Last updated: 8 October 2026
Your privacy matters to us. This policy explains what personal data IARA CARE LTD collects when you use www.iaracare.com or buy from us, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
IARA CARE LTD (company number 17226016) is the data controller for your personal data. Our registered office is at 167–169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom. For any privacy question or request, email contact@iaracare.com.
2. What we collect
Information you give us, when you place an order, subscribe, create an account, sign up to our emails, enter a promotion, leave a review or contact us:
- name, email address, phone number, and delivery and billing addresses;
- order and subscription history;
- payment details, which are processed directly by our payment providers (we never see or store your full card number);
- reviews, photos or messages you send us.
Information collected automatically, when you visit the website:
- IP address, browser type, device type, operating system and approximate location;
- pages visited, time on site and how you arrived;
- information collected through cookies and similar technologies (see our Cookie Policy).
3. How we use your data and our lawful basis
|
Purpose |
Lawful basis |
|---|---|
|
Processing and delivering your orders and subscriptions, handling returns and refunds |
Performance of a contract |
|
Answering your questions and complaints |
Performance of a contract or legitimate interests |
|
Sending marketing emails or texts |
Consent (you can withdraw it at any time) |
|
Showing you relevant ads on other platforms |
Consent, through our cookie banner |
|
Improving our website, products and service using analytics |
Legitimate interests, and consent for non-essential cookies |
|
Preventing fraud and keeping our website secure |
Legitimate interests |
|
Keeping financial and tax records |
Legal obligation |
4. Who we share your data with
We never sell your personal data. We only share it with trusted service providers who help us run our business, and only as far as they need it:
- Shopify (website and checkout)
- Shopify Payments, PayPal, Stripe (payments)
- Klaviyo (email and SMS marketing)
- Google Analytics (website analytics)
- Meta (Facebook and Instagram) and Google (advertising)
- our fulfilment and delivery partners (packing and delivering your orders)
- subscription app (managing cartridge subscriptions)
We may also share data with our professional advisers, or with authorities where required by law. If our business is sold or merged, your data may transfer to the new owner under this same policy.
5. International transfers
Some of our providers process data outside the UK, for example in the United States or the European Economic Area. Where this happens, we make sure appropriate safeguards are in place. These include UK adequacy regulations, the UK International Data Transfer Agreement, or standard contractual clauses with the UK Addendum.
6. How long we keep your data
- Order and financial records: 6 years, as required by UK tax law.
- Account and subscription data: for as long as your account or subscription is active, then up to 2 years.
- Marketing data: until you unsubscribe or withdraw consent.
- Customer service messages: up to 2 years after your query is resolved.
When we no longer need your data, we delete it or anonymise it.
7. Your rights
Under UK GDPR, you have the right to:
- access the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- delete your data in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to processing based on our legitimate interests, and to direct marketing at any time;
- data portability, to receive your data in a machine-readable format or have it sent to another organisation;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email contact@iaracare.com. We will respond within one month and may ask you to confirm your identity. You can unsubscribe from marketing emails at any time using the link at the bottom of each email.
8. Security
We use appropriate technical and organisational measures to protect your data. Payments are processed securely by our payment providers. No method of transmission over the internet is completely secure, so please keep your account password safe. If a data breach is likely to put your rights at risk, we will notify you and the Information Commissioner's Office as required by law.
9. Children
Our products and website are intended for adults. We do not knowingly collect data from anyone under 18 or market to them.
10. Cookies
We use cookies and similar technologies on our website. Non-essential cookies are only set with your consent. See our Cookie Policy for details.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, and we will tell you about any significant changes.
12. Complaints
If you have a concern about how we use your data, please contact us first at contact@iaracare.com and we will do our best to help. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113. Website: www.ico.org.uk