Privacy policy
Last updated: September 8, 2026
ESK Skincare UK Limited, trading as ESK Wholesale ("ESK", "we", "us" or "our"), operates this website and online store, including all related information, content, features, tools, products and services (collectively, the "Services").
Our online store is powered by Shopify, which enables us to provide the Services to you.
We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, disclose and otherwise process your personal information when you visit or use our website, create or manage a wholesale account, make a purchase, subscribe to marketing communications, contact us, or otherwise interact with the Services.
For the purposes of applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, ESK Skincare UK Limited is the controller of your personal information unless otherwise stated.
We also comply with applicable electronic marketing requirements, including the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR").
Please read this Privacy Policy carefully so that you understand how and why we use your personal information.
Personal Information We Collect
"Personal information" or "personal data" means information relating to an identified or identifiable individual. It does not include information that has been anonymised so that an individual can no longer be identified.
Depending on how you interact with us, we may collect and process the following categories of personal information:
- Contact information, including your name, email address, telephone number, billing address and shipping address.
- Business information, including your business or trading name, business address, role or position, and information you provide when applying for or managing a wholesale account.
- Account information, including your username, password, account preferences and settings.
- Payment and transaction information, including payment method, payment confirmation, products purchased, order history, returns, exchanges and cancellations. Payment card information may be processed directly by Shopify or other payment providers.
- Marketing and communication preferences, including whether you have subscribed to email or SMS marketing, your communication preferences, and information about how you interact with our marketing communications.
- Communications with us, including information you provide when contacting customer service, completing a form, applying for a wholesale account or otherwise communicating with us.
- Device and technical information, including your IP address, browser type, device type, operating system, network information and other technical identifiers.
- Usage information, including information about how you access, browse and interact with our website and Services.
- Marketing and advertising information, including advertisements or marketing communications you view, click or interact with, referral information, campaign information and information collected through cookies, pixels and similar technologies.
- Preferences and inferences, such as information we may derive from your purchases, browsing activity or interactions with our Services.
We do not generally seek to collect special category personal data, such as information about your health, ethnicity, religion, political opinions or biometric information, through our wholesale Services.
How We Collect Personal Information
We may collect personal information:
- directly from you when you create or apply for an account, place an order, complete a form, subscribe to marketing, contact us or otherwise provide information to us;
- automatically when you visit or interact with our website, including through cookies, pixels and similar technologies;
- from Shopify and other service providers that help us operate our website, process payments, fulfil orders, provide customer support, analyse website activity or deliver marketing;
- from advertising, analytics and marketing providers; and
- from our affiliates, business partners or other third parties where permitted by law.
How and Why We Use Your Personal Information
Under UK data protection law, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on one or more of the following lawful bases:
- Contract, where processing is necessary to enter into or perform a contract with you.
- Legal obligation, where processing is necessary to comply with a legal or regulatory obligation.
- Legitimate interests, where processing is necessary for our legitimate business interests or those of a third party and those interests are not overridden by your rights and interests.
- Consent, where you have given us clear consent to process your personal information for a particular purpose.
Where we rely on consent, you may withdraw your consent at any time.
Our legitimate interests may include operating and improving our business and Services, maintaining relationships with wholesale customers, understanding how customers use our Services, preventing fraud, maintaining security, promoting our products and services where permitted by law, and protecting our legal and commercial interests.
We may use personal information for purposes including:
- creating and managing wholesale accounts;
- reviewing wholesale account applications;
- processing and fulfilling orders;
- processing payments;
- arranging shipping and delivery;
- managing returns, refunds, exchanges and cancellations;
- responding to enquiries and providing customer support;
- communicating with you about your account or orders;
- maintaining our business relationship with you;
- improving our website, products and Services;
- personalising your experience;
- analysing website and business performance;
- preventing fraud and maintaining security;
- marketing ESK products and services where permitted by law;
- complying with legal and regulatory requirements; and
- establishing, exercising or defending legal claims.
Marketing and Direct Communications
Where permitted by applicable law, we may use your personal information to communicate with you about ESK products, offers, promotions, launches, events, educational content and other news that may be relevant to you or your business.
Marketing communications may be sent by email, SMS or text message, post or other electronic or digital channels.
We may use information such as your contact details, purchase history, browsing activity, preferences and previous interactions with ESK to personalise our marketing and understand which products or information may be relevant to you.
Our lawful basis for processing personal information for direct marketing may be your consent or our legitimate interests, depending on the circumstances and applicable requirements.
We will also comply with PECR where it applies to electronic marketing.
B2B Marketing
Because this website serves wholesale customers, different electronic marketing rules may apply depending on the type of business receiving the communication.
Where permitted by PECR, we may send relevant B2B marketing communications to corporate subscribers without obtaining prior consent.
However, where the recipient is treated as an individual subscriber under PECR, including certain sole traders and partnerships, we will obtain consent or otherwise ensure that an applicable exception, such as the soft opt-in, applies before sending unsolicited electronic marketing where required.
Regardless of the basis on which we contact you, you can ask us to stop sending direct marketing at any time.
Email Marketing
Where you have subscribed to our marketing emails, or where we are otherwise permitted by law to contact you, we may send promotional emails about ESK products, offers, launches, educational content, events and other updates.
You can opt out of promotional emails at any time by clicking the unsubscribe link included in our marketing emails or by contacting us.
Unsubscribing from marketing emails will not prevent us from sending necessary non-promotional communications, such as order confirmations, shipping notifications, account notices, customer service responses or communications required to manage our business relationship with you.
SMS and Text Message Marketing
Where you have subscribed to SMS marketing, or where we are otherwise permitted by applicable law to send such communications, we may send promotional text messages relating to ESK products, offers, launches, events and other marketing.
Where required, we will obtain appropriate consent before sending SMS marketing.
Where consistent with your consent and permitted by law, SMS communications may also include reminders relating to products, carts or checkouts associated with your activity on our website.
You can opt out of marketing SMS messages at any time by following the unsubscribe instructions provided in the message, including by replying STOP where that option is available.
You may also contact us at info@eskcare.com to change your marketing preferences.
Opting out of SMS marketing will not automatically unsubscribe you from email marketing where you are separately subscribed to email communications, and vice versa.
Standard messaging or data charges imposed by your mobile provider may apply.
Your Right to Object to Direct Marketing
You have the right to object at any time to the processing of your personal information for direct marketing purposes.
If you object to direct marketing, we will stop processing your personal information for those purposes.
You can exercise this right by:
- clicking the unsubscribe link in our marketing emails;
- following the opt-out instructions in our SMS messages, including replying STOP where available; or
- contacting us at info@eskcare.com.
We may retain limited information on a suppression list after you unsubscribe so that we can record and respect your preference not to receive further marketing. We will not use information retained solely for this purpose to send you further direct marketing.
Cookies and Similar Technologies
We and our service providers use cookies, pixels, tags and similar technologies to operate our website, remember your preferences, understand how visitors use the Services, measure website and campaign performance, prevent fraud and, where permitted, support advertising and personalisation.
These technologies may collect information including:
- your IP address;
- browser and device information;
- pages visited;
- products viewed;
- items added to your cart;
- purchases;
- links or advertisements clicked;
- referring websites or campaigns; and
- interactions with our website and marketing communications.
Some cookies are strictly necessary for our website to operate and do not require consent.
Where required by UK law, we will ask for your consent before placing or accessing non-essential cookies or similar technologies on your device.
You can manage your cookie preferences through the cookie consent tools provided on our website. You may also be able to control cookies through your browser settings, although disabling certain cookies may affect the functionality of the Services.
Please refer to our Cookie Policy or cookie preference tool for further information about the cookies and similar technologies we use.
Advertising and Analytics
Subject to your cookie choices and applicable law, we may work with analytics, advertising and marketing providers to understand how our Services are used, measure campaign performance and display advertising that may be more relevant to you.
These providers may process information about your interactions with our website and advertisements through cookies, pixels and similar technologies.
Where consent is required for advertising or analytics cookies, these technologies will not be used for those purposes unless you provide the required consent.
You may withdraw or change your cookie consent at any time through the cookie preference tools available on our website.
How We Share Personal Information
We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy, including:
- Shopify, which hosts and supports our online store;
- payment processors and financial service providers;
- fulfilment, logistics, shipping and delivery providers;
- IT, cloud hosting, security and technology providers;
- customer service providers;
- email and SMS marketing providers;
- analytics providers;
- advertising and marketing providers;
- professional advisers, including lawyers, accountants and consultants;
- our affiliates and related companies;
- regulators, courts, government agencies or law enforcement where required or permitted by law; and
- parties involved in a merger, acquisition, reorganisation, financing, sale of assets, insolvency or similar corporate transaction.
We may also disclose personal information where you have requested or authorised us to do so.
Where third parties process personal information on our behalf, we take appropriate steps to ensure that appropriate data protection arrangements are in place as required by applicable law.
Relationship With Shopify
Our Services are hosted by Shopify.
Shopify collects and processes personal information relating to your access to and use of our store in order to provide and improve its services.
Information submitted through our store may therefore be transmitted to and processed by Shopify and other service providers, including providers located outside the United Kingdom.
We may also use Shopify features that process information about interactions with our store, Shopify and other merchants to provide functionality, security, analytics, personalisation or advertising services.
In certain circumstances, Shopify may act as an independent controller of personal information.
For more information about Shopify's privacy practices, please review the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
You can also find information about Shopify's processing and available privacy rights through the Shopify Privacy Portal:
https://privacy.shopify.com/en
International Transfers
Some of our service providers, technology providers and other recipients may process personal information outside the United Kingdom.
Where we transfer personal information internationally, we take appropriate steps to ensure that the information receives an appropriate level of protection as required by UK data protection law.
Depending on the circumstances, these safeguards may include:
- transferring information to a country or organisation covered by UK adequacy regulations;
- using the UK International Data Transfer Agreement ("IDTA");
- using the UK Addendum to the European Commission's Standard Contractual Clauses; or
- relying on another lawful transfer mechanism recognised under UK data protection law.
Please contact us if you would like further information about the safeguards relevant to international transfers of your personal information.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, regulatory and reporting requirements.
The appropriate retention period depends on factors including:
- the nature and amount of the information;
- why we collected it;
- whether we need it to maintain your account or provide our Services;
- legal and regulatory requirements;
- the potential risk of harm from unauthorised use or disclosure; and
- whether we can achieve the relevant purpose through other means.
We may retain certain transaction and business records where required by law.
When personal information is no longer required, we will securely delete or anonymise it where appropriate.
Security
We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no electronic transmission or storage system is completely secure and we cannot guarantee absolute security.
If you maintain an account with us, you are responsible for keeping your account credentials secure and should not share your password with others.
Your Data Protection Rights
Subject to applicable law and certain exceptions, you may have the following rights regarding your personal information:
Right of Access
You may request confirmation as to whether we process your personal information and request a copy of the personal information we hold about you.
Right to Rectification
You may ask us to correct inaccurate personal information or complete information that is incomplete.
Right to Erasure
In certain circumstances, you may ask us to delete your personal information.
Right to Restrict Processing
In certain circumstances, you may ask us to restrict how we process your personal information.
Right to Data Portability
Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format and to transmit that information to another organisation.
Right to Object
Where we rely on legitimate interests, you may have the right to object to our processing of your personal information.
You have an absolute right to object to the use of your personal information for direct marketing.
Right to Withdraw Consent
Where we rely on consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.
Rights Relating to Automated Decision-Making
Where applicable, you may have rights relating to certain decisions made solely through automated processing that produce legal or similarly significant effects.
We do not currently intend to use solely automated decision-making through the Services in a way that produces legal or similarly significant effects on wholesale customers unless otherwise disclosed.
Exercising Your Rights
You can exercise your applicable privacy rights by contacting us using the details below.
We may ask you to provide information necessary to verify your identity before processing your request.
You will generally not be required to pay a fee to exercise your data protection rights. However, where permitted by law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.
We will respond to valid requests within the time required by applicable data protection law.
Complaints
If you have concerns about how we handle your personal information, please contact us first so that we can investigate and respond.
You also have the right to lodge a complaint with the Information Commissioner's Office ("ICO"), the UK's data protection regulator.
Information about making a complaint is available at:
https://ico.org.uk/make-a-complaint/
You may contact the ICO at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Children's Privacy
Our Services are intended primarily for business and professional customers and are not directed at children.
We do not knowingly collect personal information from children through our wholesale Services where doing so would not be permitted under applicable law.
If you believe that a child has provided personal information to us, please contact us so that we can investigate and take appropriate action.
Third-Party Websites and Services
Our Services may contain links to websites, applications, social media platforms or other services operated by third parties.
If you follow a link to a third-party service, its own privacy policy and terms will apply. We are not responsible for the privacy or security practices of third-party websites or services that we do not control.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technologies, legal requirements or other operational reasons.
When we update this Privacy Policy, we will publish the revised version on our website and update the "Last updated" date above.
Where required by law, we will provide additional notice of material changes.
Contact Us
If you have questions about this Privacy Policy, our privacy practices, your marketing preferences, or would like to exercise your data protection rights, please contact us:
ESK Skincare UK Limited
Trading as ESK Wholesale
Email: info@eskcare.com
Phone: +44 04 2070 3246
Address:
ESK Skincare UK Limited
1 Putney Bridge Approach, 605
London SW6 3JD
United Kingdom
For the purposes of applicable UK data protection law, ESK Skincare UK Limited is the controller of your personal information.