guignard, contact@dermasilec.com.
UK representative (Article 27 UK GDPR): [TO COMPLETE: name and UK address].
2. Data we collect
- Identity and contact details: name, delivery and billing address, email address, phone number.
- Orders: products bought, amounts, history, exchanges with customer service, return or refund requests.
- Payment: card details are handled directly by our secure payment provider; we never have full access to them and do not store them.
- Browsing: IP address, device and browser type, pages viewed, via cookies (see section 8).
- Newsletter: your email address if you sign up.
We do not routinely collect health data. If you choose to tell us, for example, that you are pregnant or have had a reaction to a product, we use this only to answer your request or for cosmetic safety monitoring, and delete it once it is no longer needed.
3. Purposes and legal bases
- Processing and delivering orders, returns, refunds and customer service: performance of a contract.
- Invoicing, accounting and legal obligations (including cosmetic safety monitoring): legal obligation.
- Fraud prevention and website security: legitimate interests.
- Emails related to your purchase (tips for use, programme follow-up): legitimate interests, and you can object at any time.
- Newsletter and marketing offers: your consent, or for existing customers, legitimate interests for similar products; you can unsubscribe at any time via the link in every email.
- Analytics and personalised advertising: your consent, collected via the cookie banner.
4. Who receives your data
We never sell your data. Only authorised people and our service providers can access it, as far as necessary:
- Shopify (website hosting, order and payment management);
- our payment providers;
- our logistics partner and manufacturer, who prepare and ship orders: only your name, delivery address and phone number are shared;
- carriers responsible for delivery;
- our email tools and, if you agree, our analytics and advertising partners (for example Meta, TikTok, Google);
- public authorities, where the law requires it.
5. International transfers
DERMASILEC LLC is based in the United States, and some of our providers are located outside the UK, including Shopify (Canada, United States) and our logistics partner and manufacturer in China, which ships orders. These transfers are protected by appropriate safeguards under UK GDPR, such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, or rely on an adequacy decision where one exists. You can request a copy of these safeguards by emailing us.
6. How long we keep your data
- Order and customer data: for the duration of our relationship, then 3 years after your last purchase for marketing purposes.
- Invoices and accounting records: as long as the law requires (generally 6 years).
- Newsletter subscribers and prospects: 3 years after the last contact, or until you unsubscribe.
- Cookies: 13 months maximum; your cookie choice is kept for 6 months.
7. Your rights
You have the right to access, correct, delete, restrict, object to and port your data, and to withdraw your consent at any time.
To exercise these rights, email us at contact@dermasilec.com from the address used for your orders. If we have reasonable doubts about your identity, we may ask for additional information. We reply within one month.
If you think your rights have not been respected, you can complain to the Information Commissioner's Office (ICO): ico.org.uk.
8. Cookies
- strictly necessary cookies (basket, checkout, security, remembering your choices) do not require your consent;
- analytics and advertising cookies are only set with your consent, collected via the banner shown on your first visit.
You can change your choices at any time from the website's cookie settings link or your browser settings. Refusing non-essential cookies does not prevent you from ordering.
9. Security
We use appropriate technical and organisational measures (encrypted connection, restricted access, compliant providers) to protect your data against loss, unauthorised access or disclosure.
10. Children
This website is intended for adults. We do not knowingly collect data about children.
11. Changes
We may update this policy, in particular if regulations or our services change. The date of the latest update is shown at the top of this page.