Privacy policy
Last updated: 15/09/2026
This policy explains what we do with your personal data when you visit helenaskin.com or buy from us.
Who is responsible
The data controller is Eleni Georgiou, 1 Stavros Stylianides Street, 2642 Episkopeio, Nicosia, Cyprus, VAT CY00820638S, trading as Helena Skin & Beauty.
Contact us about anything in this policy at support@helenaskin.com.
What we collect
When you buy from us: your name, email address, delivery address, phone number, chosen BOX NOW locker, order contents and order value. Your payment is handled by our payment provider and we never see your full card number.
When you contact us: your name, email address and whatever you tell us.
When you sign up to emails: your email address, and your name if you give it.
When you browse: your IP address, browser and device type, the pages you look at, and how you arrived. This comes from cookies and similar technologies. See our Cookie policy.
Why we use it, and our legal basis
To process and deliver your order, and to handle returns. Legal basis: performance of a contract with you.
To answer your questions. Legal basis: our legitimate interest in running a business and responding to customers.
To meet our legal obligations, including keeping VAT and accounting records, and recording any reported adverse reaction to a cosmetic product as required by Regulation 1223/2009. Legal basis: legal obligation.
To send you marketing emails. Legal basis: your consent, which you can withdraw at any time. If you have bought from us we may email you about similar products under the soft opt-in rule, and every one of those emails will have an unsubscribe link.
To understand how the site is used and to improve it, and to measure advertising. Legal basis: your consent, given through the cookie banner.
To prevent fraud and keep the site secure. Legal basis: our legitimate interest in protecting the business.
Who we share it with
Shopify, which hosts this store and processes orders on our behalf.
Shopify Payments, which process your payment.
BOX NOW, which delivers your parcel. They receive your name, phone number, email and chosen locker.
Our accountant and, where we are legally required, the Cypriot tax and consumer protection authorities.
We do not sell your personal data.
Transfers outside the EU
Some of these providers are based outside the European Economic Area, including in the United States. Where that happens, transfers are protected by the European Commission's standard contractual clauses or by an adequacy decision.
How long we keep it
Order and invoice records: seven years, as required by Cypriot tax law.
Records of a reported reaction to a cosmetic product: for as long as the product information file must be kept, which is ten years from the last batch being placed on the market.
Marketing consent and email history: until you unsubscribe, and then a minimal suppression record so that we do not email you again.
Customer service emails: three years.
Analytics data: as set out in our Cookie policy.
Your rights
Under the GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to another provider. You may object to processing based on our legitimate interests. You may withdraw consent at any time, which does not affect anything we did before you withdrew it.
Email support@helenaskin.com and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, at www.dataprotection.gov.cy.
Children
This site is not intended for anyone under 18 and we do not knowingly collect data from children.
Changes
We will update this page when our practices change and will change the date at the top.