Privacy policy

Last updated: 15 September 2026
Yukon Cosmetics Ltd ("Yukon Cosmetics", "we", "us" or "our") operates this store and website, including the related information, content, features, tools, products and services that we make available to you (together, the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit or use our website, purchase products from us, create or use an account, communicate with us or otherwise interact with the Services. For the purposes of applicable UK data protection law, Yukon Cosmetics Ltd is the data controller of the personal information described in this Privacy Policy, except where another organisation acts as an independent controller for particular processing activities. Please read this Privacy Policy carefully.

PERSONAL INFORMATION WE COLLECT OR PROCESS
"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you interact with us, we may collect or process the following categories of personal information:

• Contact information, including your name, email address, billing address, shipping address and, where provided, telephone number.
• Order and transaction information, including products viewed or purchased, items placed in your basket, order history, returns, refunds, cancellations, discounts used and transaction details.
• Payment information, including information required to process your payment and payment confirmation details. Payment information may be collected and processed directly by Shopify and/or the applicable payment provider. We do not normally receive or store your full payment card number.
• Account information, including account identifiers, preferences, settings and information associated with your customer account.
• Communications, including information that you provide when you contact us with a question, return request, complaint, product enquiry or other customer-service request.
• Device and technical information, including information about your device, browser, IP address, network connection, operating system and other technical identifiers.
• Usage information, including information about how you access, use and navigate our website and interact with our Services, subject to your cookie and privacy choices where applicable.
• Marketing information, including your marketing preferences and information relating to your interaction with marketing communications where applicable.

We may also receive information that you voluntarily provide to us in reviews, forms, surveys or other features that may be made available through the Services.

SOURCES OF PERSONAL INFORMATION
We may obtain personal information:

• directly from you, including when you place an order, create an account, contact us, subscribe to marketing or otherwise provide information to us;
• automatically through the Services, including through cookies, pixels and similar technologies, subject to applicable consent requirements;
• from Shopify and our service providers, where they process information in connection with providing services to us;
• from payment, delivery, fraud-prevention, analytics, marketing and technology providers, where applicable; and
• from other third parties or partners, where permitted by law.

HOW WE USE YOUR PERSONAL INFORMATION AND OUR LEGAL BASES
UK data protection law requires us to have a lawful basis for processing your personal information. The lawful basis we rely upon depends on why and how we use your information.

Providing and fulfilling your order
We use personal information to:

• process and confirm orders;
• take or facilitate payment;
• arrange delivery;
• provide order and delivery updates;
• process cancellations, returns and refunds;
• administer customer accounts;
• provide products and Services that you request; and
• communicate with you in connection with your purchase.

Our primary lawful basis for this processing is performance of a contract, including taking steps at your request before entering into a contract. We may also rely on legal obligations where we are required to retain or process certain transaction or payment information by law.

Customer service and communications
We use personal information to respond to enquiries, complaints, return requests and other communications and to manage our relationship with you.

Depending on the circumstances, we rely on:

• performance of a contract, where the communication concerns an order or purchase;
• legal obligations, where we are required to respond or retain information by law; or
• our legitimate interests in providing effective customer service, managing our customer relationships and operating our business.

Security and fraud prevention
We may use personal information to:

• secure our website and Services;
• authenticate accounts;
• identify, prevent and investigate suspected fraud;
• detect malicious, illegal or unauthorised activity;
• protect our business, customers and systems; and
• enforce our rights and policies.

We generally rely on our legitimate interests in operating a safe and secure business and preventing fraud and misuse. Where processing is required by law, we may instead rely on a legal obligation.

Operating and improving our Services
We may use personal information to understand how customers interact with our Services, maintain and improve our website, troubleshoot technical issues, develop our customer experience and understand the performance of our business. We use analytics services, including Google Analytics, for these purposes. Google Analytics may process information about your use of our website, including device and browser information, IP address, pages visited, interactions with our website and other technical or usage information, subject to your cookie and privacy choices where applicable. Where this processing does not require your consent, we rely on our legitimate interests in operating, understanding and improving our business and Services.

Where analytics or similar processing uses cookies or tracking technologies that require consent, we rely on your consent.

Marketing and advertising
Where permitted, we may use personal information to send you information about Yukon Cosmetics products, offers, launches and other marketing communications. Where consent is required, we rely on your consent. Where applicable law permits marketing without consent, we may rely on our legitimate interests in promoting our products and maintaining customer relationships, subject to applicable electronic-marketing rules and your right to object. You can unsubscribe from promotional emails at any time by using the unsubscribe option included in our marketing emails. You may still receive non-marketing communications relating to orders, your account, customer service, legal notices or other essential service communications. Where advertising, analytics or personalisation uses non-essential cookies or similar technologies, we use those technologies in accordance with your cookie choices and applicable law.

We use Google Ads to advertise our products and to measure the effectiveness of our advertising. Where you have provided the required consent, Google Ads may process information relating to your interaction with our website and advertisements, including advertising identifiers, cookie information, device and browser information, website interactions and conversion events such as purchases or other actions taken on our website. Depending on the advertising features we use, this information may also be used for advertising measurement, audience creation or personalised advertising where permitted by law and consistent with your privacy choices.

Compliance with legal obligations and protection of legal rights
We may process personal information to:

• maintain accounting and business records;
• comply with tax, consumer-protection, data-protection and other legal obligations;
• respond to valid requests from courts, regulators, law-enforcement authorities or government bodies;
• establish, exercise or defend legal claims; and
• investigate or enforce our terms, policies or legal rights.

Depending on the circumstances, our lawful basis is compliance with a legal obligation or our legitimate interests in protecting and enforcing our legal and commercial rights.

LEGITIMATE INTERESTS
Where we rely on legitimate interests, we consider whether the processing is necessary for a legitimate business purpose and balance those interests against your rights, interests and reasonable expectations.

Our legitimate interests may include:

• operating and managing Yukon Cosmetics;
• providing effective customer support;
• improving our website, products and Services;
• maintaining the security of our website and systems;
• preventing fraud and misuse;
• understanding the performance of our business;
• maintaining customer relationships;
• protecting our legal rights; and
• promoting our products where permitted by law.

You may have the right to object to processing based on legitimate interests, as explained below.

COOKIES AND SIMILAR TECHNOLOGIES
We and our service providers may use cookies and similar technologies to operate our website, remember preferences, maintain security, understand website usage and, where permitted, support analytics, personalisation and advertising. This includes technologies used by Google Analytics and Google Ads for analytics, advertising measurement and, where enabled and permitted, advertising personalisation. Some cookies are necessary for the website and checkout to function. Where applicable law requires consent for non-essential cookies or similar technologies, those technologies will be used in accordance with the choices you make through our cookie or privacy controls. You can review or change available cookie preferences through the privacy or cookie settings provided on our website.

HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.

This may include disclosure:

• to Shopify, which provides the ecommerce technology through which our store and Services operate;
• to payment providers to process payments, refunds and related transactions;
• to shipping, delivery and fulfilment providers to deliver your order;
• to technology, hosting, cloud, IT and security providers that support our business;
• to analytics and marketing providers, subject to applicable consent and privacy requirements;
• to customer-support and other professional service providers acting on our behalf;
• where you request or consent to disclosure, including where this is necessary to provide a service that you request;
• in connection with a corporate transaction, such as a restructuring, sale, merger, acquisition or insolvency process; and
• where required or permitted by law, including responding to lawful requests, enforcing our terms or protecting our rights or the rights of others.

Service providers that process personal information on our behalf are required to handle that information in accordance with applicable data-protection requirements and the arrangements governing their services. Some third parties, including certain payment, technology or platform providers, may act as independent data controllers for particular processing activities. Their own privacy notices will apply to processing for which they independently determine the purposes and means.

RELATIONSHIP WITH SHOPIFY
Our Services are hosted and supported by Shopify. Shopify collects and processes personal information relating to your access to and use of our store in order to provide and improve Shopify's services and the functionality that enables us to operate our store. Information that you submit through our Services may therefore be transmitted to and processed by Shopify and relevant third-party service providers, including providers located outside the United Kingdom. We may also use Shopify features that incorporate information obtained from interactions with our store and, where applicable, interactions with other merchants or Shopify services in order to support functions such as security, analytics, personalisation, advertising and improvement of Shopify's services. For certain processing carried out for Shopify's own purposes, Shopify may act as an independent controller and be responsible for responding to requests relating to that processing. You can find further information about how Shopify processes consumer personal information in the Shopify Consumer Privacy Policy and can exercise certain Shopify-specific privacy choices through the Shopify Privacy Portal.

THIRD-PARTY WEBSITES AND SERVICES
Our Services may contain links to websites, social-media services or other online platforms operated by third parties. If you follow a link to a third-party service, that third party's privacy policy and terms will apply. We are not responsible for the privacy, security or content of third-party websites or services that we do not control. Information that you choose to make public or provide through social-media platforms or other public or semi-public services may be visible to other users and may be processed by those platforms in accordance with their own privacy practices.

CHILDREN'S DATA
Our Services are not directed specifically at children. We do not knowingly collect personal information from children where doing so would not be permitted by applicable law. If you are a parent or guardian and believe that a child has provided us with personal information in circumstances where that information should not have been collected, please contact us using the details below. We will review the request and, where appropriate, delete the information or take other steps required by law.

SECURITY
We use reasonable administrative, organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure. You are responsible for keeping any account credentials confidential and should not disclose passwords or other account access details to other people. Please avoid sending sensitive or confidential information through insecure communication channels.

HOW LONG WE KEEP PERSONAL INFORMATION
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by law.

The appropriate retention period depends on factors including:

• whether the information is needed to fulfill or administer an order;
• whether you maintain a customer account;
• whether we need the information for customer service;
• applicable accounting, tax and legal record-keeping requirements;
• the nature and sensitivity of the information;
• fraud-prevention and security requirements;
• whether there is an ongoing dispute or legal claim; and
• whether you have consented to marketing and subsequently withdrawn that consent.

When personal information is no longer required, we will delete, anonymize or otherwise securely dispose of it where reasonably practicable and appropriate.

INTERNATIONAL TRANSFERS
Shopify and some of our other service providers may store, access or process personal information in countries outside the United Kingdom. Where we are responsible for making a restricted transfer of personal information outside the United Kingdom, we take steps to ensure that an appropriate lawful transfer mechanism is used where required.

Depending on the circumstances, this may include:

• transferring information to a country, territory, sector or organisation covered by UK adequacy regulations;
• using appropriate contractual safeguards, such as the UK's International Data Transfer Agreement or the UK International Data Transfer Addendum to approved Standard Contractual Clauses; or
• relying on another lawful transfer mechanism or exception where permitted by applicable law.

Where appropriate, you may contact us for further information about the safeguards relevant to transfers of your personal information.

YOUR DATA-PROTECTION RIGHTS
Depending on the circumstances and subject to applicable exceptions, you may have the following rights in relation to your personal information:

Right of access
You may request confirmation of whether we process your personal information and request a copy of personal information that we hold about you.

Right to rectification
You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to erasure
You may ask us to delete your personal information in certain circumstances. This right is not absolute, and we may need to retain certain information where there is a lawful reason to do so, including legal or accounting requirements.

Right to restriction
You may ask us to restrict the processing of your personal information in certain circumstances.

Right to object
You may object to certain processing carried out on the basis of legitimate interests. You have the right to object to the use of your personal information for direct marketing purposes.

Right to data portability
In certain circumstances, you may have the right to receive personal information that you provided to us in a structured, commonly used and machine-readable format or request that it is transmitted to another organisation where technically feasible.

Right to withdraw consent
Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Marketing preferences
You may unsubscribe from marketing emails at any time using the unsubscribe link provided in those communications. Opting out of marketing does not prevent us from sending you communications that are necessary in connection with an order, account, customer-service request or other non-marketing matter.

EXERCISING YOUR RIGHTS
To exercise your applicable data-protection rights, contact us at: info@yukon-cosmetics.com. Please provide enough information for us to understand your request. We may need to take reasonable steps to verify your identity before responding to a request. We will not discriminate against you for exercising your data-protection rights. Your rights are not absolute and may be subject to exemptions or limitations under applicable law. We will respond to valid requests within the timescales required by applicable data-protection law.

COMPLAINTS
If you have a concern or complaint about how we collect, use or protect your personal information, please contact us first at: info@yukon-cosmetics.com. We will consider and respond to data-protection complaints in accordance with our obligations under applicable law. You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data-protection supervisory authority. You can find information about how to make a data-protection complaint through the ICO's official website. Your right to complain to the ICO is not affected by contacting us first.

CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time, including where necessary to reflect changes to our Services, business practices, service providers, technology or legal and regulatory requirements. When we update this Privacy Policy, we will publish the revised version on our website and update the "Last updated" date above. Where required by law, we will provide additional notice of material changes.

CONTACT US
If you have questions about this Privacy Policy, our privacy practices or the personal information that we hold about you, or if you would like to exercise your data-protection rights, please contact:

Yukon Cosmetics Ltd
Email: info@yukon-cosmetics.com
Address: 124 City Road, London EC1V 2NP, United Kingdom

For the purposes of applicable UK data-protection law, Yukon Cosmetics Ltd is the data controller of the personal information described in this Privacy Policy, except where otherwise stated.