Privacy policy
Last updated: 01.09.2026
At Dermalux, we are committed to protecting your privacy and handling your personal information responsibly and transparently.
Aesthetic Technology Ltd, trading as Dermalux (“Dermalux”, “we”, “us” or “our”), operates this website and online store. We are the data controller responsible for the personal information described in this Privacy Policy.
Our online store is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and services to you.
This Privacy Policy explains what personal information we collect, how and why we use it, who we may share it with, how long we keep it and the rights available to you.
It applies when you visit or use our website, purchase a Dermalux product, create an account, sign up to receive communications from us, contact us or otherwise interact with our online services.
PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with Dermalux and may include:
Contact information
Your name, email address, telephone number, billing address and delivery address.
Order and transaction information
Information about products you purchase, return or cancel, items you place in your cart or wishlist, and your previous transactions with us.
Payment information
Information required to process your payment, such as payment method, payment confirmation and transaction information. Payment information may be collected and processed securely by our payment providers.
Account information
If you create an account, we may collect information such as your username, password, preferences and account settings.
Communications
Information you provide when you contact Dermalux, including customer service enquiries, warranty enquiries, product reviews or other correspondence.
Device and technical information
Information about the device, browser and network you use to access our website, including your IP address and other online identifiers.
Website usage information
Information about how you interact with our website, including pages and products viewed, navigation activity and interactions with our online services.
The existing policy contains essentially these categories, so we're preserving its coverage while making them much easier to understand.
HOW WE COLLECT YOUR PERSONAL INFORMATION
We may collect personal information:
- directly from you, for example when you place an order, create an account, register a device, subscribe to marketing communications or contact us;
- automatically, when you use our website, including through cookies and similar technologies;
- from service providers, where they provide technology or services on our behalf; and
- from business partners or other third parties, where permitted by law.
Where we receive your personal information from another source, we will handle it in accordance with this Privacy Policy and applicable data protection law.
HOW AND WHY WE USE YOUR PERSONAL INFORMATION
We only use personal information where we have a lawful basis to do so.
Depending on how you interact with Dermalux, we may use your information for the following purposes:
|
How we use your information |
Why we use it |
Lawful basis |
|
Processing and fulfilling your order |
To accept payment, process your order, arrange delivery and manage returns or refunds |
Performance of a contract |
|
Managing your Dermalux account |
To create and administer your account and preferences |
Performance of a contract and/or legitimate interests |
|
Customer care |
To answer enquiries, provide product support and manage our relationship with you |
Performance of a contract and/or legitimate interests |
|
Warranty and device registration |
To register your device and provide warranty and product support |
Performance of a contract and/or legitimate interests |
|
How we use your information |
Why we use it |
Lawful basis |
|
Marketing communications |
To send Dermalux news, product launches, offers and other marketing communications |
Consent or another lawful basis where permitted by law |
|
Website personalisation |
To remember preferences and provide a more relevant online experience |
Consent and/or legitimate interests, as applicable |
|
Analytics and website improvement |
To understand how our website is used and improve our products, services and customer experience |
Consent and/or legitimate interests, as applicable |
|
Security and fraud prevention |
To protect customers, our website and our business and to detect or prevent fraudulent or unlawful activity |
Legitimate interests and/or legal obligation |
|
Legal and regulatory requirements |
To meet our accounting, tax, regulatory and other legal obligations and establish or defend legal claims |
Legal obligation and/or legitimate interests |
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and balance them against your rights and interests.
Where we rely on consent, you may withdraw your consent at any time.
MARKETING COMMUNICATIONS
If you have chosen to hear from us, we may use your personal information to send you Dermalux news, product information, launch updates, offers and other marketing communications.
Depending on your preferences and applicable law, we may contact you by email, SMS or other permitted communication channels.
You can unsubscribe from marketing emails at any time by selecting the unsubscribe link in any marketing email you receive from us.
Where available, you can also update your communication preferences or contact us directly.
If you unsubscribe from marketing, we may still contact you with service communications relating to an order, your account, warranty, product safety or another transaction with us.
COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies to operate our website, remember your preferences, understand how our website is used, improve our services and, where permitted, provide personalised advertising.
Some technologies are necessary for the website to function. Others may be used only where permitted under applicable law and, where required, with your consent.
You can manage your choices at any time through Cookie Preferences on our website.
For more information about the technologies we use and their purposes, please see our Cookie Policy.
HOW WE SHARE YOUR PERSONAL INFORMATION
We may share personal information where necessary to operate our business and provide our services.
This may include sharing information with:
Shopify
Our ecommerce platform provider.
Payment providers
To securely process payments and transactions.
Delivery and fulfilment providers
To process, fulfil and deliver your orders.
Technology and hosting providers
To provide website hosting, cloud storage, IT and related services.
Customer service and communications providers
To help us communicate with you and provide customer support.
Marketing and analytics providers
To help us understand the effectiveness of our website and marketing and, where permitted, deliver relevant advertising and communications.
Professional advisers
Including legal, accounting, insurance and other professional advisers where necessary.
Government, regulatory and law-enforcement authorities
Where disclosure is required by law or is necessary to protect our legal rights or those of others.
Companies within our corporate group
Where necessary for legitimate business purposes and permitted by law.
We may also disclose personal information in connection with a corporate transaction, such as a merger, acquisition, restructuring or sale of all or part of our business.
We require service providers acting on our behalf to handle personal information appropriately and in accordance with applicable data protection requirements.
OUR RELATIONSHIP WITH SHOPIFY
Our online store is hosted by Shopify.
Shopify processes personal information relating to your access to and use of our online store in order to provide its ecommerce services to us and, in certain circumstances, for its own purposes.
Information you provide through our online store may therefore be transmitted to and processed by Shopify and its service providers, including in countries outside the United Kingdom.
Certain Shopify features may use information about your interactions with Dermalux alongside information about your interactions with Shopify or other merchants.
Where Shopify acts independently in determining how and why it processes personal information, Shopify is responsible for that processing.
You can find further information in Shopify's Consumer Privacy Policy.
INTERNATIONAL TRANSFERS
Some of our service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that it continues to receive an appropriate level of protection.
Where required, this may include relying on:
• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the European Commission Standard Contractual Clauses; or
• other legally recognised transfer safeguards.
Where relevant to individuals in the European Economic Area, appropriate EEA transfer mechanisms may also be used.
HOW LONG WE KEEP YOUR PERSONAL INFORMATION
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, regulatory, tax and reporting requirements.
Retention periods may vary according to the type of information and why we hold it.
For example:
Order and transaction information
Retained for the period necessary to fulfil your order and meet applicable accounting, tax, warranty and legal obligations.
Account information
Retained while your account remains active and for an appropriate period afterwards where necessary.
Customer service and warranty information
Retained for as long as necessary to provide support and maintain appropriate records.
Marketing information
Retained while you remain subscribed or until you withdraw your consent or object to marketing, subject to retaining limited information where necessary to respect your opt-out preference.
Website and analytics information
Retained according to the applicable technology and retention settings.
When personal information is no longer required, we will securely delete or anonymise it where appropriate.
SECURITY
We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or access.
However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
If you have an online account with us, you are responsible for keeping your login details and password confidential. Please do not share these details with anyone else.
CHILDREN'S PRIVACY
Our website and online store are not intended for children, and we do not knowingly collect personal information from children in circumstances where parental or guardian consent would be required.
If you are a parent or guardian and believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and, where appropriate, delete the information.
YOUR DATA PROTECTION RIGHTS
Under UK data protection law, depending on the circumstances, you may have the right to:
- access the personal information we hold about you;
- correct inaccurate or incomplete personal information;
- request deletion of your personal information;
- restrict how we use your personal information;
- object to certain uses of your personal information;
- receive or transfer certain personal information in a portable format;
- withdraw your consent where we rely on consent to process your information; and
- object to direct marketing at any time.
These rights are not absolute and may not apply in every circumstance.
If you would like to exercise any of your rights, please contact us using the details below.
We may need to ask you for information to confirm your identity before responding to your request.
You will not be treated unfairly for exercising your data protection rights.
THIRD-PARTY WEBSITES
Our website may contain links to websites, services or social media platforms operated by third parties.
Dermalux is not responsible for the privacy practices of third-party websites or services. If you follow a link to another website, we recommend reviewing its privacy information before providing personal information.
COMPLAINTS
If you have a concern about how Dermalux handles your personal information, please contact us first so that we have the opportunity to investigate and resolve your concern.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information Commissioner's Office
If you are located outside the United Kingdom, you may also have the right to complain to the relevant data protection authority in your country.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our business, our services, our privacy practices or applicable legal and regulatory requirements.
When we make changes, we will publish the updated Privacy Policy on this website and update the Last updated date above.
Where required by law, we will provide additional notice of material changes.
CONTACT US
If you have any questions about this Privacy Policy, how we use your personal information or your data protection rights, please contact us:
Aesthetic Technology Ltd trading as Dermalux
211 Europa Boulevard
Warrington
WA5 7TN
United Kingdom
Email: hello@dermalux.com
Company registration number: 08339881
For the purposes of applicable UK data protection law, Aesthetic Technology Ltd is the data controller responsible for your personal information.