Privacy policy

AUTARCH | Privacy Notice Last Updated: 31 July 2026

AUTARCH ("we", "our", or "us") operates autarchofficial.com. We are fully committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact Details Email: support@autarchofficial.com Telephone: +44 2037697579 Address: 61 Bridge Street, Kington, Herefordshire, HR5 3DJ, United Kingdom

  1. Data Controller

The data controller responsible for your personal information is the sole trader entity trading as AUTARCH at the address above.

  1. What Information We Collect and Why

To fulfil your order and provide our services: Names and contact details, billing and delivery addresses, purchase history, payment tokens (we do not store or access raw card numbers — all payment data is handled exclusively by Shopify Payments), website usage information including browsing behaviour and cookie data, and information relating to compliments or complaints.

To operate your customer account: Names and contact details, purchase history, account registration details, and marketing preferences.

For marketing and service communications: Names and contact details, addresses, marketing preferences, IP addresses, website and app usage data, email engagement data (including opens, clicks, and conversions tracked via pixels and URL parameters), UTM campaign parameters, and records of consent.

To collect and display product reviews: Names, email addresses, order information, and any review content or photos you choose to submit.

To analyse and improve our services: Browsing behaviour, referral sources, UTM tracking data, and purchase patterns.

To comply with our legal obligations: Name, contact information, and financial transaction records.

To handle queries, complaints, or claims: Names and contact details, address, payment details, account information, purchase history, and correspondence.

  1. Our Lawful Bases for Processing

Purpose | Lawful Basis Fulfilling orders and providing services | Contract — necessary to perform our contract with you Operating customer accounts | Contract — as above Marketing and service communications | Consent — only where you have given explicit permission, which you may withdraw at any time Collecting and displaying product reviews | Consent — only where you have chosen to submit a review Analytics and performance tracking | Consent — where cookies or tracking tools are used Complying with legal obligations | Legal obligation — required by law Handling queries, complaints, and claims | Legitimate interests — to resolve customer service matters, process returns, handle complaints, and manage potential legal claims

  1. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies for analytics, marketing attribution, and personalisation. These include:

Essential cookies — required for the store to function (e.g. shopping cart, checkout session).

Analytics cookies — used to understand how visitors use our site, including browsing journeys and referral sources. We use Google Analytics 4 (GA4) to collect this data. IP addresses are anonymised by default. You can opt out via your cookie preferences or via Google's opt-out tool (https://tools.google.com/dlpage/gaoptout). Google's privacy policy: https://policies.google.com/privacy

Marketing cookies — used to attribute purchases and traffic to specific campaigns, including via UTM parameters embedded in marketing links.

Email tracking — our marketing emails use tracking pixels and URL parameters to measure opens, clicks, and conversions. This data is collected automatically when you interact with our emails.

Cookie consent on our store is managed by Consentmo GDPR Compliance. You can manage or withdraw your cookie preferences at any time via the cookie preference centre on our website.

  1. Your Data Protection Rights

Under UK GDPR you have the following rights. Contact us at support@autarchofficial.com — we will respond within one month.

Right of access — Request a copy of the personal information we hold about you. Right to rectification — Ask us to correct or update inaccurate or incomplete information. Right to erasure — Ask us to delete your personal information where there is no lawful reason to continue holding it. Right to restriction — Ask us to pause processing of your data in certain circumstances. Right to object — Object to processing based on legitimate interests or for direct marketing. Right to data portability — Request your data in a structured, machine-readable format. Right to withdraw consent — Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

You may unsubscribe from marketing emails at any time using the unsubscribe link in every email. To request deletion of your data, contact us at support@autarchofficial.com.

  1. Where We Get Your Information From

Directly from you when you place an order, create an account, contact our support team, complete a signup form, subscribe to marketing communications, or submit a product review. All signup forms include a clear consent statement and a link to this privacy notice before collecting your email address.

  1. How Long We Keep Your Information

Transaction and financial records — 7 years, in accordance with HMRC requirements. After this period, records are deleted or anonymised. Marketing data — 2 years from the date of last interaction or unsubscribe, whichever comes first. Customer service correspondence — 3 years from resolution. Product reviews — retained for as long as they remain published on our store, or until you request removal. Anonymised sales data — retained indefinitely for internal analytics purposes, with all personal identifiers removed.

  1. Who We Share Your Information With

We do not sell or trade your personal data. We share data only where necessary to operate our business:

Shopify Payments / Shopify Inc. — Our e-commerce platform and payment processor. They host our store, manage the transaction flow, process payments, and facilitate order confirmation communications. Shopify Privacy Policy: https://www.shopify.com/legal/privacy

Klaviyo Inc. — Our email marketing and automation platform. Customer data including name, email address, and purchase history is processed by Klaviyo to send and manage marketing communications and measure their performance. Klaviyo Privacy Notice: https://www.klaviyo.com/legal/privacy-notice

Judge.me Ltd — Our product review platform. Customer data including name, email address, and order information is shared with Judge.me to send review request emails and display reviews on our store. If you submit a review, this may include any content or photos you choose to share. Judge.me Privacy Policy: https://judge.me/privacy

Selfnamed SIA — Our on-demand manufacturing and fulfilment partner (Latvia, EU). They receive your delivery address and order specifications solely to manufacture, label, package, and dispatch your order.

Consentmo GDPR Compliance — Our cookie consent management platform. They process consent records and cookie preference data on our behalf.

Google LLC — We use Google Analytics 4 to analyse website traffic and user behaviour. Anonymised usage data is processed by Google. Google Privacy Policy: https://policies.google.com/privacy

Regulatory and legal authorities — Where required by law.

  1. International Data Transfers

Some of our processors operate outside the UK. All transfers comply with UK GDPR:

Organisation | Role | Country | Transfer Mechanism Shopify Inc. | Platform, database hosting, and payments | Canada & USA | UK adequacy regulations / UK–US data bridge Klaviyo Inc. | Email marketing platform | USA | UK–US data bridge Judge.me Ltd | Product review platform | USA | UK–US data bridge Selfnamed SIA | Manufacturing and fulfilment | Latvia, EU | UK adequacy decision for the EEA Google LLC | Analytics | USA | UK–US data bridge

  1. Cosmetic Regulatory Representatives

For enquiries relating to cosmetic product safety assessments, Product Information Files (PIF), or ingredient notifications:

United Kingdom (UKCP): Mypure Ltd, Unit 1, Bethersden Business Centre, Bethersden, Kent, TN26 3JL European Union (CPNP): SIA NORD Beauty, 117-A Dzelzavas Str., Riga, LV-1084, Latvia

All general customer enquiries: support@autarchofficial.com

  1. Complaints

If you have concerns about how we handle your personal data, please contact us first at support@autarchofficial.com. If you are not satisfied with our response, you have the right to raise a complaint with the UK data protection supervisory authority (the Information Commissioner's Office, ico.org.uk).