Privacy Policy

Last updated: August 2026

Who we are

The data controller is FA CLINIC LTD, trading as Feonix SkinLab, registered in England and Wales under company number 14652929, registered office 15 Little Park Street, Coventry, United Kingdom, CV1 2RN.

For anything in this policy, contact hello@feonixskinlab.co.uk.

What we collect, why, and our lawful basis

What	Why	Lawful basis
Your basket (product codes and quantities)	To remember what you are buying between pages	Necessary for a contract — and strictly necessary for a service you asked for
Name, delivery address, email address	To take, dispatch and account for your order, and to email you about it	Necessary for a contract
Payment metadata (amount, currency, payment reference, result)	To confirm your payment succeeded and to reconcile orders	Necessary for a contract, and a legal obligation for accounting records
Order records	To meet our accounting and consumer-law obligations	Legal obligation
Pages viewed, basket activity and completed orders, if you accept advertising cookies	To measure whether our advertising works	Consent — which you give on the cookie banner and can withdraw at any time
Your email address, if you sign up to our newsletter	To send marketing email	Consent — which you give separately and can withdraw at any time

Card details

We never see or store your card details. When you check out we send you to Stripe's own payment page; your card number is entered there and goes to Stripe, not to this website. We receive only the outcome of the payment and a reference.

Who we share it with

Stripe — payment processing. Stripe Payments Europe, Ltd. (Ireland), with Stripe, Inc. (United States).
Brevo — sends our order confirmation emails, and our newsletter if you sign up. Sendinblue SAS, trading as Brevo (France).
Hetzner — hosts the server this website runs on. Hetzner Online GmbH (Germany).
Meta — advertising measurement, only if you consent. Meta Platforms Ireland Ltd, with Meta Platforms, Inc. (United States).

We do not sell your personal data. We share it for advertising measurement with Meta only where you have consented, and never otherwise.

International transfers

Brevo and Hetzner process data inside the EEA. The EEA is covered by UK adequacy regulations, so no additional safeguard is required. Stripe also operates in the United States; where your data reaches Stripe, Inc. it is protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, under Stripe's own data processing terms. The same applies to Meta, where you have consented to advertising measurement: data reaching Meta Platforms, Inc. in the United States is covered by the equivalent addendum in Meta's terms.

Cookies and advertising

Essential cookies. Two, and neither asks for consent because the site cannot work without them: a session cookie holding your basket as product codes and quantities, and a cookie recording your choice below so we do not ask again on every page. Neither carries a name, an email or a price.

Optional advertising cookies. With your consent we load the Meta Pixel, which sets cookies in your browser and tells Meta which pages you viewed, what you added to your basket and what you bought. We use it to measure whether our advertising works.

These are off unless you turn them on. Nothing advertising- related loads until you press Accept, and pressing Reject means the Pixel is never placed on the page at all. You can change your mind at any time by clearing this site's cookies, and we will ask again.

We also send Meta a record of completed purchases directly from our server (Meta call this the Conversions API), so that a sale is counted once even if your browser blocks the Pixel. We only do this if you consented. Your choice is stored with the order, and if you refused, nothing about your order is sent to Meta. What we send is your order value and items, plus your email address, phone number, town and postcode hashed - converted into an irreversible code that lets Meta match you to an existing account without us handing over the details themselves.

Stripe may set its own cookies on Stripe's payment page, which is governed by Stripe's privacy policy.

How long we keep it

Basket cookie — until your browser session ends.
Order and transaction records — 6 years after the end of the financial year they fall in, which is the period the Companies Act 2006 requires for accounting records.
Newsletter subscribers — we hold your email address until you withdraw consent. When you do, we stop emailing you immediately, but we keep the record of the consent itself (the date you gave it and where) together with a record of the withdrawal. We are required to be able to show that consent was properly given, and we cannot do that if we delete the evidence along with the address.

Your rights

Under UK GDPR you have the right to:

ask for a copy of the personal data we hold about you
have inaccurate data corrected
ask us to delete data, where we are not required to keep it
ask us to restrict how we use it, or object to our using it
receive data you gave us in a portable form
withdraw consent at any time, where we rely on consent — this does not affect anything done before you withdrew it

To exercise any of these, email hello@feonixskinlab.co.uk. We will respond within one month. We may ask you to confirm your identity first.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, helpline 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Contact

FA CLINIC LTD, trading as Feonix SkinLab
15 Little Park Street, Coventry, United Kingdom, CV1 2RN
hello@feonixskinlab.co.uk