Last Updated: 16 August 2026
Nuur Cosmetics Ltd ("Nuur Cosmetics", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit https://nuurcosmetic.com, purchase from us, create an account, contact us, subscribe to marketing or otherwise interact with Nuur Cosmetics.
We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations ("PECR").
1. Who We Are
For the purposes of UK data protection law, the data controller is:
NUUR COSMETICS LTD
Company Number: 14265750
Registered office: 37 Clos Nant Mwlan, Pontprennau, Cardiff, Wales, CF23 8NA
Correspondence address: Office 14292, 182-184 High Street North, East Ham, London, E6 2JA
Email: info@nuurcosmetic.com
Website: https://nuurcosmetic.com
Nuur Cosmetics Ltd determines how and why personal information covered by this Privacy Policy is processed.
2. Personal Information We Collect
Depending on how you interact with us, we may collect the following categories of personal information.
Identity information
This may include:
Contact information
This may include:
Order and transaction information
This may include:
We generally do not directly receive or store complete payment card numbers. Payments are processed through our payment service providers, although we may receive limited payment-related information such as payment status, payment method or transaction identifiers.
Customer service and correspondence information
This may include:
emails;
contact form submissions;
complaints;
product enquiries;
return requests;
refund and guarantee claims;
photographs or videos submitted in support of a claim;
social media communications; and
other correspondence with us.
Technical information
This may include:
IP address;
device type;
browser type and version;
operating system;
approximate location derived from IP address;
time zone;
device identifiers;
website session information; and
security and diagnostic information.
Website and usage information
This may include information about:
Marketing information
This may include:
whether you have subscribed to marketing;
marketing preferences;
email engagement;
promotional interactions;
advertising interactions; and
when and how marketing consent or preferences were recorded.
Reviews, testimonials and user content
Where you voluntarily provide them, we may process:
product reviews;
testimonials;
photographs;
videos;
before-and-after photographs;
social media content; and
other material submitted to Nuur Cosmetics.
Where we wish to use identifiable customer content for advertising or promotional purposes beyond the context in which it was originally submitted, we will rely on an appropriate legal basis and, where necessary, obtain permission.
Fraud, security and dispute information
We may collect and create information relating to:
suspected fraudulent transactions;
delivery disputes;
chargebacks;
refund or guarantee claims;
account misuse;
payment disputes;
carrier evidence;
IP and device information relevant to a claim; and
records reasonably necessary to establish, exercise or defend legal claims.
3. Information We Do Not Intentionally Request
We do not ordinarily require customers to provide special category personal information, such as information concerning health, ethnicity, religion or biometric identification.
Please avoid sending sensitive information unless it is reasonably necessary for us to deal with your enquiry.
If information you voluntarily provide contains special category personal data, we will process it only where there is a lawful basis and an applicable additional condition permitting us to do so.
4. How We Collect Personal Information
We collect information from several sources.
Information you give us directly
For example, when you:
place an order;
create an account;
subscribe to our newsletter;
contact customer support;
complete a form;
enter a promotion;
submit a review;
request a refund;
make a guarantee claim; or
communicate with us.
Automatically
When you use the Website, certain information may be collected through:
Non-essential technologies are used subject to applicable consent requirements.
Third parties
We may receive information from third parties involved in providing our services, including:
our ecommerce platform;
payment processors;
delivery companies;
fulfilment providers;
marketing service providers;
analytics providers;
advertising platforms;
fraud-prevention providers;
customer service providers; and
social media platforms where you interact with us through those services.
We may also receive information from banks, card issuers, payment providers or carriers where necessary to investigate a payment, delivery, refund or chargeback dispute.
5. Why We Use Your Information and Our Lawful Bases
UK data protection law requires us to have a lawful basis for processing personal information.
The appropriate basis depends on why the information is being used.
Processing and fulfilling your order
We use information to:
Lawful basis: performance of a contract or taking steps at your request before entering into a contract.
Customer service
We use information to:
Lawful basis: performance of our contract with you and/or our legitimate interests in providing effective customer service.
Returns and voluntary guarantees
We use relevant information to:
assess return eligibility;
administer voluntary money-back guarantees;
verify qualifying purchases;
assess evidence submitted with a claim;
identify duplicate claims; and
process approved refunds.
Lawful basis: performance of our contractual obligations and our legitimate interests in administering voluntary programmes fairly and preventing misuse.
Fraud prevention and security
We may process information to:
prevent fraudulent transactions;
investigate suspicious activity;
protect customer accounts;
protect our Website;
prevent abuse of promotions, returns and guarantees; and
maintain evidence relating to disputes.
Lawful basis: our legitimate interests in preventing fraud, protecting customers and protecting our business, and where applicable compliance with legal obligations.
Chargebacks and legal disputes
We may process and disclose relevant information to:
respond to chargebacks;
defend payment disputes;
establish facts relating to delivery or payment;
enforce our contractual rights; and
establish, exercise or defend legal claims.
This may include order information, delivery evidence, communications, refund history and other information reasonably relevant to the dispute.
Lawful basis: our legitimate interests in establishing and defending legal rights, together with legal obligations where applicable.
Accounting, tax and regulatory requirements
We use information where necessary to:
maintain accounting records;
comply with tax requirements;
fulfil regulatory requirements; and
comply with lawful requests from authorities.
Lawful basis: legal obligation.
Improving our Website and services
We may use information to:
understand how customers use our Website;
identify technical problems;
evaluate performance;
improve customer experience;
analyse purchasing trends; and
improve products and services.
Lawful basis: legitimate interests where appropriate, and consent where required for the technology used to collect the information.
Marketing
We may use contact and marketing information to send information about:
For electronic marketing to individuals, we will only send communications where permitted under applicable law.
Depending on the circumstances, this may be based on:
Every electronic marketing message will provide a way to unsubscribe or opt out.
You can withdraw consent or object to direct marketing at any time.
Personalised advertising
Where permitted and where required consent has been obtained, we and advertising partners may use information collected through cookies, pixels or similar technologies to:
measure advertising;
create advertising audiences;
understand advertising performance; and
show advertising that may be more relevant to you.
Lawful basis: consent where required by PECR and applicable data protection law.
6. Legitimate Interests
Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against your rights and reasonable expectations.
Our legitimate interests may include:
operating and improving our business;
providing customer service;
preventing fraud;
protecting our systems;
administering voluntary guarantees;
investigating delivery and payment disputes;
defending legal claims;
understanding business performance; and
ensuring customers and our business are protected from misuse.
You may have the right to object to processing based on legitimate interests in certain circumstances.
7. Marketing Communications
You may subscribe to Nuur Cosmetics marketing through our Website or other signup methods.
Where required, we obtain consent before sending electronic marketing.
In circumstances where UK law permits us to rely on the existing-customer soft opt-in, we may send marketing concerning our own similar products or services to customers who were given an opportunity to opt out when their details were collected and in every subsequent marketing message.
You can stop marketing emails at any time by:
Unsubscribing from marketing does not prevent us from sending necessary non-marketing communications about an order, refund, account, legal matter or customer service enquiry.
We may retain limited information on a suppression list after you unsubscribe so that we can respect your preference and avoid sending marketing to you again.
8. Cookies and Similar Technologies
Our Website uses cookies and similar technologies.
These may include:
Some are necessary for the Website to function, including technologies used for:
shopping carts;
checkout;
account authentication;
security; and
core website functions.
Other technologies may be used for:
Where consent is required by law for a non-essential cookie or similar technology, we will seek consent before using it.
You can manage available cookie choices through our cookie consent tools.
Your browser may also allow you to block or delete cookies, although doing so may affect Website functionality.
Further information is available in our Cookie Policy and cookie preference interface.
9. Who We Share Personal Information With
We do not sell personal information to third parties in the ordinary meaning of selling customer databases for money.
We may share information with carefully selected organisations where necessary to operate our business.
These may include:
Ecommerce providers
Our Website is powered by Shopify. Shopify may process information necessary to operate the Website, checkout and associated ecommerce services.
Payment providers
Payment information may be processed by payment processors, banks, card networks and payment services involved in completing or administering your transaction.
Fulfilment and delivery providers
We may share information such as your name, delivery address, email address or telephone number with:
where necessary to fulfil and deliver your order.
Marketing and communication providers
We may use service providers to:
administer email and SMS communications;
maintain mailing lists;
manage marketing preferences;
analyse campaign performance; and
communicate with customers.
Analytics and advertising providers
Where enabled and subject to applicable consent requirements, information may be shared with analytics or advertising platforms to measure Website activity and advertising performance.
Technology and security providers
Information may be processed by providers supporting:
website hosting;
cloud storage;
fraud prevention;
cybersecurity;
customer support; and
business administration.
Professional advisers
We may disclose information where reasonably necessary to:
Payment disputes and fraud investigations
Where necessary, relevant information may be disclosed to:
to investigate or respond to fraudulent activity, refunds, delivery disputes or chargebacks.
Legal authorities
We may disclose personal information where reasonably necessary or legally required to:
courts;
regulators;
law-enforcement agencies;
government authorities; or
other legally authorised bodies.
Business transactions
If Nuur Cosmetics Ltd is involved in a merger, restructuring, investment, acquisition or sale of all or part of its business or assets, relevant information may be disclosed to appropriate parties subject to reasonable confidentiality and data protection safeguards.
10. Shopify
Our Website is hosted and operated using Shopify's ecommerce services.
As part of providing these services, Shopify may process customer and Website information on our behalf and, in some circumstances, for its own purposes as described in its applicable privacy information.
Your information may therefore be processed through Shopify's systems and infrastructure.
11. International Transfers
Some service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps required by applicable UK data protection law.
Depending on the destination and recipient, these safeguards may include:
UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK Addendum to approved Standard Contractual Clauses; or
another lawful transfer mechanism.
Where required, appropriate transfer risk assessments or equivalent safeguards will also be considered.
You can contact us for further information about safeguards relevant to your personal information.
12. How Long We Keep Personal Information
We do not retain personal information indefinitely.
Retention periods depend on the type of information, why we collected it, legal requirements and whether information is needed to establish or defend legal claims.
Generally:
order, transaction and accounting records may be retained for the period required by applicable tax, accounting and legal requirements;
customer service correspondence is retained for as long as reasonably necessary to resolve the matter and protect against subsequent disputes;
refund, guarantee, fraud and chargeback records may be retained for as long as reasonably necessary to administer the claim, prevent repeat abuse and establish or defend legal rights;
marketing information is retained while you remain subscribed or while we otherwise have a lawful basis to process it;
suppression records may be retained after an opt-out where necessary to ensure your marketing preference continues to be respected;
cookie and analytics data is retained in accordance with the relevant cookie or service settings; and
account information may be retained for the lifetime of the account and for an appropriate period afterwards where necessary.
When information is no longer required, we will delete it, anonymise it or otherwise dispose of it appropriately, subject to legal and technical requirements.
13. Security
We use appropriate technical and organisational measures designed to protect personal information against:
unauthorised access;
unlawful processing;
accidental loss;
destruction;
alteration; and
disclosure.
No internet-based service can guarantee absolute security.
Where a personal data breach occurs, we will assess and respond to it in accordance with applicable data protection law, including notifying the Information Commissioner's Office or affected individuals where legally required.
14. Your Data Protection Rights
Depending on the circumstances, UK data protection law may give you the right to:
Access
Request confirmation of whether we process your personal information and obtain a copy of relevant information.
Rectification
Ask us to correct inaccurate personal information or complete incomplete information.
Erasure
Ask us to delete personal information in certain circumstances.
The right to erasure is not absolute. For example, we may need to retain information to comply with legal obligations or establish or defend legal claims.
Restriction
Ask us to restrict processing in certain circumstances.
Object
Object to certain processing based on legitimate interests.
You have an absolute right to object to your personal information being used for direct marketing.
Data portability
Request certain information you provided to us in a structured, commonly used and machine-readable format where the legal requirements for portability are satisfied.
Withdraw consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
Complain to the regulator
You have the right to complain to the Information Commissioner's Office ("ICO"), the UK's independent data protection regulator.
We would appreciate the opportunity to address your concerns first, but you are not required to contact us before making a complaint to the ICO.
15. Exercising Your Rights
To exercise a data protection right, contact:
info@nuurcosmetic.com
Please explain the nature of your request.
We may request information reasonably necessary to verify your identity before disclosing or altering personal information.
We will ordinarily respond without undue delay and within one month as required by applicable law.
In certain circumstances involving complex or multiple requests, the response period may lawfully be extended. If this applies, we will notify you as required.
Data protection requests are ordinarily free of charge. However, applicable law permits us in limited circumstances to charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.
16. Automated Decision-Making and Profiling
We do not currently make decisions that produce legal effects or similarly significant effects on customers based solely on automated processing.
We may use automated tools for purposes such as:
fraud screening;
website personalisation;
advertising;
analytics; and
marketing segmentation.
These activities do not necessarily constitute solely automated significant decision-making for the purposes of UK data protection law.
If this changes in a way that triggers additional legal requirements, we will update this Privacy Policy and provide any information required by law.
17. Children's Privacy
Our Website and products are not directed at children under 18.
We do not knowingly seek to collect personal information directly from children for the purpose of providing our ecommerce services to them.
If we become aware that personal information has been collected from a child in circumstances where it should not have been, we will take appropriate steps in accordance with applicable law.
If you believe a child has provided information to us inappropriately, contact info@nuurcosmetic.com.
18. Third-Party Websites and Social Media
Our Website may contain links to websites or services operated by third parties.
We do not control the privacy practices of independent third parties.
When you leave our Website or interact directly with another platform, its own privacy policy may apply.
This includes social media platforms on which Nuur Cosmetics maintains an account or advertises.
19. Social Media and Advertising
If you interact with Nuur Cosmetics through social media, the relevant social media provider may separately process information about your interaction in accordance with its own privacy policy.
Where advertising technologies are used on our Website, we will apply applicable cookie and consent requirements.
Advertising platforms may receive information about Website interactions where you have provided any consent required for that activity.
20. Customer Photographs, Testimonials and Guarantee Evidence
Where customers submit photographs, videos or other evidence in connection with:
we process that material for the purpose for which it was submitted and related administration, fraud prevention and dispute handling where appropriate.
Submitting evidence to support a customer-service or guarantee claim does not, by itself, give Nuur Cosmetics permission to use that material publicly for advertising.
Where we wish to use identifiable customer photographs, videos or testimonials for advertising or promotional purposes, we will rely on an appropriate legal basis and obtain any permission required.
21. Fraud, Chargebacks and Legal Claims
We have a legitimate interest in protecting Nuur Cosmetics and our customers against fraudulent transactions and misuse.
Where reasonably necessary, we may retain and use relevant information to:
investigate suspected fraud;
identify duplicate refund or guarantee claims;
investigate disputed deliveries;
respond to chargebacks;
communicate with payment providers and carriers; and
establish, exercise or defend legal claims.
This may include information such as order history, correspondence, delivery evidence, refund records, IP or device information and information supplied as part of a claim.
We will only process information that is reasonably relevant to the purpose concerned and will retain it only for an appropriate period.
22. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
changes to our services;
changes to the technology we use;
changes to how we process information; or
changes in applicable law or regulatory guidance.
The current version and its "Last Updated" date will be published on our Website.
Where a change materially affects how we use personal information and applicable law requires additional notice or consent, we will take appropriate steps.
Continued Website use will not be treated as consent where data protection law requires consent to a new form of processing.
23. Contact Us
Questions concerning this Privacy Policy or the way Nuur Cosmetics Ltd handles personal information should be sent to:
Nuur Cosmetics Ltd
Registered office: 37 Clos Nant Mwlan, Pontprennau, Cardiff, Wales, CF23 8NA
Correspondence address: Office 14292, 182-184 High Street North, East Ham, London, E6 2JA
Email: info@nuurcosmetic.com
Website: https://nuurcosmetic.com
You may also contact the Information Commissioner's Office if you have concerns about our handling of your personal information.
