Last updated 29 September 2026. This notice explains what BodyRebirthLab
collects when you visit or buy from bodyrebirthlab.com, why we collect it, who we pass it to,
and the rights you have over it.
Who we are
BodyRebirthLab is an online skincare retailer selling at bodyrebirthlab.com. We are the
data controller for the information described here. You can reach us at any time at
[email protected], and we answer every message.
What we collect
When you place an order we collect your name, billing and shipping
address, email address, phone number if you give one, and what you bought. We need all of it
to take payment and get a parcel to you.
We never see your card details. Payments are processed by PayPal on their
own systems. Your card or PayPal credentials are never sent to us and we could not store them
if we wanted to.
When you create an account we store your email address, a hashed password,
and your saved addresses and order history.
When you leave a product review we store your name, email address, rating
and review text. Only verified buyers can leave reviews on this store.
When you subscribe to emails we store your email address, and the fact
that you opted in, until you unsubscribe.
When you simply browse our host records standard server log data,
including your IP address, browser and the pages you requested. If analytics are active, the
cookie section below applies.
Why we are allowed to use it
For orders, because we need it to perform the contract you entered into when you bought
something. For marketing emails, because you consented, and you can withdraw that consent at
any time. For fraud prevention, security and keeping accurate business records, because we
have a legitimate interest in running the shop safely, and because tax law requires it.
Who we share it with
We do not sell your personal information, and we never have. We share it only with the
companies that make the shop work:
- PayPal processes payments and receives the information needed to do so.
- Selfnamed, our manufacturer and fulfilment partner in Latvia, receives
your name and delivery address so your order can be made up and shipped. - Shipping carriers receive your name, address and contact details to
deliver the parcel. - Hostinger hosts this website and therefore stores the data on our behalf.
- Our email provider sends your order confirmations and any newsletter you
signed up for. - Analytics providers, where active, receive usage data as described under
cookies.
We will also disclose information where the law requires it, or to protect our rights.
Where your data goes
We are based outside the European Union and our fulfilment partner is inside it, so your
order data crosses borders by necessity. Where data leaves the UK or the European Economic
Area, it is protected by the transfer safeguards our providers have in place, such as Standard
Contractual Clauses. If you would like detail on a specific provider, ask us.
How long we keep it
Order and invoice records are kept for as long as tax and accounting law requires,
generally six years. Account data is kept until you ask us to delete the account. Newsletter
subscriptions are kept until you unsubscribe. Reviews stay published unless you ask us to
remove yours.
Cookies
This site sets cookies that are strictly necessary for it to function: keeping items in
your cart, keeping you logged in, and remembering your cookie choices. These cannot be turned
off without breaking the shop.
We may also use analytics and advertising cookies from providers such as Google, Meta and
Pinterest to understand how the site is found and used, and to measure advertising. Where the
law requires your consent for these, we ask for it before they load. You can clear or block
cookies in your browser settings at any time.
Your rights
Wherever you live, you can email [email protected] to exercise any
of the rights below, free of charge. We will respond within one month.
If you are in the UK or the European Economic Area, under the GDPR you have
the right to access a copy of your data, to have inaccurate data corrected, to have your data
erased, to restrict or object to how we use it, to receive it in a portable format, and to
withdraw consent at any time. You also have the right to complain to your national data
protection authority, or to the Information Commissioner’s Office in the UK, and you do not
need to contact us first.
If you are in California, under the CCPA and CPRA you have the right to
know what we collect and why, to receive a copy, to have it deleted, to correct it, and to opt
out of the sale or sharing of your personal information. We do not sell or share personal
information as those laws define it. We will never discriminate against you for exercising
these rights.
Other US states with comparable privacy laws grant similar rights, and we
apply the same process to every request regardless of where you live.
Children
This shop is not intended for children, and we do not knowingly collect data from anyone
under 16. If you believe a child has given us their information, tell us and we will delete
it.
Security, and being straight with you about it
The site runs over HTTPS, passwords are stored hashed, and card data never reaches us.
No website can promise perfect security, and we will not pretend otherwise. If a breach ever
affects your data, we will notify you and the relevant regulator as the law requires.
Changes
If we change this notice we will update the date at the top. Material changes will be
announced on this page.
Contact
Questions, requests or complaints go to [email protected].
