PRIVACY POLICY
PRIVACY POLICY
This Privacy Policy describes how www.calisibeauty.co.uk (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit the Site or make a purchase from it.
Contact
If you have any questions after reviewing this Policy, would like more information about our privacy practices, or wish to make a complaint, please contact us by email at customerservice@calisibeauty.com.
Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.
In this Privacy Policy, we refer to any information about an identifiable individual, including the information listed below, as “Personal Information”. The following sections provide further details about the Personal Information we collect and why.
Device Information
Purpose of collection: To load the Site accurately for you and to perform analytics on Site usage in order to optimise our website.
Source of collection: Collected automatically when you access our Site through cookies, log files, web beacons, tags, or pixels.
Disclosure for a business purpose: Shared with our processor, Shopify.
Personal Information collected: Web browser version, IP address, time zone, cookie information, which websites or products you view, search terms, and how you interact with the Site.
Order Information
Purpose of collection: To provide products or services to fulfil our contract with you, process your payment information, arrange shipping, provide invoices and/or order confirmations, communicate with you, screen orders for potential risk or fraud, and, where consistent with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
Source of collection: Collected directly from you.
Disclosure for a business purpose: Shared with our processors Shopify, Stripe Payment Provider, and DHL Express.
Personal Information collected: Name, billing address, shipping address, payment information, including credit card numbers, email address, and phone number.
Customer Support Information
Purpose of collection: To provide customer support, respond to your enquiries, resolve issues relating to your order, and provide products or services to fulfil our contract with you.
Source of collection: Collected directly from you.
Disclosure for a business purpose: Shared with our processors Shopify, Stripe Payment Provider, and DHL Express where necessary.
Personal Information collected: Name, billing address, shipping address, payment information, email address, phone number, order details, and any other information you provide when contacting us.
Sharing Personal Information
We share your Personal Information with service providers that help us provide our services and fulfil our contracts with you, as described above. For example:
We use Shopify to operate our online store. You can learn more about how Shopify uses your Personal Information here:
https://www.shopify.com/legal/privacy
We may share your Personal Information to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful request for information that we receive, or otherwise protect our rights.
We have partnered with DHL to deliver your online orders. You can find more information about DHL’s privacy practices on its website:
https://www.dhl.com/gb-en/home.html
Behavioural Advertising
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you. For example:
We use Google Analytics to help us understand how our customers use the Site. You can learn more about how Google uses your Personal Information here:
https://www.google.com/intl/en/policies/privacy/
You can also opt out of Google Analytics here:
https://tools.google.com/dlpage/gaoptout
We use Shopify Audiences to display advertisements on the websites of our advertising partners to shoppers who have purchased from other Shopify merchants and who may also be interested in our products.
We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may present offers that could be of interest to you.
For more information about how targeted advertising works, visit the Network Advertising Initiative’s educational page:
https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
You can opt out of targeted advertising through the following services:
Facebook:
https://www.facebook.com/settings/?tab=ads
Google:
https://www.google.com/settings/ads/anonymous
You can also opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal:
Using Personal Information
We use your Personal Information to provide our services to you. This includes offering products for sale, processing payments, shipping and fulfilling your orders, and keeping you informed about new products, services, and offers.
Lawful Basis
If you are located in the United Kingdom, we process your Personal Information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, and other applicable data protection laws.
We process your Personal Information on the basis of one or more of the following lawful grounds:
-
Your consent
-
The performance of a contract between you and the Site
-
Compliance with our legal obligations
-
The protection of your vital interests
-
The performance of a task carried out in the public interest
-
Our legitimate interests, provided that these interests do not override your fundamental rights and freedoms
Data Retention
When you place an order through the Site, we retain your Personal Information for our records unless and until you ask us to erase this information, subject to any legal or regulatory obligations that require us to retain it.
For more information about your right to erasure, please see the “Your Rights” section below.
Automated Decision-Making
If you are located in the United Kingdom, you have the right to object to processing that is based solely on automated decision-making, including profiling, where that decision produces legal effects concerning you or similarly significantly affects you.
We do not engage in fully automated decision-making using customer data that has legal or otherwise significant effects on you.
Our processor Shopify uses limited automated decision-making to prevent fraud. This does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making may include:
-
A temporary blocklist of IP addresses associated with repeated failed transactions. This blocklist remains in place for a limited number of hours.
-
A temporary blocklist of credit cards associated with blocklisted IP addresses. This blocklist remains in place for a limited number of days.
Your Rights
UK GDPR
If you are located in the United Kingdom, you may have the right to:
-
Access the Personal Information we hold about you
-
Request that your Personal Information be corrected or updated
-
Request that your Personal Information be erased
-
Request that the processing of your Personal Information be restricted
-
Object to the processing of your Personal Information
-
Request that your Personal Information be transferred to you or another service provider
-
Withdraw your consent where processing is based on consent
If you would like to exercise any of these rights, please contact us using the contact information provided above.
Your Personal Information may initially be processed in Ireland and subsequently transferred outside the United Kingdom for storage and further processing, including to Canada and the United States.
For more information about how Shopify handles international data transfers, please refer to Shopify’s privacy and data protection information:
https://help.shopify.com/en/manual/privacy-and-security/privacy
By using our Site, you consent to third parties processing your IP address to determine your location for currency-conversion purposes.
You also consent to the selected currency being stored in a session cookie in your browser. A session cookie is temporary and is automatically removed when you close your browser.
We use this information so that your selected currency remains consistent while you browse the Site and prices can be converted into your local currency.
Cookies
A cookie is a small amount of information downloaded to your computer or device when you visit our Site.
We use various types of cookies, including functional, performance, advertising, social-media, and content cookies.
Cookies improve your browsing experience by allowing the Site to remember your actions and preferences, such as your login details and region selection. This means that you do not have to re-enter this information every time you return to the Site or move from one page to another.
Cookies also provide information about how visitors use the Site, such as whether they are visiting for the first time or are returning visitors.
We use the following cookies to optimise your experience on our Site and provide our services.
Cookies Necessary for the Functioning of the Store
| Name | Function | Duration |
|---|---|---|
_ab |
Used in connection with access to the administrator area. | 2 years |
_secure_session_id |
Used in connection with navigation through the online store. | 24 hours |
_shopify_country |
Used in connection with checkout. | Session |
_shopify_m |
Used to manage customer privacy settings. | 1 year |
_shopify_tm |
Used to manage customer privacy settings. | 30 minutes |
_shopify_tw |
Used to manage customer privacy settings. | 2 weeks |
_storefront_u |
Used to facilitate the updating of customer account information. | 1 minute |
_tracking_consent |
Stores tracking preferences. | 1 year |
c |
Used in connection with checkout. | 1 year |
cart |
Used in connection with the shopping basket. | 2 weeks |
cart_currency |
Used in connection with the shopping basket. | 2 weeks |
cart_sig |
Used in connection with checkout. | 2 weeks |
cart_ts |
Used in connection with checkout. | 2 weeks |
cart_ver |
Used in connection with the shopping basket. | 2 weeks |
checkout |
Used in connection with checkout. | 4 weeks |
checkout_token |
Used in connection with checkout. | 1 year |
dynamic_checkout_shown_on_cart |
Used in connection with checkout. | 30 minutes |
hide_shopify_pay_for_checkout |
Used in connection with checkout. | Session |
keep_alive |
Used in connection with buyer localisation. | 2 weeks |
master_device_id |
Used in connection with merchant login. | 2 years |
previous_step |
Used in connection with checkout. | 1 year |
remember_me |
Used in connection with checkout. | 1 year |
secure_customer_sig |
Used in connection with customer login. | 20 years |
shopify_pay |
Used in connection with checkout. | 1 year |
shopify_pay_redirect |
Used in connection with checkout. | 30 minutes, 3 weeks, or 1 year, depending on the value |
storefront_digest |
Used in connection with customer login. | 2 years |
tracked_start_checkout |
Used in connection with checkout. | 1 year |
checkout_one_experiment |
Used in connection with checkout. | Session |
checkout_session_lookup |
Used in connection with checkout. | 3 weeks |
checkout_session_token_<id> |
Used in connection with checkout. | 3 weeks |
Reporting and Analytics Cookies
| Name | Function | Duration |
|---|---|---|
_landing_page |
Tracks landing pages. | 2 weeks |
_orig_referrer |
Tracks landing pages. | 2 weeks |
_s |
Shopify analytics. | 30 minutes |
_shopify_d |
Shopify analytics. | Session |
_shopify_fs |
Shopify analytics. | 30 minutes |
_shopify_s |
Shopify analytics. | 30 minutes |
_shopify_sa_p |
Shopify analytics relating to marketing and referrals. | 30 minutes |
_shopify_sa_t |
Shopify analytics relating to marketing and referrals. | 30 minutes |
_shopify_y |
Shopify analytics. | 1 year |
_y |
Shopify analytics. | 1 year |
_shopify_evids |
Shopify analytics. | Session |
_shopify_ga |
Shopify and Google Analytics. | Session |
The length of time a cookie remains on your computer or mobile device depends on whether it is a persistent cookie or a session cookie.
Session cookies remain until you stop browsing, while persistent cookies remain until they expire or are deleted.
Most of the cookies we use are persistent and expire between 30 minutes and two years after they are downloaded to your device.
You can control and manage cookies in various ways. Please be aware that removing or blocking cookies may negatively affect your user experience, and some parts of our Site may no longer be fully accessible or function properly.
Most browsers accept cookies automatically, but you can choose whether or not to accept cookies through your browser settings, which can usually be found in the “Tools”, “Settings”, or “Preferences” menu of your browser.
For more information about changing your browser settings or blocking, managing, or filtering cookies, please consult your browser’s help documentation or visit:
Please note that blocking cookies may not completely prevent information from being shared with third parties, such as our advertising partners.
To exercise your rights or opt out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
Do Not Track
Please note that there is no consistent industry-wide understanding of how to respond to “Do Not Track” signals. We therefore do not alter our data-collection and usage practices when we detect such a signal from your browser.
Changes
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons.
Complaints
If you wish to make a complaint, please contact us by email using the contact details provided in the “Contact” section above.
If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the UK Information Commissioner’s Office or another relevant supervisory authority.
Further information about the Information Commissioner’s Office is available at:
Last updated: 12 July 2026
