Your Cart is Empty
Spend an extra
£40.00
for free UK delivery
PRIVACY STATEMENT
Please read this information carefully so that you understand how we treat your Personal Data. We will collect, store, use and disclose Personal Data in accordance with all applicable laws relating to the protection of Personal Data.
Substance Group Ltd (“SBTRCT”, "We", “Us” and “Our”) remain fully committed to the protection of your privacy at all times.If at any time you are concerned or have questions about how we might be handlingyour data, please reach out to our Data Protection Officer at dpo@sbtrct.co.uk
DATA WE COLLECT FROM YOU
Personal data is information that identifies you, such as your name, e-mail or postal addresses. SBTRCT may collect personal data from you on the Site if you choose to give it to us (e.g., when subscribing to e-mail newsletters, taking part in competitions, purchasing a product etc.), including:
If you choose not to provide us with certain information, we may not be able to offer you certain products and services, and you may not be able to access certain features of our Site.
AUTOMATED DATA COLLECTION ON THE SITE
We use general aggregate traffic and website usage statistics derived from automatically collected mechanisms, including cookies, for statistical reporting. We may share such reports with organisations with which we have a business relationship. We use the aggregate traffic and website usage information to help us understand usage and allow us to make improvements to the site. We use stored IP addresses to help diagnose problems with our servers and otherwise to administer the site and to collect aggregate traffic and website usage data.
PERSONAL DATA WE SHARE
We do not sell or lease your personal data to third parties. We may share personal data with (1) subsidiaries and affiliates, and (2) service providers who perform services on our behalf based on our instructions for the purposes described in this Website Privacy Statement. We do not authorize these services providers to use or disclose the data except as necessary to perform services on our behalf or to comply with legal requirements.
We also may disclose data about you (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; (6) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation); or (7) otherwise with your consent.
HOW WE USE PERSONAL DATA WE COLLECT
If you expressly agree to the use of your data for us to tell you more about SBTRCT, then your data will be stored and used for such purposes, e.g., for sending you our newsletters, competitions, etc., all via e-mail or post or any other communication channel to which you consented. We may also use the information we obtain described above for other purposes, including to:
As required by applicable law, we use the personal data we obtain to comply with applicable legal requirements, carry out our contractual obligations and pursue our legitimate interests (such as managing the Site and operating, evaluating and improving our business), or we obtain consent to process personal data. We also may use the data we obtain in other ways for which we provide specific notice at the time of collection.
ONLINE TRACKING
You may see our ads on other websites based on your visits to the Site because we engage in retargeting. For example, if you view, “Facial Cleanser” on the Site, you may see an ad for “Facial Cleanser” on a third-party website. Our retargeting is administered by third-party vendors that track your activity on the Site and third-party sites via automated means, such as cookies and web beacons. Accordingly, our third-party vendors may collect information about our visitors’ online activities, over time and across third-party websites. To learn about how to opt out of retargeting, click here.
YOUR RIGHTS AND CHOICES
We offer you certain choices in connection with the personal data we obtain about you. To update your preferences, update or correct your information, limit the communications you receive from us, or submit a request, please contact us at dpo@sbtrct.co.uk
To the extent provided by applicable law, you may (1) request access to the personal data we maintain about you; (2) request that we correct, amend, erase or restrict the information; or (3) exercise your right to data portability, by contacting us as indicated below. Depending on your location, you may have the right to file a complaint with a government regulator if you are not satisfied with our response. Where provided by law, you may withdraw any consent you previously provided to us or object at any time to the processing of your personal information on legitimate grounds relating to your particular situation, and we will apply your preferences going forward. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to your information. To the extent permitted by applicable law, a charge may apply before we provide you with a copy of any of your personal information that we maintain.
DATA TRANSFERS
We may transfer the personal data we obtain about you to recipients (including our subsidiaries and affiliates, and third-party service providers) in countries other than the country in which the information originally was collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your personal data to recipients in other countries (such as the U.S.), we will protect that data as described in this Website Privacy Notice.
RETENTION OF PERSONAL INFORMATION
To the extent permitted by applicable law, we retain personal data we obtain about you as long as (1) it is needed for the purposes for which we obtained it, in accordance with the provisions of this Website Privacy Statement, or (2) we have another lawful basis for retaining the data beyond the period for which it is necessary to serve the original purpose for collecting the data.
HOW WE PROTECT YOUR DATA
We maintain administrative, technical and physical safeguards designed to protect personal data we obtain through the Site against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
Payment:
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.
COOKIES
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer. cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
LINKS TO THIRD PARTY WEBSITES
For your convenience and information, our Site may provide links to non-SBTRCT sites that may be operated by companies not affiliated with SBTRCT. These companies may have their own privacy notices or policies, that we strongly suggest you review. We are not responsible for the privacy practices of any non-SBTRCT sites.
UPDATES TO OUR WEBSITE PRIVACY NOTICE
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Data Protection Officer at dpo@sbtrct.co.uk.
