My Wish Lashes is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Who We Are

Business Name: My Wish Lashes
Email: officialmywishlashes@gmail.com

My Wish Lashes is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how your data is handled, please contact us at the email above.

2. What Personal Data We Collect

We may collect and process the following personal information:

• Full name
• Billing and shipping address
• Email address
• Telephone number
• Order details and purchase history
• Payment information (processed securely through third-party providers — we do not store full card details)
• Any information you provide when contacting us

3. How We Use Your Personal Data

We use your personal data only when legally permitted. This includes:

• Processing and delivering your orders
• Managing payments and preventing fraud
• Communicating with you about your order
• Providing customer support
• Complying with legal and tax obligations
• Improving our products and services

Lawful Bases for Processing

We rely on the following legal bases:

• Contract – to fulfil your order
• Legal obligation – to comply with UK laws
• Legitimate interests – to operate and improve our business
• Consent – for marketing communications (where applicable)

4. How We Protect Your Information

We take appropriate security measures to protect your personal data, including:

• Secure and encrypted payment processing
• Password-protected systems
• Restricted access to customer information
• Secure storage of order records
• Regular monitoring of our systems

5. Sharing Your Information

We only share your personal data where necessary to operate our business, including with:

• Payment processing providers
• Delivery and courier companies
• Website and IT service providers
• Professional advisers (where required)

All third parties are required to respect the security of your personal data and process it in accordance with the law.

We do not sell, rent, or trade your personal information.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, and tax requirements.

7. Your Legal Rights

Under UK data protection law, you have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of your personal data (where applicable)
• Object to processing
• Request restriction of processing
• Request transfer of your data

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), if you believe your data has been handled unlawfully.

8. Marketing Communications

If you opt in to receive marketing communications from My Wish Lashes, you may unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.