Last updated: 26 September 2026

This privacy notice explains how Andromeda Nail Supply LTD ("we", "us", "our") collects and uses your personal information when you visit andromedanails.co.uk, buy from us or contact us, and what rights you have under UK data protection law (the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations).

1. Who we are

We are the data controller for your personal information. Andromeda Nail Supply LTD, Unit 56 Bizspace Wembley, 284 Water Road, Wembley, HA0 1HX. Company no. 17374131.
Email: andromedanailsupply@gmail.com · Phone: 07775 174145

2. What we collect and why

Orders and delivery – name, email, phone number, billing and delivery addresses, items ordered, order and payment history. We do not see or store your full card details; payments are handled by our payment providers.
Lawful basis: contract (to process and deliver your order) and legal obligation (tax and accounting records).

Customer accounts – your account login details, saved addresses, order history and preferences.
Lawful basis: contract.

Customer service, returns and complaints – your messages to us (including through our contact form), order details and any photos you send.
Lawful basis: contract and legitimate interests (responding to enquiries and resolving issues).

Marketing emails and texts – name, email, phone number, marketing preferences and how you interact with our emails.
Lawful basis: consent. If you have bought from us, we may also email you about similar products under the "soft opt-in"; you can opt out at any time. We only send marketing texts with your consent.

Reviews, back-in-stock alerts, pre-orders and affiliate programme – the details you give us when you use these features.
Lawful basis: contract, or consent where we ask for it.

Website use, cookies and analytics – device and browser information, IP address, pages viewed and how you use the site (including session recordings by Microsoft Clarity).
Lawful basis: consent for non-essential cookies and analytics, which you can manage in our cookie banner; legitimate interests for strictly necessary cookies and fraud prevention.

Security and fraud prevention – order, device and payment information.
Lawful basis: legitimate interests (protecting our business and customers) and legal obligation.

We collect most information directly from you. Some comes from our service providers (for example payment and delivery confirmations) or automatically from your device when you use our website.

3. Who we share your information with

We only share what is needed with trusted service providers who process data on our behalf, including:

• Shopify – our e-commerce platform and hosting;
• Payment providers – Shopify Payments, PayPal and Klarna;
• Delivery companies – for example Royal Mail and other couriers we use to deliver your order;
• Klaviyo – marketing emails and texts;
• Loox – product reviews;
• Microsoft Clarity – website analytics (only with your consent);
• other apps that help run our store, such as pre-order (PreProduct), back-in-stock alerts and our affiliate programme (BixGrow);
• our professional advisers (such as accountants) and, where required by law, HMRC, the police or other authorities.

Shopify may also use some information for its own purposes, as described in the Shopify Privacy Policy. We never sell your personal information.

4. International transfers

Some of our providers are based in, or store data in, countries outside the UK (for example the USA, Canada and the EU). Where this happens, we make sure your information is protected – for example because the country has UK "adequacy" status (including the UK–US Data Bridge) or because the provider has signed the UK International Data Transfer Agreement or Addendum.

5. How long we keep your information

• Orders, invoices and payment records: 6 years after the end of the financial year in which the order was placed, as required for tax and accounting purposes.
• Customer accounts: until you close your account, or 3 years after your last order or login if the account is inactive.
• Marketing: until you unsubscribe. We then keep your email or phone number on a "do not contact" list so we respect your choice.
• Enquiries and complaints: 2 years after the matter is closed, or longer if needed for a legal claim.
• Reviews: while they are published on our website.
• Cookies: as set out in our cookie banner.

6. Your rights

You have the right to:

• ask for a copy of your personal information (access);
• ask us to correct inaccurate or incomplete information;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to us using your information on the basis of legitimate interests, and object at any time to direct marketing;
• ask us to transfer information you gave us to you or another organisation (portability);
• withdraw your consent at any time, where we rely on consent (this does not affect anything we did before you withdrew it).

To use any of these rights, contact us using the details in section 1. We will respond within one month (this can be extended in some cases, and we will tell you if so). We may need to confirm your identity first. Some rights have exceptions – for example, we must keep order records for tax purposes. You can unsubscribe from marketing at any time using the link in our emails or by replying STOP to texts.

7. Automated decisions

We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect. Our payment providers may use automated checks to help prevent fraud.

8. Security

We use reputable providers with appropriate security measures to protect your information. No online service is completely secure, so please keep your account password safe.

9. Children

Our website and products are intended for adults and are not directed at children. We do not knowingly collect personal information from children under 16.

10. Complaints

If you are unhappy with how we have used your personal information, please contact us first at andromedanailsupply@gmail.com. We will acknowledge your complaint within 30 days and let you know the outcome without undue delay.

If you are still not satisfied, you can complain to the Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF · Helpline 0303 123 1113 · ico.org.uk/make-a-complaint.

11. Changes to this notice

We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated at the top.