Privacy policy
Privacy Policy
Last updated: January 13, 2026
SANASALUS LTD (“SanaSalus”, “we”, “us” or “our”) operates this website and online store (the “Services”) to provide you with premium hair, beard and body care products. This Privacy Policy explains how we collect, use, store and share your personal data when you use our Services.
SANASALUS LTD is a company registered in England and Wales under company number 16345726, with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
For the purposes of UK data protection law, we are the Data Controller of your personal information.
Our Services are powered by Shopify Inc. Shopify acts as our Data Processor, providing the ecommerce platform and related technology used to operate our store.
By accessing or using our Services, you confirm that you have read and understood this Privacy Policy.
1. What Personal Data We Collect
We may collect and process the following types of personal data:
-
Identity & Contact Data – name, billing address, delivery address, email address, phone number
-
Payment Data – card details, payment method, transaction IDs (payments are processed securely by Shopify and payment providers; we do not store full card numbers)
-
Account Data – login details, preferences, order history
-
Transaction Data – products viewed, purchased, returned or exchanged
-
Communications – messages sent to customer support, emails, chat messages
-
Technical Data – IP address, browser type, device identifiers
-
Usage Data – how you use and navigate our website
2. How We Collect Your Data
We collect data:
-
Directly from you when you place an order, create an account, subscribe, or contact us
-
Automatically through cookies, pixels and similar technologies
-
From Shopify and service providers that process data on our behalf
-
From advertising and analytics partners
3. Our Legal Basis for Processing (UK GDPR Article 6)
We only process your personal data when we have a lawful basis to do so, including:
| Purpose | Legal Basis |
|---|---|
| Processing orders, shipping, payments | Performance of a contract |
| Customer support & account management | Performance of a contract |
| Fraud prevention & security | Legal obligation / Legitimate interest |
| Marketing emails & SMS | Consent |
| Website analytics & improvements | Legitimate interest |
| Legal compliance, tax & accounting | Legal obligation |
4. How We Use Your Personal Data
We use your data to:
-
Fulfil orders and deliver products
-
Process payments and prevent fraud
-
Manage your account
-
Provide customer support
-
Send important service communications
-
Send marketing communications (where you have consented)
-
Improve website performance and customer experience
-
Show personalised ads on platforms such as TikTok, Meta (Facebook/Instagram) and Google
5. Marketing, Advertising & Tracking
We use marketing and advertising tools such as:
-
TikTok Pixel
-
Meta (Facebook & Instagram) Pixel
-
Google Ads & Google Analytics
-
Shopify marketing tools
These technologies may track:
-
Pages you view
-
Products you interact with
-
Whether you place an order
This allows us to show you relevant ads and measure performance. You can control cookies and tracking via your browser settings or our cookie banner.
You can unsubscribe from marketing emails at any time by clicking “unsubscribe” in any email.
6. How We Share Your Data
We may share your personal data with:
-
Shopify (our ecommerce platform provider)
-
Payment processors (such as Shopify Payments, Stripe, PayPal)
-
Delivery & fulfilment partners
-
Email & marketing platforms
-
Advertising platforms (TikTok, Meta, Google)
-
Legal or regulatory authorities if required by law
All partners are required to keep your data secure and only use it for agreed purposes.
7. International Data Transfers
Your data may be transferred outside the UK or EEA (for example to Shopify servers in the USA or Canada).
When this happens, we use:
-
UK International Data Transfer Agreement (IDTA)
-
UK Addendum to EU Standard Contractual Clauses
to ensure your data remains protected.
8. Children’s Data
Our Services are not intended for children under 13.
We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, contact us and we will delete it.
9. How Long We Keep Your Data
We retain personal data only as long as necessary to:
-
Provide our Services
-
Meet legal and tax requirements
-
Resolve disputes
-
Enforce our agreements
10. Your Rights (UK & EU)
You have the right to:
-
Access your data
-
Correct your data
-
Request deletion
-
Restrict or object to processing
-
Withdraw consent
-
Request a copy of your data
To exercise any right, contact us at contact@sanasalus.com
11. Security
We use industry-standard security measures, but no system is 100% secure. Please keep your login details private.
12. Third-Party Links
Our site may link to third-party websites. We are not responsible for their privacy practices.
13. Complaints
You may complain to us or to the UK Information Commissioner’s Office (ICO).
14. Changes to This Policy
We may update this policy. The latest version will always be posted on our website.
15. Contact Us
SANASALUS LTD
71–75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom