Privacy policy

Thank you for using Derma Botanica LTD's online and mobile resources and for viewing this privacy statement (the "Privacy Statement" or "Statement"). Our Privacy Statement serves to give notice about the types of personal information we collect, how we use it, and who we share it with and why. We encourage you to read this Privacy Statement carefully.

This Privacy Statement was amended as of 20th September 2026 and is effective as of that date. The English language version of this Privacy Statement is the controlling version regardless of any translation you may attempt.

Please note that use of our online and mobile resources is also governed by our https://www.dermabotanica.com/policies/terms-of-service ("Terms"). By accessing, using, or placing an order through our online and mobile resources you agree to these Terms. We encourage you to read the Terms carefully.

Some important vocabulary

Although not itself a contract, this Privacy Statement is an important document that explains how we address some of our legal obligations, and your related legal rights, involving personal information. When we say "this Statement", "this Privacy Statement" and "our Statement", we mean the Privacy Statement you are reading now. Wherever we say "Derma Botanica", "Company", "we", "us", or "our", we mean Derma Botanica LTD. We use the words "you" and "your" to mean you, the reader, and other visitors to our online and mobile resources who are, in all cases, over the age of 13, or who otherwise have verifiable parental consent. This age requirement is discussed in more detail in Children's Privacy below.

When we talk about our "online and mobile resources", we mean all websites, subdomains, and other pages that link to this Statement, as well as any applications, portals, or other features we operate to allow you to interact with us and our systems, including any mobile apps we have created and distributed to let you interact with the content we provide. An "affinity action" is when you "follow" us, "like" us or take a similar or analogous action on our external social media presence.

When we refer to "personal information", we mean any information, data or data element, whether in electronic or other form, that, alone or in combination with other elements, can be used to distinguish, trace, or discover your identity. Certain data privacy laws include specific elements or defined terms for what they consider to be personal information (sometimes also referred to as "personal data"). Where such data privacy laws apply, the term "personal data" includes the specific elements and defined terms required by such laws.

When and to whom does this Privacy Statement apply?

Our online and mobile resources collect personal information from: (1) visitors to, and users of, our online and mobile resources; and (2) those who may interact with our ads and content displayed on third party sites. This Statement applies to our processing and sharing of personal information collected from the data subjects listed in the previous sentence. If we have legal obligations to other categories of data subjects, such as our employees, supply chain partners or vendors, we provide them with separate legally required notices in confidential contracts, policies, and other similar documents.

How do we collect your personal information?

We collect and otherwise obtain your personal information in the following ways: (1) when you choose to give it to us by voluntary submission; (2) through automatic collection by technical means when you visit or use our online and mobile resources; and (3) when it is provided to us by external sources such as marketing companies, advertising companies, social media companies and companies that provide services on our behalf who, in each case, may have previously and separately collected elements of your personal information without our involvement and then shared it with us as part of a service for which we engaged that source.

Voluntary submissions

  • Creating accounts — if we make an account creation feature available you will provide us your email address, username, password, security questions and other identifiers used for account security purposes.

  • Making purchases — if you choose to make a purchase through our online and mobile resources, we will collect your name, email, phone number, billing address, shipping address, payment confirmation and other information you provide to fulfil the order.

  • Shopping activity — the items you view, put in your cart, or add to your wishlist.

  • Signing up for newsletters — similar to account creation, we collect some voluntarily submitted information if you sign up to receive a newsletter or other informational or marketing material we publish.

  • Registering for events — when you register for events or programs we may host, you will be submitting certain identifiers. If the event requires a fee, we may also ask you to submit credit card or other financial information.

  • Sending emails and texts — if you choose to send us an email from our "contact us" link or a similar link, you will be giving us your email address and any other personal information that may be in your message or attached to it. The same is true if you send us a text message.

  • Customer support — the information you choose to include in communications with us, including through our contact form, email, chat or telephone.

  • Surveys and community features — some of our online and mobile resources may offer surveys or social media-like features letting users post messages and comments, and upload images or other files and materials. If you choose to make use of the social media-like features, the information you post, including your screen name and any other personal information, will be in the public domain and may not be covered or protected by this Statement.

Automatic collection

When you visit or use our online and mobile resources, information about your internet and electronic activity is automatically collected through your browser via tracking technologies, such as cookies. Cookies are small text files downloaded onto your computer or mobile device. Cookies allow us to collect your IP address, recognise your computer or mobile device, and store information about your preferences for using our online and mobile resources or past actions.

We also use cookies and similar technologies to identify when you have placed items in your cart but not completed your purchase, in order to send you cart reminder messages by email or SMS where you have consented to receive them.

If you access our online and mobile resources from a phone or other mobile device, the mobile services provider may transmit to us certain information such as uniquely identifiable mobile device information. That, in turn, allows us to collect mobile phone numbers and associate them with the mobile device identification information.

External sources

We may work with companies who provide us with data, including personal information, so that we can tailor our services to audiences who have the most interest. We also may work with digital advertising and marketing companies to provide you with ads that meet your interests and that enhance your experience with us. These ads may be displayed on websites or device applications operated by third parties. These third parties collect information with their own cookies, pixels, and related tracking technology and then provide that information to us. We are not responsible for their data collection practices.

We maintain a presence on one or more external social media platforms. We may allow the community features of our online and mobile resources to connect with, or be viewable from, that external social media presence. Similarly, our online and mobile resources may contain links to other websites or apps controlled by third parties. We are not responsible for either the content on, or the privacy practices of, social media platforms, or any third-party sites or apps to which we link. Those apps, sites and platforms are not controlled by us and therefore have their own privacy policies and terms of use. Neither this Statement nor our Terms apply to our social media presence or any third-party sites or apps to which we may link. That means even if you take an affinity action on our social media presence, and identifiers about you are automatically collected and given to us as a result, that collection and transfer is governed by the privacy policies and other terms of the applicable social media platform and is not our responsibility.

If you have questions about how those apps, sites, and platforms collect and use personal information, you should carefully read their privacy policies and contact them using the information they provide. In addition, certain coalitions of advertisers allow consumers to opt out of receiving interest-based advertising from members of those coalitions. You can visit the Digital Advertising Alliance and the Network Advertising Initiative to opt out of receiving interest-based advertising from members of these coalitions. You will need to exercise these opt-outs on each browser on each device for which you wish to opt out of interest-based advertising.

What types of personal information do we collect?

The categories of personal information we have collected from visitors and users of our online and mobile resources in the previous 12 months, and may collect from you, are as follows.

  • General identifiers such as a real name, alias, online identifier, Internet Protocol address, postal address, email address, telephone number, account name, or other similar identifiers.

  • Commercial information including records of products or services purchased, obtained, or considered, items viewed, added to a cart or added to a wishlist, and other purchasing or consuming histories or tendencies.

  • Internet activity data or other similar electronic network activity information, such as browsing history, chat transcripts, search history, and information regarding a consumer's interaction with our online and mobile services or an advertisement regardless of device type used, be it a personal computer, cell phone or other mobile device.

  • Audio and visual data such as profile or account photos, images you submit, and recordings of telephone calls we place to you. Where we record a call, we will tell you at the start of that call and you may ask us not to record.

  • Analytics and inference data drawn using the above-described personal information to create a profile reflecting our customers' interests and preferences or to otherwise improve our products and services.

  • Sensitive personal information. We may collect limited health information from our customers, such as information about skin conditions, treatments, or skin type, through surveys and interactions with our customer service team. We use this data to help our customers choose the right products for their needs and better use the products they have already purchased. This health information may be considered "sensitive personal information" or "consumer health data" under certain laws.

We do not collect your date of birth.

Deidentified information. We may collect deidentified data and inferences derived from the categories of personal information described in this Statement. This data does not identify you in any way. We will not reidentify, or attempt to reidentify, any deidentified information that we collect as described in this Statement.

If you prefer that we not receive the above-described personal information, please do not submit it. This means you should not participate in the applicable activities on, or use the applicable features available from, our online and mobile resources. Your use of our online and mobile resources is strictly your choice. By not participating, you may limit your ability to take full advantage of the online and mobile resources, but most of the content in our online and mobile resources will still be available to you and we never discriminate on the basis of how much information you provide.

How do we use the personal information we collect?

Use for legitimate business purposes. We use the personal information we collect only in the manner and through the means allowed by applicable law. That means we determine whether we have a lawful basis or legitimate business purpose to use your personal information before doing so. Generally speaking, we collect personal data from you where we have your consent to do so, where we need the personal data to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. Specifically, we use personal information for the following business purposes:

  • Transaction processing — processing, completing, and maintaining records of transactions.

  • Performance of contracts — fulfilling our duties and exercising our rights under contracts we may have with you or our vendors and supply chain partners.

  • Promotions — providing personalised promotions and special offers.

  • General marketing — providing users with information about our brand, products, and events.

  • Improving our products and services — using your information to operate, improve, and support our services.

  • Tailored marketing — providing users with marketing tailored to their interests.

  • Account servicing — facilitating and servicing your account.

  • Physical security — providing security at our physical locations and for internal or external investigations.

  • Technical security — monitoring our networks and detecting security incidents.

  • Customer service — responding to consumer inquiries, including requests for information, online support and phone calls.

  • User experience — internal research and analytics to improve user experience on our online and mobile resources.

  • Knowing our customer — understanding the demographics and interests of our online and mobile resource visitors.

  • Debugging — debugging, identifying, and repairing errors that impair existing intended functionality of our online and mobile resources.

  • Detecting and preventing unlawful acts — protecting against malicious or illegal activity and prosecuting those responsible.

  • Verification — verifying accounts and responding to consumer requests.

Retention of your personal information

We store and retain your personal information in accordance with applicable law and as long as necessary to carry out the purposes described above and in accordance with our internal data retention procedures. The criteria used to determine the retention periods include: (1) how long the personal information is needed in connection with the purposes for which we use it; (2) the type of personal information collected; and (3) whether we are subject to a legal, contractual or similar obligation to retain the personal information, for example mandatory data retention laws, government orders to preserve personal information relevant to an investigation, or personal information that must be retained for the purposes of litigation or disputes.

Security of your information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee perfect security. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

If we make an account creation feature available and you register an account, you are responsible for keeping your account credentials safe. We recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately using the details at the end of this Statement.

When and with whom do we share personal information?

We may share the categories of personal information described in this Privacy Statement with the following categories of third parties for the business purposes described below.

  • Corporate affiliates — we may share personal information with our corporate affiliates or corporate parents who will use such information in the same way as we can under this Statement.

  • Operations support vendors — we may share your personal information with vendors that help us to operate and increase the efficiency of our business and our online and mobile resources, including Shopify, which powers our store.

  • Customer support vendors — we may share your personal information with vendors that provide customer support services, such as chatbot, phone, or email support.

  • Promotional or fulfilment vendors — in order to carry out promotions we make available to you and to deliver our products and services, we are required to share personal information with vendors who specialise in those activities.

  • Software and technology vendors — our various service providers may have access to or be provided with some of your personal information in connection with the tasks they perform on our behalf, such as maintaining portions of our networks or the software applications that run on them. Some of our vendors will provide us with, or support their own services with, artificial intelligence tools.

  • Transaction support vendors and payment processors — we share personal information with those of our vendors and business partners that process payments on our behalf and send you confirmations and administrative messages.

  • Marketing and advertising providers — we may share your personal information with third parties, including Shopify and social media networks, who support online advertising, data co-operatives, mobile advertising, data analytics, social media engagement, and other advertising networks that support our marketing efforts.

  • Security and fraud prevention providers — we also may disclose personal information to third party security and fraud prevention providers when we have reason to believe that someone is causing injury to or interference with our rights or property, or harming or potentially harming other persons or property.

  • Law enforcement or government agencies — we may disclose personal information to government agencies and authorities, and to other third parties when compelled to do so by such government authorities, or at our discretion, or otherwise as required or permitted by law, including responding to court orders and subpoenas.

  • Successors for business sale or purchase — if we, or any of our affiliates, sell or transfer all or substantially all of our assets, equity interests or securities, or are acquired by one or more third parties as a result of an acquisition, merger, sale, reorganisation, divestiture, consolidation, or liquidation, personal information may be one of the transferred assets.

"Selling" and "sharing"

In some jurisdictions, our transfer of information to third-party providers for marketing and advertising purposes could be defined as "selling" personal information or "sharing" personal information for "cross-context behavioral advertising." We have "sold" and "shared" (as those terms are defined in applicable law) personal information over the preceding 12 months for the purpose of engaging in advertising and marketing activities. We may transfer the following categories of information to third parties for marketing and advertising purposes:

  1. Persistent identifiers, such as unique device identifiers, email addresses, account information, IP addresses, information related to your browser and operating system, or any information that you provided through our online and mobile resources;

  2. Commercial information, such as records of products or services purchased and other shopping information; and

  3. Internet or other similar network activity, such as data generated through your activities on our online and mobile resources.

The categories of recipients are our business and marketing partners, including advertising networks and social media networks.

We do not use or disclose sensitive personal information for purposes other than those permitted under applicable law without first providing you with notice and, where required, obtaining your consent. See Your Privacy Rights below for how to limit our use of sensitive personal information.

Disclosing your personal information. We may disclose the categories of personal information described in this Statement for the business and commercial purposes described in this Privacy Statement to the categories of third parties as described in this Privacy Statement, which may include: (1) our service providers and suppliers; (2) our business and marketing partners, including advertising networks; (3) data analytics providers; and (4) other parties in connection with business transfers and for legal, safety, fraud prevention, and enforcement reasons.

Do Not Track and Global Privacy Control

Certain browsers and plug-ins allow users to send signals such as Do Not Track ("DNT") or Global Privacy Control ("GPC"). We do not respond to DNT signals. We do honour GPC signals as a valid request to opt out of the sale or sharing of your personal information.

If you visit our online and mobile resources with the Global Privacy Control opt-out preference signal enabled, we will automatically treat this as a request to opt out of the "sale" or "sharing" of information for the device and browser that you use to visit them. We will process it as a request to opt out of any sale or sharing of your personal information that occurs via cookies or similar tracking technologies. Please note that this opt-out mechanism applies only to the specific browser or device on which the signal is sent, and you may need to adjust your settings on each browser or device you use.

Cookies and other tracking technologies

We use cookies and other tracking technologies to provide, protect, and improve our online and mobile resources and to collect, use, and share your information as described in this Privacy Statement. These technologies are useful for storing your preferences and settings, enabling you to sign in, gathering information such as browser type and operating system, providing interest-based advertising, combating fraud, analysing how our online and mobile resources perform, and fulfilling other legitimate purposes.

Cookies used on our online and mobile resources may include: (1) required or "essential" cookies used to perform essential website functions, such as enabling secure login or supporting shopping carts; (2) preferences cookies that remember your preferred settings, such as your language and region settings; (3) analytics cookies to better understand how you use our online and mobile resources and to help us improve them; and (4) advertising cookies that show you ads, send you marketing messages, and personalise content based on your activities on other websites and social media profiles. Advertising cookies may share your information with third parties, including advertisers and social networks. If you previously provided information to us, a unique identifier in the cookie may associate the information collected via the cookie with your information. We may share aggregate cookie and tracking information that does not directly identify you with third parties.

For specific information about the cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies.

Some content on our online and mobile resources may be provided by third parties that use cookies in conjunction with other tracking technologies to collect information about you when you use our online and mobile resources, which enables them to provide targeted advertising to you. We do not control these third parties' tracking technologies or how they may be used. We may display certain advertising offers on our online and mobile resources or allow service providers, advertisers, ad networks, or other third parties to advertise on our online and mobile resources. Additionally, we may use third-party software to serve ads on our online and mobile resources, implement email marketing campaigns, and manage other interactive marketing initiatives. This third-party software may use cookies, web beacons, or similar tracking technology to help manage and optimise your online experience with us.

Most web browsers are set to accept cookies by default. You can usually choose to set your browser to disable or reject cookies. Where we are required to obtain your consent before placing non-essential cookies, we will do so through the cookie banner presented on our online and mobile resources, and you may change your choices there at any time. Be aware that disabling or rejecting cookies could affect the availability and functionality of our online and mobile resources. Please note that we may still use information we have collected from cookies prior to you disabling them; however, we will not collect any further information from the disabled cookies.

We use Shopify's ad services such as Shopify Audiences to help personalise the advertising you see on third party websites. To restrict Shopify merchants that use these ad services from using your personal information for such services, visit https://privacy.shopify.com/en.

User generated content

Our online and mobile resources may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of our online and mobile resources, this content will be public and accessible by anyone.

We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

Your privacy rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

  • The right to know or access. You have the right to request that we disclose the information that we have collected about you and identify the purposes for which the information was used, whether and to whom it was shared, and what sources it was obtained from.

  • The right to delete. You have the right to request that we delete information that we maintain about you, subject to certain exceptions.

  • The right to correct. You have the right to request that we correct inaccurate information that we store about you.

  • The right to opt out of your personal information being sold or shared. You may opt out of us sharing or selling your information.

  • The right to opt out of targeted advertising. You have the right to request that we opt you out of targeted advertising.

  • The right to limit the use and disclosure of sensitive personal information. You have the right to direct us to limit our use and disclosure of sensitive personal information, including any consumer health data we hold about you, to only what is necessary to perform the services or provide the goods reasonably expected by an average consumer.

  • The right to opt out of profiling or automated decision making. To the extent applicable, you have the right not to be subject to profiling or automated decision making in furtherance of decisions that produce legal or similarly significant effects.

  • The right to restrict processing. You may have the right to ask us to stop or restrict our processing of your personal information.

  • The right to withdraw consent from processing. If we have collected and processed your information based on your consent, you can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

  • The right to data portability. You have the right to request that we provide you with a copy of your information on file with us and, in certain circumstances and with certain exceptions, to request that we transfer it to a third party.

  • The right not to receive discriminatory treatment. Exercising your rights under this Privacy Statement will not result in any discrimination by us. We will treat you the same as any other user.

  • Managing communication preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

  • The right to complain. You have the right to complain about how we process your personal information. In the United States, you may complain to your state's Attorney General. If you are located in the United Kingdom, the European Economic Area or Switzerland, you may lodge a complaint with your local data protection authority; in the United Kingdom this is the Information Commissioner's Office.

  • The right to appeal. If you make a request to exercise any of the applicable data access rights and we are unable to comply with your request, you may request to appeal our decision. To appeal any data privacy request decision, please contact us by email with the subject line "Data Access Request Appeal." If, after you complete the appeal process with us, you are still not satisfied with our response, you may contact your state's Attorney General or your local data protection authority to file a complaint.

How to exercise your privacy rights

To exercise any of the rights detailed in this Privacy Statement, please contact us at support@dermabotanica.com.

We may require additional information from you to help us verify your identity and state or country of residence, and to otherwise process your request. The verification steps may vary depending on the sensitivity of the information and whether you have an account with us. If we are unable to verify your identity, we may deny your requests to know or delete.

You can designate an authorised agent to submit requests on your behalf. However, we will require written proof of the agent's permission to do so and must verify your identity directly. We will respond to your request in a timely manner as required under applicable law.

Children's privacy

Federal law imposes special restrictions and obligations on commercial website operators who direct their operations toward, and collect and use information from, children under the age of 13. We take those age-related requirements seriously. Our online and mobile resources are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

If you are the parent or guardian of a child under 13 who has provided us with personal information, please contact us using the details at the end of this Statement to request its deletion. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it promptly.

As of the effective date of this Privacy Statement, we do not have actual knowledge that we "sell" or "share" (as those terms are defined under applicable law) the personal information of individuals under 16 years of age.

We encourage parents and legal guardians to talk with their children about the potential risks of providing personal information over the internet.

International users and transfers of personal information

Derma Botanica LTD is registered in the United Kingdom and sells to customers in the United States, the United Kingdom, Canada, Australia and New Zealand. Our online and mobile resources are operated from the United Kingdom and the United States.

Personal information collected through our online and mobile resources may be transferred to, stored and processed in the United States, the United Kingdom, or any other country in which we or our affiliates or service providers maintain facilities. Your personal information is also processed by staff and third party service providers and partners in these countries. Laws in those countries may differ from the laws of the country in which you live.

Where we transfer personal information out of the United Kingdom, the European Economic Area or Switzerland, we rely on recognised transfer mechanisms, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Agreement or Addendum issued by the Information Commissioner's Office, unless the transfer is to a country that has been determined to provide an adequate level of protection.

Promotional messages

By signing up to any of our promotional lists, you give your express permission to us and our agents or vendors to contact you with targeted advertising materials by email, text message ("SMS"), telephone or cellphone, including the use of automated, predictive, programmable, or similar automatic dialers or dialing software, or any other means of communication we may utilise to provide promotional offers. Consent is not a condition of purchase. To the extent applicable, you expressly acknowledge that you are solely responsible for all charges billed by your mobile service provider.

SMS marketing and communications

If you choose to opt in to receive marketing communications from Derma Botanica, you may receive recurring automated or personalised text messages, and on occasion, direct calls or manually sent messages from our team. These communications may include, but are not limited to, updates about our products, promotions, cart reminders, and other offers. We may also use cookies or similar technologies to identify when you have placed items in your cart but not completed your purchase, in order to send you cart reminder messages via SMS. Consent is not a condition of purchase.

Message frequency may vary. Message and data rates may apply. You can opt out at any time by replying STOP, or request assistance by replying HELP.

We do not share your phone number or SMS opt-in information with third parties for their own marketing purposes. We may share your personal information, including your SMS opt-in or consent status, with third-party service providers who assist us in delivering text messages, such as messaging platforms, phone carriers, and vendors who support our communications.

We retain your phone number and consent status only as long as necessary to comply with applicable laws and to maintain your opt-in or opt-out records. Text messaging originator opt-in data and consent will not be shared with any third parties for purposes unrelated to providing our messaging services.

We may also contact you personally by phone or text for product information, promotional opportunities, or feedback purposes. These one-to-one messages or calls are sent by our team and are not part of our automated marketing programs. Where we record a telephone call that we place to you, we will tell you at the start of the call, and you may ask us not to record.

Opting out

If you no longer wish to receive promotional communications by email, please follow the unsubscribe link located at the end of an email message. If you no longer wish to receive promotional text messages, reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any mobile message from us. When we receive your request, we will take reasonable steps to remove you from our distribution lists, but it may take time to do so. You may still receive materials for a period of time after you unsubscribe. Unsubscribing or changing affinity actions or other submissions or requests made on our external social media presence will likely require that you do so directly on that applicable social media platform, as we do not control their procedures.

Changes to this Privacy Statement

We may change or update this Statement from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Statement on our online and mobile resources, update the amendment date at the beginning of this Statement, and take any other steps required by applicable law. Please check our online and mobile resources periodically for such changes.

Where we make material changes to how we use personal information we have already collected, we will provide notice and, where required by applicable law, obtain your consent before applying those changes to that information.

Contacting us

If you have questions about our Privacy Statement or privacy practices, would like to submit a data subject request, or wish to make a complaint, please contact us at:

If you have a complaint about how we process your personal information and you are not satisfied with our response, you may have the right to appeal our decision by contacting us using the details above, or to lodge your complaint with your state's Attorney General or your local data protection authority.

Remove this item?

Are you sure you want to remove