Last updated: 17/09/2025

Welcome to CurrentBody, The Beauty Tech Experts (the "Website").

This Website is provided by The Beauty Tech Group Ltd (company number 06805380) with registered office located at Glasshouse, Alderley Park, Congleton Road, Nether Alderley, Cheshire, SK10 4ZE, United Kingdom. The Beauty Tech Group Ltd is the controller and responsible for your personal data ("CurrentBody", "we", "us", or "our" in this Privacy Policy).

We are committed to protecting your privacy and complying with applicable data protection rules.

This Privacy Policy explains how we use, store and share the information we collect about you, how you can exercise your rights in respect of that information and the procedures that we have in place to safeguard your privacy. Please contact us by email at yourdata@currentbody.com if you have any questions, comments or concerns about this Privacy Policy or how we handle your personal information.

Please note: this Privacy Policy does not cover third party websites that we may link to from our Website unless specifically mentioned in this Privacy Policy. We are not responsible for the privacy policies and practices (including use of cookies) of such third parties even if you accessed the third-party website using links from our Website. We recommend that you check the policy of each website you visit and contact the owner or operator of such website if you have concerns or questions.

EU residents: Contact us via our EU Representative:

EU Representative – Prighter Group

You can contact us via the Prighter portal. Requests sent to the Representative will be passed to us and handled in the same way.

Website: Prighter Portal

1. What We Collect

  • Identity and contact – name, email, phone, billing/delivery address
  • Order and payment – order history, purchase amounts, payment status (we do not store full card numbers)
  • Account – login, preferences, saved addresses, wishlists
  • Communications – enquiries, complaints, chat transcripts, call notes, surveys, reviews/ratings
  • Device and usage – IP address, device/browser type, pages viewed, clicks, referring pages, approximate location
  • Marketing and cookie preferences – opt-in/out choices and consent records
  • Social/user content – handles and public profile info and content you post
  • Fraud and safety signals – signals we and our providers use to protect accounts and transactions

We also receive information from payment providers, delivery and logistics partners, IT/hosting providers, analytics and advertising partners, social platforms, affiliates/marketplaces, and (where you follow a tracked link) from partners.

2. How We Use Your Personal Data

Under the Data Protection Laws, we are required to explain what information we collect from you and how and why we use your personal information (the "processing activity"). We are also required to have a "lawful basis" on which to process your personal information. This is summarised in the table below.

Processing activity: Why we use your personal dataWhat personal data we useLawful basis of processingWhere we collect the information fromHow long we keep the information forTo enter into, and administer, a contract with you when you purchase products from us including to process and deliver your order, including so: we can manage any payments made by you, or additional fees and charges; we can collect and recover any money owed to us; or we can facilitate returns of any products you have ordered.Identity Data Contact Data Transaction Data Communications DataWe process this data because it is necessary for the performance of a contract with you.From you directly via our Website, or when you interact with us.We keep information regarding your orders for up to 6 years from the date your order is complete because we are legally required to do so, and so we can exercise or defend a legal claim.To manage our relationship with you, including so: you can register for, and create, a customer account on the Website; we can notify you about changes to our terms or this Privacy Policy; we can respond to your requests, comments, complaints, or queries; or we can ask you to leave a review, take a survey or provide feedback.Identity Data Contact Data Account Data Communications DataWe process this data: because it is necessary for the performance of a contract with you; because it is necessary for our legitimate interests to obtain data about our customers and how they use our products so we can offer the best products, and in communicating with you in accordance with your wishes and expectations and for providing good customer service.From you directly via our Website, or when you interact with us.We retain information relating to your customer account for as long as your account continues to be active, and 2 years thereafter, so we can manage our relationship with you. We may keep records relating to the terms accepted by you for 6 years following your acceptance.To enable you to partake in a prize draw, competition or promotion which you may enter.(a) Identity Data (b) Contact Data (c) Account Data (d) Device and Usage Data (e) Communications DataWe process this data: (a) because it is necessary for the performance of a contract with you when you enter into a competition; (b) because it is necessary for our legitimate interests (to study how customers use our products and services, to develop them and grow our business); (c) because it is necessary in order to comply with our legal obligations when running a competition, including compliance with the relevant UK advertising codes of practice in place from time to time; or (d) where we use your information for publicity purposes, we will do so with your consent.From you directly when you enter a competition, prize draw or promotion, or when you interact with us.We will retain data relating to, and held in connection with, the management of competitions, prize draws and promotions for 24 months. We may retain data used for publicity reasons for longer than this, for example, where it is published on our Website or social media pages. Please see Competitions, Prize-draws, and Promotions below for further information.To market our products to you, including by: (a) delivering advertisements and other content to you, and measuring the effectiveness of this advertising; and (b) sending you newsletters and marketing emails and SMS/text messages.(a) Identity Data (b) Contact Data (c) Account Data (d) Device and Usage Data (e) Communications Data (f) Marketing Data Please see Marketing and Online Ads below for further information. [HYPERLINK].We process this data: (a) in some cases subject to your consent when you tick a box or provide your details expressly to news, special offers and other promotional material; (b) in some cases, where you make a purchase with us and do not choose to opt out from receiving our emails or messages ('soft opt in') we will use your personal data to provide you with news, special offers and other promotional material and do so on the basis of our legitimate interests; (c) because it is necessary for our legitimate interests (to promote and grow our business and our products); and (d) on the basis of your consent, where your personal data is collected via a non-essential cookie.From you directly via our Website, or when you otherwise interact with us, or via social media platforms or other third-party advertising platforms or otherwise when you make a purchase with us.We retain data related to direct marketing for as long as we think you will be interested in receiving our marketing communications. This is usually until you opt-out of direct marketing or 24 months from the date of our last communication from you. Information regarding our usage of cookies and their duration is set out in our Cookies Policy. [HYPERLINK].To administer and protect our business and this Website (including troubleshooting, data analysis, testing, system maintenance, support, fraud prevention, reporting and hosting of data).Identity Data Contact Data Account Data Device and Usage DataWe process this data: because it is necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise); because it is necessary to comply with a legal obligation; and on the basis of your consent, where your personal data is collected via a non-essential cookie.Directly from you when you visit our Website, including using analytical cookies or other automated technologies.Information regarding our usage of cookies and their duration is set out in our Cookies PolicyTo use data analytics to improve our Website, products and services, customer relationships and experiences and to measure the effectiveness of our communications and marketing.Account Data Device and Usage DataWe process this data: because it is necessary for our legitimate interests (to define types of customers for our products and services, to keep our Website updated and relevant, to develop our business and to inform our marketing strategy); on the basis of your consent where your personal data is collected via a non-essential cookie.From you directly when you use our Website, including using analytical cookies or other automated technologies.We delete browsing data collected via Google Analytics every 12 months. We may also collect information about your use of our Website for data analytics purposes using our own website platform (Shopify) and this data may be retained for up to 30 months following collection. Information regarding our usage of cookies and their duration is set out in our Cookies Policy. In respect of any data not collected via cookies, we will generally only retain this for 6 months following collection.To allow us to provide you with enhanced, more personal features on the Website.Account Data Device and Usage DataWe process this data: because it is necessary for our legitimate interests (for improving our customer experience); on the basis of your consent where your personal data is collected via a non-essential cookie.From you directly when you use our Website using functional cookies or other automated technologies.Information regarding our usage of cookies and their duration is set out in our Cookies Policy. In respect of any data not collected via cookies, we will generally only retain this for 6 months following collection.

We have determined, acting reasonably and considering the circumstances, that we are able to rely on legitimate interests as the lawful basis on which to process your personal information in certain circumstances (we have stated this above and set out our legitimate interests). We have reached this decision by carrying out a balancing exercise to make sure our legitimate interest does not override your privacy rights as an individual.

We consider that it is reasonable for us to process your information for the purposes of our legitimate interests outlined above as: (a) we process your information only so far as is necessary for such purpose; and (b) it can be reasonably expected for us to process your information in this way.

Where we process your personal information on the legal basis of consent (as indicated in the above table), you may refuse consent to our processing and you may also withdraw your consent at any time: (i) in respect of cookies and other tracking mechanisms on our Website, by using the cookie consent manager in our cookie notification banner, (ii) in respect of marketing communications, by clicking 'unsubscribe' in the footer of the relevant emails, or (iii) in respect of other matters, by using the contact details below. This would not affect your ability to use any features of our Website. Withdrawing consent does not affect any processing carried out without your consent.

We will retain your personal data for the periods set out in the table above, however, we will only retain it for as long as necessary for the purposes set out above and, where we no longer have a need to keep your data, we may delete it earlier than the periods set out above. In some circumstances, you may have a right to ask us to delete your data at any time: please see the "Your Choices and Your Rights" section below.

We like to keep your personal data to ourselves. Except as set out in this Privacy Policy, we do not disclose to, or share, your personal data with third parties. We do not use automated decision making in relation to your personal data but be aware that some of our third parties (for example, Klarna) may do so; for more information, please see our third parties' privacy policies. Please see "Who We Share Your Personal Data With" below.

We will need certain of your personal data to allow us to fulfil an order you place with us. If you refuse to supply such personal data, then we will not be able to fulfil your order and will let you know that this is the case.

3. Who We Share Your Personal Data With

We share your personal data in the following circumstances and with the following categories of third party:

  • Group companies. Other companies in our group of companies for internal business purposes such as management, accounting and marketing.
  • Third party suppliers. Our third-party suppliers who process your personal data on our behalf for business administration, IT services, marketing, e-commerce, and delivery purposes.
  • Payment platform providers. Our payment platform providers who offer you their payment solutions.
  • Professional advisors. Our professional advisors, including insurance, legal, tax or other corporate advisors.
  • Law enforcement. Law enforcement and fraud prevention agencies, regulators, courts and other authorised bodies.
  • Government authorities. Tax bodies and agencies to comply with our legal duties.
  • Other. If we sell any business assets, personal data may be disclosed to a potential buyer.

We may share your personal data with third parties as described above. Once we have done so, they will be responsible for ensuring your personal data is processed in compliance with Data Protection Laws.

For certain events collected via platform tools (for example, Meta Pixel and Conversions API), we and the platform may both be responsible for those events. The arrangement sets out respective responsibilities and contact points; you may exercise your rights with the platform or with us.

4. International Transfers

We store data globally and use service providers in various countries. When we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws. You can contact us to request information about the safeguards we use.

UK/EU: If we transfer your data outside the UK/EEA, we rely on recognised safeguards such as adequacy regulations/decisions, the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses with the UK Addendum, and, where applicable, the UK–US Data Bridge.

5. Marketing

We love to communicate with our customers and so, depending on your marketing preferences, we may use your personal data to send you marketing messages by email or text message. Some of these messages may be tailored to you, based on your previous browsing or purchase activity, and other information we hold about you.

We send marketing messages on the basis of your consent when you complete a request form online for our news, special offers or other promotional material, or where you make a purchase with us and you do not opt out ('soft opt in').

In addition, our Website uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart, and this information is (provided you have consented to the use of cookies and us sending you marketing messages) used to determine when to send cart reminder messages via text message and/or by email. You can read more about how we use cookies in our Cookies Policy.

Although we hope you find our marketing messages interesting and useful, if you no longer want to receive marketing communications from us (or would like to opt back in!), you can change your preferences at any time by contacting us, clicking on the 'unsubscribe' link in our emails, or by replying STOP to our text messages. If you unsubscribe from marketing, please note we will still contact you with service messages from time to time (e.g. order and delivery confirmations, and information about your legal rights). We will not use your personal data for third-party marketing without separate consent. Please note that due to the nature of our IT systems, it may take a few days for any opt-out request to be implemented.

EU: We'll ask permission before using cookies for advertising and measurement. If you're already a customer, we can email or text you about similar products (you can always opt out).

6. Security

The protection and security of your personal data is important to us, and we have put in place appropriate technical and organisational measures to safeguard your personal data from accidental loss, damage or destruction and unauthorised or unlawful processing. If a breach creates a high risk to you, we will tell you and, where required, inform the relevant authority.

7. Children

Our sites are for adults. We do not knowingly collect personal data from children. If you believe a child has provided information to us, please contact us.

8. Automated Decision-Making

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

9. Your Rights

You have legal rights in relation to your personal data, and these are set out below. You can exercise these rights by contacting us, but please be aware that there are limitations to these rights, and there may be circumstances where we are not able to comply with your request fully or at all. Where this is the case, we will promptly let you know why.

  • Opt out of marketing – use the links in messages or contact us
  • Cookie choices – use the cookie banner or your browser settings
  • Location‑based rights – your privacy rights depend on where you live (see relevant addendum)

10. Contact & Complaints

Questions or complaints about privacy? Contact us using any of these methods:

EU residents: Contact us via our EU Representative:

EU Representative – Prighter Group

You can contact us via the Prighter portal. Requests sent to the Representative will be passed to us and handled in the same way.

Website: Prighter Portal

Data Protection Officer: dpo@beautytechgroup.com

If you are unhappy with our response, you can complain to your local data protection regulator:

EU Data Protection Regulators

Each EU member state has its own data protection regulator. Contact your local regulator to make a complaint.

Website: Find your EU regulator