Privacy Policy

1. Who we are

CORVEN QENTIS LTD is the data controller for personal data processed through this website. We sell perfume, skincare and makeup online to private customers in the United Kingdom.

• Legal name: CORVEN QENTIS LTD
• Company number: 17312757
• Registered address: 167-169 Great Portland Street, Fifth Floor, London, England, W1W 5PF
• Email: [email protected]
• Phone: +44 7418 926350
• Website: corvenqentis.uk

2. Data we collect

We only collect what an order or an enquiry actually requires.

• Order details you enter at checkout: full name, email address, telephone number, delivery address, city, postcode and any comment you add to the order.
• Order records: the items ordered, quantities, the order total, the order number and the delivery status.
• Payment information: card and payment details are entered into and processed by our payment provider. They are not stored on this website and we never see your full card number.
• Correspondence: the content of emails or calls you send us, including anything you choose to tell us in them.
• Newsletter sign-up: your email address, if you submit it.
• Technical data: standard server and security logs such as IP address, browser type and the pages requested.

3. Health and skin information

We do not ask for and do not collect information about your skin condition, allergies, reactions to ingredients or any other health data. Please do not send us such information. If a product causes a reaction, stop using it and speak to a doctor or pharmacist; we cannot give medical advice. If you send health details to us anyway, we will use them only to answer your message and delete them once the matter is closed.

4. Purposes and legal bases

• Processing and delivering your order — including passing your address and phone number to the courier. Legal basis: performance of a contract (Article 6(1)(b) UK GDPR).
• Contacting you about your order — confirmations, delivery updates, questions about the items. Legal basis: performance of a contract.
• Handling returns, refunds and complaints, including returns under the Consumer Contracts Regulations 2013. Legal basis: legal obligation and performance of a contract.
• Accounting and tax records. Legal basis: legal obligation (Article 6(1)(c)).
• Answering enquiries sent by email or phone. Legal basis: legitimate interests (Article 6(1)(f)) — responding to people who contact us.
• Site security and fraud prevention. Legal basis: legitimate interests — keeping the shop and its orders safe.
• Sending the newsletter. Legal basis: consent (Article 6(1)(a)), withdrawable at any time.

5. Sharing with third parties

We do not sell personal data. We share it only with the categories of recipient needed to complete your order:

• Courier and delivery companies — name, delivery address, postcode, phone number and email for delivery notifications.
• Our payment provider — the payment data you enter with them, plus the order amount and reference.
• Website hosting and email providers acting as processors under contract.
• Accountants and, where a legal obligation applies, tax and regulatory authorities.
• Professional advisers or law enforcement where we are required to disclose data by law or to defend legal claims.

6. International transfers

Our processing normally takes place in the United Kingdom. If a provider we use stores data outside the UK, we make the transfer only where the country benefits from UK adequacy regulations or where an appropriate safeguard is in place, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us which safeguard applies to a particular provider.

7. How long we keep data

• Order and transaction records: six years after the end of the financial year in which the order was placed, to meet accounting and tax requirements.
• Delivery and returns correspondence: up to 24 months after the matter is closed.
• General enquiries with no order attached: up to 12 months.
• Newsletter address: until you unsubscribe or ask us to remove it.
• Server and security logs: up to 12 months.

The basket on this website exists only in your browser's memory while the page is open. It is not stored on our servers and is lost when you close or reload the page.

8. Security

The site is served over an encrypted connection. Access to order data is limited to the people who need it to fulfil orders and is protected by individual accounts and strong authentication. Payment data is handled entirely by our payment provider. No system is completely secure, but if a breach occurs that is likely to affect your rights we will notify you and the Information Commissioner's Office as required.

9. Cookies

This site uses only the cookies strictly necessary for the pages to work and to keep the connection secure. We do not run advertising, profiling or third-party analytics cookies, and we do not use local storage to keep your basket. Fonts are loaded from Google Fonts, which means your browser contacts that service and it receives your IP address as part of that request. You can block or delete cookies in your browser settings; the shop will still function.

10. Your rights

Under the UK GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data rectified;
• have data erased where we no longer have grounds to keep it;
• restrict our processing while a question about it is resolved;
• receive the data you gave us in a portable, machine-readable format;
• object to processing based on our legitimate interests;
• withdraw consent where consent is the basis for processing.

Write to [email protected] and we will reply within one month. We may ask you to confirm your identity before acting on a request. Exercising these rights is free of charge.

11. Withdrawing consent

Where we rely on your consent — in practice, for the newsletter — you can withdraw it at any time by using the unsubscribe link in any newsletter or by emailing us. Withdrawing consent does not affect processing carried out before you withdrew it, and it does not stop us keeping the order records we are legally required to keep.

12. Complaints

If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or by calling its helpline.

13. Age limit

This shop is intended for customers aged 18 and over, and we do not knowingly collect data from children. If you believe a child has given us personal data, email us and we will delete it.

14. Changes to this policy

We update this policy when our processing changes or when the law requires it. The current version is always published on this page with the date it was last updated at the top. Material changes affecting existing customers will be announced by email where we hold an address for that purpose.

15. Contact

Questions about this policy or about your data: email [email protected], call +44 7418 926350, or write to CORVEN QENTIS LTD, 167-169 Great Portland Street, Fifth Floor, London, England, W1W 5PF.