Privacy policy

PRIVACY POLICY

Abevo Limited t/a Abevo (abevo.co.uk)

Last updated: 16 July 2026

Abevo Limited ("Abevo", "we", "us" or "our") operates this store and website, including all related information, content, features, tools, products and services (the "Services"), to provide you with a curated shopping experience. Our Services are hosted on the Shopify platform. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us.

For the purposes of UK GDPR and the Data Protection Act 2018, Abevo Limited is the data controller of your personal information, except where stated otherwise in this Policy. If there is a conflict between our Terms of Service and this Privacy Policy in relation to the collection, processing or disclosure of your personal information, this Privacy Policy controls.

1. PERSONAL INFORMATION WE COLLECT

We may collect or process the following categories of personal information, depending on how you interact with the Services:

• Contact details: name, billing and shipping address, phone number, and email address.

• Financial information: payment card details, transaction details, and payment confirmations (processed via our third-party payment processors; we do not store full card numbers).

• Account information: username, password, preferences and settings.

• Transaction information: items viewed, added to cart or wishlist, purchased, returned, exchanged or cancelled, and your order history.

• Communications with us: information you provide when contacting customer support, including any product, allergy, or skin-condition information you choose to share (see Section 4).

• Device and usage information: IP address, browser and device information, and how you interact with the Services, collected via cookies and similar technologies (see our Cookie Policy).

2. WHERE WE GET YOUR INFORMATION

• Directly from you, when you create an account, place an order, or contact us.

• Automatically, through your use of the Services, including via cookies.

• From our service providers, including Shopify and other providers who process data on our behalf.

• From our business partners, where relevant.

3. HOW WE USE YOUR PERSONAL INFORMATION, AND OUR LEGAL BASIS

UK data protection law requires us to have a valid legal basis for each way we use your personal information. The table below sets out our purposes and the corresponding legal basis under UK GDPR Article 6.

Providing and fulfilling the Services — Legal basis: performance of a contract with you.

We use your information to process payments, fulfil and ship orders, manage returns and exchanges, maintain your account, and provide the core shopping experience.

Improving and personalising the Services — Legal basis: legitimate interests.

We analyse how the Services are used and tailor product recommendations, in a way that does not override your rights and interests. You can object to this at any time (see Section 8).

Marketing and advertising — Legal basis: your consent.

We will only send you marketing emails or text messages if you have opted in, for example by ticking a consent box at checkout or when signing up to our mailing list. You may withdraw this consent at any time using the unsubscribe link in any marketing message, or by contacting us. We do not use pre-ticked consent boxes. Withdrawing consent will not affect transactional communications relating to your account or orders.

Security and fraud prevention — Legal basis: legitimate interests, and legal obligation where applicable.

We use your information to authenticate accounts, secure payments, and detect and prevent fraudulent or unlawful activity.

Customer communications and support — Legal basis: performance of a contract, and legitimate interests.

We use your information to respond to enquiries and provide customer support.

Compliance with legal obligations — Legal basis: legal obligation.

We use your information where necessary to comply with applicable law, respond to valid legal process, or enforce our terms and policies.

4. HEALTH-RELATED INFORMATION YOU CHOOSE TO SHARE

If you contact us for product advice and voluntarily share information about allergies, skin sensitivities, or a skin condition, this is "special category data" under UK GDPR Article 9 and receives extra protection. We only collect and use this information with your explicit consent, given by you volunteering it to us for the purpose of receiving product guidance, and we use it solely to respond to your enquiry. We do not use this information for marketing or profiling purposes, and we retain it only for as long as needed to handle your enquiry, after which it is deleted or anonymised. You may withdraw your consent and ask us to delete this information at any time by contacting us.

5. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose your personal information to:

• Shopify and other service providers who perform services on our behalf, such as payment processing, IT hosting, data analytics, customer support tools, and order fulfilment and shipping.

• Business and marketing partners, to provide marketing services, where you have consented to marketing (see Section 3). Where permitted, you may have a right to opt out of your information being used for cross-merchant advertising; you can exercise this using the contact details in Section 12.

• Third parties you direct us to share information with, for example to arrange shipping or where you use a social media or login integration.

• Professional advisers, regulators, or law enforcement, where necessary to comply with a legal obligation, respond to valid legal process, or protect our rights.

• A buyer or successor, in connection with a merger, acquisition, or sale of business assets.

We do not sell your personal information for money.

6. OUR RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify, which processes personal information about your access to and use of the Services on our behalf, as our processor, in order to provide and improve the Services for you. For certain enhanced features that Shopify makes available to merchants (such as cross-merchant fraud prevention or aggregated analytics), Shopify may act as an independent controller of the personal information used for those specific features. Where this applies, Shopify is responsible for that specific processing, including responding to your requests to exercise your rights in relation to it. You can learn more, and exercise rights directly with Shopify, at the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

7. INTERNATIONAL TRANSFERS

Some of our service providers, including Shopify, and our payment processing and IT service providers, may store or process personal information outside the UK, including in the United States and other countries. Where we transfer your personal information outside the UK or the European Economic Area, we rely on legally recognised transfer mechanisms, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or we transfer to a country that the UK Government has determined offers an adequate level of data protection.

8. YOUR RIGHTS

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal information:

• Right of access: to request a copy of the personal information we hold about you.

• Right to rectification: to request correction of inaccurate or incomplete personal information.

• Right to erasure: to request deletion of your personal information in certain circumstances.

• Right to restrict processing: to ask us to limit how we use your personal information.

• Right to object: to object to our processing of your personal information, including for direct marketing, at any time and without needing to give a reason where the objection relates to marketing.

• Right to data portability: to receive your personal information in a portable format, or have it transferred to another provider, in certain circumstances.

• Right to withdraw consent: where we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before actioning a request, and, if you use an authorised agent to make a request, we may need to verify their authority to act on your behalf. We will respond within the timeframes required by law and will not discriminate against you for exercising these rights.

9. HOW WE PROTECT AND RETAIN YOUR INFORMATION

We use appropriate technical and organisational measures to protect your personal information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We retain personal information for as long as necessary to provide the Services, comply with our legal obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements, after which it is deleted or anonymised.

10. CHILDREN'S DATA

The Services are not directed at, and are not intended to be used by, children. We do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details in Section 12 so that we can delete it.

11. THIRD-PARTY WEBSITES AND LINKS

The Services may link to websites operated by third parties, including brand partner websites. We are not responsible for the privacy practices or content of these third-party sites, and we encourage you to review their privacy policies before providing them with your information.

12. CONTACT AND COMPLAINTS

If you have questions about this Privacy Policy, or would like to exercise any of your rights, please contact us:

Abevo Limited

hello@abevo.co.uk

128 City Road, London, EC1V 2NX

Company Number: 17116034

VAT Registration Number: 516895356

If you are unhappy with how we have handled your personal information, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint

• Telephone: 0303 123 1113

• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the chance to address your concerns before you contact the ICO, so please contact us in the first instance.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or operational reasons. We will post any revised version on this page, update the "Last updated" date, and, where changes are material, provide notice as required by applicable law.