Privacy Policy
Last updated: 14 October 2026
Effective date: 7 October 2026
1. Who We Are
OsmoOne is a skincare brand operated by PBA Ventures Ltd ("we", "us", "our").
We are registered in England and Wales under company number 14809103.
Our registered office is: 23 Manor Road, Folkestone, Kent, CT20 2SE, United Kingdom.
If you have any questions about this Privacy Policy, or wish to exercise any of your legal rights, please contact us at:
- Email: privacy@osmoone.com
- Post: 23 Manor Road, Folkestone, Kent, CT20 2SE, United Kingdom
2. What This Policy Covers
This Privacy Policy explains how we collect, use, store, and protect any personal data that relates to you as a visitor to our website (osmoone.com) and as a customer or potential customer of our products.
It applies to all users, regardless of whether you make a purchase.
By using our website, you agree to the collection and use of information in accordance with this policy.
3. Information We Collect
3.1 Information You Provide Directly
When you purchase a product, create an account, subscribe to our newsletter, or contact us, you may provide:
| Data type | Examples |
|---|---|
| Identity data | Full name |
| Contact data | Email address, postal address, phone number |
| Financial data | Payment card information (processed directly by our payment provider — we do not store card details) |
| Account data | Username, password (stored hashed) |
| Communication data | Any messages or enquiries you send us |
| Health/preference data | Skin type, allergies, or other health-related information you voluntarily provide |
3.2 Information Collected Automatically
When you visit our website, we automatically collect:
| Data type | Purpose |
|---|---|
| IP address | Approximate geographic location, fraud prevention |
| Browser type and version | Site functionality and debugging |
| Operating system | Site functionality and debugging |
| Pages visited | Understanding how you use our site |
| Time and date of visit | Site analytics |
| Referring website | Understanding how you found us |
| Device identifiers | Mobile optimisation |
3.3 Cookies
We use cookies and similar technologies to improve your experience on our website. For full details of the cookies we use, please see our Cookie Policy section below.
4. How We Use Your Information
We use your personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your order | Contract performance (Art 6(1)(b) GDPR) |
| Sending order confirmations and updates | Contract performance (Art 6(1)(b) GDPR) |
| Arranging delivery and returns | Contract performance (Art 6(1)(b) GDPR) |
| Customer service and enquiries | Legitimate interests — responding to you (Art 6(1)(f) GDPR) |
| Account management | Contract performance (Art 6(1)(b) GDPR) |
| Marketing (if you have consented) | Consent (Art 6(1)(a) GDPR) |
| Improving our website and products | Legitimate interests — improving our business (Art 6(1)(f) GDPR) |
| Website analytics | Legitimate interests — understanding site usage (Art 6(1)(f) GDPR) |
| Fraud prevention | Legal obligation (Art 6(1)(c) GDPR) |
| Legal compliance (e.g. tax records) | Legal obligation (Art 6(1)(c) GDPR) |
Marketing Communications
If you have given us permission, we may send you marketing communications about OsmoOne products and services.
You can withdraw consent or opt out of marketing at any time by: - Clicking the "unsubscribe" link in any marketing email - Emailing us at privacy@osmoone.com
5. Data Sharing
We do not sell your personal data to third parties.
We may share your data with the following categories of recipients:
| Recipient | Purpose |
|---|---|
| Payment processors (e.g. Stripe, PayPal) | Processing your payment |
| Delivery partners (e.g. Royal Mail, DHL) | Delivering your order |
| IT service providers (hosting, email, analytics) | Operating our website and business |
| Legal and professional advisers | Compliance and legal advice |
| Law enforcement or regulators | When required by law |
All third-party processors are required to handle your data securely and only in accordance with our instructions.
6. International Transfers
If we transfer your data outside of the United Kingdom or European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as:
- UK Government adequacy decisions
- Standard Contractual Clauses (SCCs)
- Other mechanisms permitted under applicable data protection law
7. Data Retention
We retain your personal data only for as long as is necessary for the purposes set out in this policy:
| Data type | Retention period |
|---|---|
| Order records (incl. financial) | 7 years from order date (tax and accounting obligations) |
| Account data | Until account deletion, or 2 years of inactivity |
| Enquiry data | 2 years from date of enquiry |
| Marketing consent | Until you withdraw consent |
| Website analytics (anonymised) | 26 months |
When data is no longer required, we will securely delete or anonymise it.
8. Your Legal Rights
Under applicable data protection law (UK GDPR / EU GDPR), you have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate personal data |
| Erasure | Request deletion of your personal data ("right to be forgotten") |
| Restriction | Request that we restrict processing of your data |
| Portability | Receive your data in a structured, commonly used format |
| Object | Object to our processing of your data |
| Withdraw consent | Withdraw consent at any time where processing is based on consent |
| Lodge a complaint | Complain to the Information Commissioner's Office (ICO) — see below |
How to Exercise Your Rights
To exercise any of these rights, please contact us at privacy@osmoone.com.
We will respond to all requests within one month of receipt. If your request is complex, we may extend this period by up to a further two months, in which case we will notify you.
ICO Contact (UK)
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office:
- Website: https://ico.org.uk
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
- Telephone: 0303 123 1113
9. Cookie Policy
What Are Cookies?
Cookies are small text files placed on your device when you visit our website. They help the website remember your preferences and understand how you use the site.
How We Use Cookies
| Cookie type | Purpose | Duration |
|---|---|---|
| Essential cookies | Required for the website to function (e.g. shopping cart, checkout, account login) | Session / Persistent |
| Analytical/performance cookies | Help us understand how visitors use our site (e.g. Google Analytics) | Persistent |
| Functionality cookies | Remember your preferences (e.g. language, region) | Persistent |
| Targeting/advertising cookies | Used to deliver relevant ads on other websites | Persistent |
Managing Cookies
You can control or disable cookies through your browser settings. Please note that disabling essential cookies may prevent parts of our website from functioning correctly.
10. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data, including:
- TLS/SSL encryption for all data transmitted over the internet (HTTPS)
- Access controls restricting who can access personal data
- Regular security reviews and testing
- Secure storage of data on encrypted systems
However, no data transmission over the internet can be guaranteed to be 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. Third-Party Links
Our website may contain links to third-party websites, plugins, or applications (e.g. social media sharing). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.
12. Children's Privacy
Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at privacy@osmoone.com so that we can delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
Any material changes will be communicated by: - Posting the updated policy on this page - Updating the "Effective date" at the top - Where appropriate, notifying you by email
We encourage you to review this Privacy Policy periodically.
14. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of England and Wales.
Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.