Privacy Notice

This notice explains what personal information we collect, why, who we share it with, how long we keep it and the choices you have. We have tried to write it plainly. If anything is unclear, ask us and we will explain.

Who we are

Evolve Organic Beauty is a trading name of Good Ventures Limited, a company registered in England and Wales (number 06430284), at 5 Handley Page Way, Colney Street, St Albans, Hertfordshire AL2 2DQ, UK. We are the controller of the personal information described here, which means we decide how and why it is used.

Contact us about anything in this notice at privacy@evolvebeauty.mom, or by post to the address above, marked for the attention of Privacy.

We are registered with the Information Commissioner's Office (registration number ZA731324). We have not appointed a data protection officer.

Our representative in the European Union is Good Ventures EU Limited (company number 652940), 208 Botanic Avenue, Glasnevin, Dublin 9, D09 YP49, Ireland. If you live in the EU you can contact them, or us, about anything in this notice.

Who this notice covers

This notice covers you if you:

browse evolvebeauty.mom
buy from us, hold an account or take a subscription
sign up to our emails or texts
leave a review or share photos or content with us
take our skincare quiz
join our customer panel to try products before launch (open to UK residents only)
enter a giveaway we run
come to one of our events, such as the Gathering
contact our customer service team
join a video call with us that we record
work with us as a stockist, distributor, supplier, creator or affiliate partner

It does not cover our own employees, who have a separate notice. If you buy Evolve products from a shop or another website, that retailer's own privacy notice covers your purchase.

What we collect

Contact and identity details: name, email address, phone number, delivery and billing addresses.
Order details: what you bought, when, delivery, returns and refunds. Payments are handled by our payment providers (Shopify Payments, PayPal and Stripe) and we do not see or store your full card number.
Account and subscription details: login, order history, subscription settings and loyalty or referral activity.
Marketing preferences: whether you have signed up to emails or texts, and how you engage with them, such as opens and clicks.
Browsing and device information: pages viewed, products added to basket, device and browser type, approximate location from your IP address, and identifiers set by cookies and similar technologies, where you have allowed them.
Reviews and content: reviews, ratings, photos and videos you share with us or tag us in.
Panel responses: your answers about products you have tried, your skin type and concerns, and any photos you provide.
Skincare quiz answers: your skin type, concerns and preferences, and your email address if you choose to receive your results. In the UK and EU, the quiz has an optional question about life stages such as pregnancy, perimenopause and menopause, which is health information. We only ask for it with your explicit consent (see Health information below). We do not ask this question to visitors from the US.
Customer service records: your messages to us and our replies.
Call recordings and transcripts: if we record a video call with you, the recording, transcript and an automated summary, including your name, image and voice.
Trade contact details: for stockists and partners, business contact details, account and credit information, and, where you give permission on our account form, a credit report.

Why we use it and our lawful basis

The law requires us to have a lawful basis for each use. Where we rely on legitimate interests, the table says what our interest is.

What we do	Details	Lawful basis
Take, deliver and manage your orders, returns and subscriptions	Contact, order, payment and account details shared with the providers who process payments and deliver parcels	Contract
Answer your questions and complaints	Your messages, order history	Contract, or legitimate interests in helping you
Send marketing emails	Email address, name, preferences, engagement	Consent
Send marketing texts	Phone number, preferences	Consent
Send marketing by post	Name, address, order history	Legitimate interests in telling existing customers about our products. You can opt out at any time
Measure and improve our website	Browsing and device information	Consent, through our cookie banner
Show you relevant advertising on other sites and measure it, including reminding you about items you looked at or left in your basket	Browsing and device information, and order events passed to Meta and Google through our server-side set-up	Consent, through our cookie banner
Show or exclude customers and people who have shown interest in our products in advertising on Meta and Google	Email address or phone number, matched by Meta or Google, which then delete anyone they cannot match	Legitimate interests in reaching existing customers and people who have shown interest in our products. You can object at any time and we will remove you. We never include anyone who has asked us to stop showing them ads or to stop all marketing
Recommend products, including through our skincare quiz	Quiz answers, browsing and order history	Consent for the quiz and for any results emailed to you; explicit consent for any health information; legitimate interests in showing relevant products on our site
Record video calls	Recording, transcript and summary of the call	Consent, which we ask for at the start of the call. If you say no, we do not record
Collect and publish reviews	Name or initials, review, photos	Consent
Run the customer panel	Contact details, responses, photos	Consent
Run giveaways	Contact details, entry	Consent, and contract for the prize
Use photos and content you share	Images, video, social handle	Consent, which you can withdraw for future use
Run our affiliate programme	Click and order references	Legitimate interests in paying partners for sales they refer
Manage trade accounts and credit	Business contact, account and credit details	Contract and legitimate interests in managing credit risk
Prevent fraud and keep our systems secure	Order, payment and device information	Legitimate interests
Keep accounting and tax records and meet other legal duties	Order and invoice records	Legal obligation

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Health information

Our skincare quiz has an optional question about life stages, such as pregnancy, perimenopause or menopause. The law treats this as health information and gives it extra protection.

We only collect it if you tick a box agreeing to it. Answering is always optional and you can take the quiz without it.
We use it to tailor your quiz recommendations. If you tick a second box, we also use it to send you emails about products suited to your life stage.
We do not use it for advertising on other sites, and we do not share it with advertising platforms such as Meta or Google.
Only the people who run the quiz and our emails can see it, and we keep it for 24 months before deleting it.
You can withdraw your consent at any time by emailing privacy@evolvebeauty.mom. We will then delete your answers.
We do not ask this question to visitors from the US.

Your right to object to marketing

You can tell us to stop any kind of marketing at any time, and we will stop. Use the unsubscribe link in any email, reply STOP to any text, or contact privacy@evolvebeauty.mom to stop post, ads or everything. Each choice is separate: unsubscribing from emails stops emails, and asking us to stop all marketing stops emails, texts, post and ads.

Cookies and tracking

We use cookies, pixels and similar technologies on our website. Some are needed for the site to work, such as keeping items in your basket, and these are always on. Others help us understand how the site is used or show you relevant advertising, and these only run if you agree.

Our cookie banner, provided by Consentmo, asks for your choice when you arrive. The choices it offers depend on where you are visiting from. You can change your choice at any time using the cookie settings link at the bottom of every page. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of advertising cookies.

Some of our measurement runs through a server we control rather than directly in your browser, using a service called Stape. Your browser sends events, such as a page view or a purchase, to that server, which then passes selected information on to Google Analytics, Google Ads and Meta. It follows the choice you make in our cookie banner: if you decline advertising or analytics cookies, those events are not sent.

Who we share it with

We share personal information with companies that provide services to us and act on our instructions. The main ones are:

Provider	What they do for us
Shopify	Runs our online shop, checkout and Shopify Payments
PayPal, Stripe	Take payments
Klaviyo	Sends our emails and texts
Skio	Manages subscriptions
Yotpo	Collects and displays reviews, and runs our rewards programme
Gorgias	Customer service inbox
Octane AI	Runs our skincare quiz
Typeform	Runs our customer panel sign-up and feedback forms
Rebuy, Zipify One Click Upsell	Product recommendations and offers on our site
Searchanise	Site search
Superfiliate, Shopify Collabs	Referrals and creator partnerships
Orbe Geolocation	Shows the right country site, using approximate location from your IP address
Blockify	Fraud prevention
Timesact	Pre-order and back-in-stock notices
Fivetran, Google BigQuery	Reporting and analysis of our sales and marketing
Zapier, Matrixify	Moving data between our systems
A2X, Numeral	Accounting and US sales tax
TikTok Shop (CedCommerce), Valet Seller	Selling through other marketplaces
Paper Run	Prints and posts our postcards, using your name and address from our customer records
Ground	Sends emails and manages email signups on site in some cases
Consentmo	Records your cookie choices and privacy requests
Stape	Server-side data management
Meta, Google	Advertising and measurement
AWIN	Affiliate tracking
Cin7, Xero, Google Workspace	Our order, stock, accounting and office systems, including Google Meet call transcripts
Fathom	Records and transcribes video calls
DPD, DHL, Royal Mail (Click & Drop), ShipStation	Deliver your parcels
O2J (US)	Store and send orders to customers in the US
Amazon	Marketplace orders placed through Amazon

Giveaways with partner brands: when we run a giveaway with another brand, the entry form names the brand and says whether your details will be shared with them. Entering does not sign you up to anyone's marketing. We only add you to our emails, or pass your details to the partner for theirs, if you tick a separate box for each.

We may also share information if the law requires it, or with a buyer if the business or part of it is sold. We do not sell your personal information for money.

Sending information outside the UK

Some of our providers are based in, or store data in, other countries, including the US and the EU. Where we send personal information outside the UK, we make sure it is protected, either because the country has been recognised as providing adequate protection or through contract terms approved for this purpose. Contact us for a copy of the safeguards.

How long we keep it

We keep information only as long as we need it. These periods are our own decisions unless marked otherwise.

Information	How long
Order and invoice records	6 years after the end of the financial year in which the order was placed (a legal requirement)
Customer account	Until you close it, or 3 years after your last order or login
Email and text marketing	Until you unsubscribe. We remove people who have not opened or clicked for 2 years. We keep a short record of anyone who unsubscribes so we do not contact them again
Postal marketing	Customers who have ordered in the last 3 years. Anyone who opts out stays on our suppression list
Quiz life stage answers	24 months, or until you withdraw consent
Call recordings and transcripts	[TBC: Laura to decide, suggested 12 months unless needed for a specific purpose]
Customer service messages	3 years after the conversation closes
Reviews	While the review is published, or until you ask us to remove it
Panel responses	For as long as the product is on sale and 2 years after, as evidence for what we say about it. We aggregate data to remove names where we can
Photos and content you share	For as long as your permission covers, or until you withdraw it for future use
Giveaway entries	Until the winner is confirmed and the prize delivered, then deleted unless you asked to join our emails
Trade contacts	For the length of the relationship and 6 years after
Cookie and tracking data	As set out in the cookie banner
Data protection complaints and requests	3 years after they are closed

Your rights

You have the right to:

ask for a copy of the personal information we hold about you
ask us to correct information that is wrong or incomplete
ask us to delete your information, where we have no reason to keep it
ask us to limit how we use it
object to how we use it, including for marketing
ask for information you gave us in a format you can take elsewhere, where we use it on the basis of consent or contract
withdraw your consent at any time, where we rely on it. This does not affect what we did before

To use any of these rights, contact privacy@evolvebeauty.mom or use the Your Privacy Choices page on our website. We may need to confirm your identity before we act. We will reply within one month. If your request is complex we may need up to two further months, and we will tell you why within the first month.

Complaints

If you are unhappy with how we have handled your information, please tell us first at privacy@evolvebeauty.mom. We will acknowledge your complaint within 30 days and let you know the outcome.

You can also complain to the Information Commissioner's Office, the UK regulator: ico.org.uk/make-a-complaint, or phone 0303 123 1113. If you live in the EU, you can complain to the data protection authority in your country.

Customers in the EU

We send marketing emails to EU customers only after they confirm their sign-up by clicking a link in a confirmation email. Our EU representative is named under Who we are.

Customers in the US

Depending on the state you live in, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of targeted advertising or of what your state's law calls the sale or sharing of personal information. We do not sell personal information for money. Some states treat sharing browsing information with advertising platforms as a sale or sharing, and you can opt out of this on our Your Privacy Choices page or by turning on Global Privacy Control in your browser.

To use your rights, contact privacy@evolvebeauty.mom or use the Your Privacy Choices page. If we decline your request, you can appeal by replying to our decision, and we will tell you the outcome and how to contact your state attorney general if you are not satisfied. We will not treat you differently for using your rights.

We do not collect health information from US visitors.

Children

Our website and products are sold to adults aged 18 and over, and we do not knowingly collect information from children.

Changes to this notice

We review this notice regularly and will update it when we change how we use personal information. The version and date at the top show when it last changed.