1. Who we are
Swon Formulations Ltd. is a UK-registered company offering digital skincare formulation guides and eBooks. Our website address is: https://swonlab.com.
2. What Personal Data We Collect
We collect the following types of personal data when you interact with our website:
- Name and email address when subscribing to our mailing list
- Billing address and purchase details when buying digital products
- Device, browser and IP information for analytics and fraud prevention
- Email engagement data via Brevo (formerly Sendinblue)
We do not collect any unnecessary personal information. Your data is used solely to fulfill purchases, communicate updates, and improve your experience.
3. Cookies and Tracking
We use cookies to:
- Enable essential site functionality
- Track page performance via Google Analytics
- Store user login and cart data (via WooCommerce)
We request your consent for non-essential cookies via a banner when you first visit. You may manage or withdraw your consent at any time.
4. Email Marketing & Communication
We use Brevo to manage email marketing and transactional emails (e.g. order confirmations). You may unsubscribe at any time by clicking the link in the footer of any email.
We do not send unsolicited messages and never share your email address with third parties for advertising purposes.
5. Payment Processing
We use Stripe to securely process payments. SwonLab does not store or access your full payment information. Stripe handles all card data in accordance with PCI-DSS compliance standards.
6. Data Retention
- Order details are retained for 6 years as required by UK tax law.
- Email subscription data is retained until you unsubscribe.
- Inactive accounts may be deleted after 2 years of inactivity.
7. Your Rights
Under the GDPR, you have the right to:
- Access the data we hold about you
- Request corrections or deletions
- Withdraw consent for data processing
- File a complaint with the ICO (UK’s Information Commissioner’s Office)
To make a request, contact us at: [email protected]
8. Third-Party Services
We may use trusted third-party tools that process data, including:
- Stripe (payments)
- Brevo (emails)
- Google Analytics (site performance)
- Elementor (website design framework)
These services comply with GDPR and implement adequate data protection measures.
9. Data Transfers Outside the UK/EU
Our service providers may process data outside the UK/EU. In such cases, we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses).
10. Updates
We may occasionally update this policy. Changes will be posted here with a revised update date.
