Privacy policy

Last updated: 11 October 2026

This policy explains what personal information we collect when you shop with us or get in touch, how we use it, who we share it with and the choices you have. We keep it as clear as we can, and we never sell your personal information.

Who we are

The Derma Company is the trading name of THEDERMACOMPANY LIMITED, a company registered in England and Wales (company number 04301847), at 365 Luton Road, Harpenden, AL5 3LZ, United Kingdom. We are the data controller for the personal information described in this policy.

If you have any questions about this policy or your information, email shop@thedermacompany.co.uk, call us on 01582 808829 or write to us at the address above.

At a glance

• We use your information to process and deliver your orders, look after your account and answer your questions.
• We only send marketing emails or texts if you've agreed to receive them, and you can unsubscribe at any time.
• We share information only with trusted providers who help us run our business, such as our payment, delivery and email partners.
• You can ask to see, correct or delete your information at any time.

Information we collect

Depending on how you use our website and services, we may collect:

• Contact details: your name, billing and delivery addresses, email address and phone number.
• Order details: what you buy, return or cancel, your order history and delivery preferences.
• Account details: your login details, saved addresses, wishlist, subscriptions and loyalty points.
• Payment details: payments are handled securely by our payment providers. We don't see or store your full card details.
• Skin consultation details: for some brands, such as Environ, we ask you to complete a consultation before you can buy. This may include information about your skin, your current routine and any treatments you're having, so we can make sure the products are suitable for you.
• Messages: anything you tell us when you email, call, message us on WhatsApp or use our contact forms.
• Reviews: your name, rating and comments if you leave a review.
• Device and usage information: your IP address, browser, device and how you use our website, collected through cookies and similar technologies.

How we use your information

Under UK data protection law, we must have a lawful reason for using your information. Here's what we use it for and why.

To fulfil your order and provide our services

We use your details to take payment, pack and deliver your order, process returns and refunds, manage your account, subscriptions and loyalty rewards, and keep you updated about your order. We need this information to carry out our contract with you.

To check products are suitable for you

We use your consultation answers to decide whether certain products are right for your skin, and to approve your account to buy them. Because this can include information about your health, we only use it with your explicit consent, which you give when you complete the consultation. You can withdraw your consent at any time, although we won't then be able to sell you products that need a consultation.

To help and support you

We use your messages and order history to answer your questions, resolve problems and give you skincare advice. This is in our legitimate interests in providing good customer service, or necessary for our contract with you.

To send you marketing

If you sign up, we'll send you emails or texts about new products, offers and skincare advice. We do this with your consent, or for existing customers, in our legitimate interests in telling you about similar products. Every message includes a simple way to unsubscribe.

We may also show you adverts on other websites and social media, such as Google and Meta, based on how you've used our website. Where this uses cookies, we'll ask for your consent first.

To improve our website

We look at how people use our website so we can make it easier to use and understand which products and content are popular. This is in our legitimate interests, and we ask for your consent where it relies on non-essential cookies.

To prevent fraud and meet our legal obligations

We use your information to keep payments and accounts secure, prevent fraud, and keep the records we need for tax and accounting. This is in our legitimate interests or necessary to comply with the law.

Who we share your information with

We never sell your personal information. We only share it with trusted providers who help us run our business, and only what they need to do their job. These include:

• Our ecommerce platform: Shopify, which hosts our website and processes orders and payments.
• Payment providers: including Shopify Payments, PayPal, Klarna and Clearpay.
• Delivery partners: such as DPD and Royal Mail, who need your name, address and contact details to deliver your order and send you tracking updates.
• Email and text messaging: Klaviyo, which we use to send order updates and marketing.
• Customer service: including WhatsApp, if you choose to message us there.
• Subscriptions and loyalty: Recharge, which manages subscriptions, and LoyaltyLion, which manages our rewards programme.
• Reviews: REVIEWS.io and Trustpilot, which collect and display reviews.
• Advertising and analytics: Google and Meta, where you've agreed to cookies.
• Accounting and stock: our accounting and inventory software.
• Professional advisers and authorities: where we need to for legal, tax or regulatory reasons, or to protect our rights.

If the business, or part of it, is ever sold, your information may be transferred to the new owner.

Shopify

Our website is hosted by Shopify. Shopify processes your information on our behalf to run our store. Shopify also uses some information for its own purposes, such as preventing fraud and improving its services, and is responsible for that use. You can read more in the Shopify Consumer Privacy Policy.

Cookies

We use cookies and similar technologies to make our website work, remember your basket and preferences, understand how our website is used and show you relevant adverts. Essential cookies are always on. We'll only use analytics and advertising cookies if you agree, and you can change your choice at any time using the cookie settings on our website or in your browser.

International transfers

Some of our providers are based, or store information, outside the UK. When your information is transferred outside the UK, we make sure it's protected, for example by using countries the UK government recognises as having adequate protection, or approved contract terms such as the UK International Data Transfer Agreement.

How long we keep your information

• Order and payment records: six years after the end of the financial year they relate to, as required for tax and accounting.
• Your account: for as long as your account is open. You can ask us to close it at any time.
• Skin consultation details: while your consultation approval is active, and for up to 12 months after your last order, after which you'll be asked to complete a new consultation.
• Marketing preferences: until you unsubscribe. We keep a record of your opt out so we don't contact you again.
• Customer service messages: for up to three years after we last hear from you.

Keeping your information secure

We take appropriate steps to protect your information, and our website uses encryption to keep it secure when you shop. No method of sending information over the internet is completely secure, so please keep your account password safe and don't share it with anyone.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that's wrong or incomplete
• ask us to delete your information
• ask us to limit how we use your information
• object to us using your information, including for marketing
• ask us to transfer your information to another organisation
• withdraw your consent at any time, where we rely on it

To use any of these rights, contact us using the details above. We may need to confirm your identity first. We'll respond within one month, and there's usually no charge.

You can unsubscribe from marketing at any time using the link in our emails, by replying STOP to our texts, or by contacting us. We'll still send you important messages about your orders.

Children

Our website and products are intended for adults. We don't knowingly collect information about children under 16. If you think a child has given us their information, please contact us and we'll delete it.

Making a complaint

If you're unhappy with how we've handled your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113. If you live in the European Economic Area, you can contact your local data protection authority.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.