Privacy Policy.

01 Who We Are.

02 Information We Collect.

We may collect personal information that you provide directly to us, including:

• Name
• Email address
• Phone number
• Billing address
• Shipping address
• Order details
• Payment confirmation details
• Account login information
• Customer service messages
• Product reviews
• Birthday, where provided for loyalty rewards
• Loyalty programme activity, including points, rewards and referrals

We may also collect information automatically when you use our website, including:

• IP address
• Device information
• Browser information
• Pages viewed
• Products viewed
• Items added to cart
• Website activity
• Cookie and tracking information

We may also receive information from third parties who help us operate our website and services, including website platforms, payment providers, delivery partners, loyalty providers, review platforms, analytics providers, email marketing platforms and advertising partners.

03 How We Use Your Information.

We use your personal information to:

• Process and fulfil orders
• Take payment and prevent fraud
• Arrange delivery and returns
• Create and manage customer accounts
• Operate The Members Edit loyalty programme
• Send order confirmations and delivery updates
• Respond to customer care enquiries
• Manage reviews, referrals and rewards
• Send marketing emails where you have subscribed
• Improve our website, products and customer experience
• Show relevant advertising
• Meet legal, tax, accounting and regulatory obligations
• Protect our business, website, customers and legal rights

04 Legal Bases for Processing.

We process personal information where we have a lawful basis to do so, including:

• To perform a contract with you, such as processing your order or managing your account
• To comply with legal obligations, such as tax, accounting and regulatory requirements
• Where you have given consent, such as signing up to marketing emails or accepting non-essential cookies
• Where we have a legitimate interest, such as improving our website, preventing fraud, managing customer care and protecting our business

05 Marketing.

If you sign up to receive marketing emails, we may send you updates about products, launches, offers, rewards, events and skincare content. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails. Even if you unsubscribe from marketing emails, we may still send you service messages relating to your orders, account, returns or customer care enquiries.

06 Cookies.

We use cookies and similar technologies on our website to help the site work properly, improve your shopping experience, understand how customers use our website, personalise content, and support advertising and marketing activity. Some cookies are strictly necessary for the website to function, including cookies used for checkout, security, account login, cart functionality and order processing. These cookies cannot be switched off through our cookie banner. With your consent, we and our partners, including Shopify, may also use cookies for analytics, personalisation and advertising. These cookies help us understand website performance, improve our customer experience and show relevant marketing. Our website may use cookies and similar technologies from third-party service providers, including Shopify, analytics providers, advertising platforms, email marketing platforms, loyalty providers and review platforms. You can accept, decline or manage your cookie preferences through our cookie consent banner. You can manage or disable cookies through your browser settings, but some parts of the website may not work properly if strictly necessary cookies are disabled.

07 Sharing Your Information.

We may share your personal information with trusted service providers who help us run our business, including:

• Website and ecommerce service providers
• Payment processors
• Delivery and courier partners
• Warehouse and fulfilment partners
• Email marketing platforms
• Loyalty programme providers
• Review platforms
• Analytics providers
• Advertising and social media platforms
• Customer service platforms
• Professional advisers, where required
• Legal, regulatory or tax authorities, where required by law

We only share personal information where necessary for business, legal, service or operational purposes.

08 International Transfers.

Some of our service providers may process personal information outside the European Economic Area or the United Kingdom. Where this happens, we take appropriate steps to protect your personal information in line with applicable data protection laws.

09 How Long We Keep Information.

We keep personal information only for as long as necessary for the purpose it was collected. This may include keeping order, payment, tax, customer care and account information for business, legal, accounting, regulatory or dispute resolution purposes.

10 Your Rights.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to certain processing
• Restrict certain processing
• Request a copy of your information
• Withdraw consent where we rely on consent
• Opt out of marketing communications

To exercise your rights, please contact us at customercare@pestleandmortar.mom.

We may need to verify your identity before processing your request.

11 Reviews & User Content.

If you submit a product review, photo, video or other user-generated content, that content may be displayed publicly on our website or marketing channels. Please do not include personal information in public reviews that you do not want others to see.

12 Children.

Our website is not intended for children. We do not knowingly collect personal information from children.

13 Third-Party Links.

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices, content or security of those third-party websites.

14 Security.

We take reasonable steps to protect your personal information. However, no website, system or method of transmission is completely secure.

15 Complaints.

If you have a concern about how we use your personal information, please contact us first at customercare@pestleandmortar.mom. You also have the right to contact your local data protection authority.

16 Changes to This Policy.

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

17 Contact.

For questions about this Privacy Policy, please contact customercare@pestleandmortar.mom.