Your data, handled with care.

Data controller

Jin Cosmetics

London, United Kingdom

Email: hello@jincosmetic.co

Website: jincosmetic.co

What data we collect

• Identity & contact: name, email address, phone number, delivery and billing address
• Order data: products purchased, order history, payment status (card details are processed securely by Shopify Payments — we do not store full card numbers)
• Account data: login credentials if you create an account
• Communication: messages you send to customer care
• Technical data: IP address, browser type, device information, cookies and usage data
• Marketing preferences: newsletter sign-up and consent records

How we use your data

• To process and fulfil your orders and manage returns
• To communicate about your order, delivery or customer enquiries
• To send marketing communications where you have opted in (you may unsubscribe at any time)
• To improve our website, products and customer experience
• To comply with legal, tax and accounting obligations
• To prevent fraud and protect the security of our services

Legal basis (GDPR)

• Contract: processing necessary to fulfil your order
• Consent: marketing emails and non-essential cookies
• Legitimate interests: website analytics, fraud prevention and service improvement
• Legal obligation: tax, accounting and regulatory compliance

Cookies

We use essential cookies to operate the site (cart, checkout, security) and optional cookies to understand how visitors use our website. You can accept or decline non-essential cookies via our cookie banner. For more detail, adjust your browser settings or contact us.

Data sharing

We share data only where necessary with trusted processors:

• Shopify — hosting, checkout and payment processing
• Shipping carriers — to deliver your order
• Email service providers — for transactional and marketing emails (with consent)
• Analytics providers — aggregated, anonymised usage data where enabled

We do not sell your personal data to third parties.

International transfers

Your data may be processed in the United Kingdom, European Economic Area, United States or other countries where our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Retention

We retain order and account data for as long as necessary to fulfil the purposes above, typically up to 7 years for tax and accounting records. Marketing consent records are kept until you withdraw consent.

Your rights

Under UK GDPR, EU GDPR and Turkish KVKK you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Data portability where applicable
• Withdraw consent at any time for consent-based processing
• Lodge a complaint with the ICO (UK), your local EU supervisory authority, or the Turkish Personal Data Protection Authority (KVKK Kurulu)

Turkey — KVKK notice

If you are located in Turkey, your personal data is processed under Law No. 6698 on the Protection of Personal Data (KVKK). You may submit requests regarding your personal data to hello@jincosmetic.co. We will respond within the statutory period.

Children

Our products and website are intended for adults. We do not knowingly collect data from anyone under 16.

Changes

We may update this policy from time to time. The date at the top of this page indicates the latest revision. Continued use of our website after changes constitutes acceptance of the updated policy.