Privacy Policy
Last updated: June 2025. This policy should be reviewed by a UK solicitor before the site launches to trade.
Who we are
Sol y Tierra is a UK-based small skincare business. This policy explains what personal data we collect when you use our website or purchase from us, why we collect it, and what rights you have over it.
For any questions or requests, contact us at hello@solytierra.co.uk.
What data we collect
We may collect the following information:
- Purchase information — name, email address, shipping address, and order details when you place an order. Payment data is processed directly by Stripe and is not stored on our systems.
- Contact form submissions — name, email address, subject, and message when you contact us.
- Newsletter signups — email address when you subscribe to our mailing list.
- Technical data — anonymised analytics data such as page views (see Analytics section below).
How we use your data
- To process and fulfil your order
- To send order confirmation and dispatch notifications
- To respond to enquiries sent via our contact form
- To send newsletter updates if you have subscribed (you can unsubscribe at any time)
- To improve our website using anonymised analytics
We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.
Third-party services
- Stripe— payment processing. Stripe's privacy policy applies to payment data: stripe.com/privacy
- Resend— transactional email delivery. Resend's privacy policy applies to emails sent on our behalf.
- Vercel — website hosting and anonymised analytics. No cookies are used for analytics.
Cookies
This website does not use non-essential cookies. We do not use advertising, tracking, or marketing cookies. Basic session functionality may require essential cookies set by our payment provider (Stripe) during checkout — these are strictly necessary for the service to work.
How long we keep your data
We retain order data for as long as required by UK tax law (currently 6 years). Contact form messages are retained for up to 2 years. Newsletter subscribers are retained until unsubscribed. You can request deletion at any time.
Your rights
Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict how we process your data
- Receive your data in a portable format
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact us at hello@solytierra.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Contact
For any privacy-related queries: use our contact form or email hello@solytierra.co.uk.