Privacy Policy
PRIVACY POLICY
Last updated: 30 July 2026
1. About This Privacy Policy
This Privacy Policy explains how LaboTest Ltd, trading under the FAUSTINA® Skin Innovation brand, collects, uses, shares, stores, and protects Personal Information.
It applies when a Customer:
visits or uses the Website;
creates or manages an account;
purchases a FAUSTINA product;
contacts customer support;
requests a return, refund or warranty service;
submits a product review; or
otherwise communicates or interacts with us.
The Website is owned and operated by LaboTest Ltd. FAUSTINA® is a registered trademark owned by LaboTest Ltd.
We process Personal Information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, as amended from time to time, including by the Data (Use and Access) Act 2025.
2. Definitions
For the purposes of this Privacy Policy:
“Customer” means any individual who visits the Website, creates an account, purchases or considers purchasing a product, contacts us or otherwise uses our services.
“Website” means www.faustinaskin.com, including its online store, account facilities, checkout pages, customer forms and related website services.
“Personal Information” means information relating to an identified or identifiable living individual. It has the same meaning as “personal data” under UK data protection law. Information that has been permanently anonymised so that an individual cannot be identified is not Personal Information.
“Services” means the sale and delivery of FAUSTINA products, account services, customer support, warranty assistance, returns, refunds and other services made available through the Website.
“Special Category Information” means particularly sensitive Personal Information protected under data protection law, including information concerning health, racial or ethnic origin, religious beliefs, biometric data and sexual orientation.
3. Who Is Responsible for Your Information?
LaboTest Ltd is the data controller responsible for Personal Information collected through the Website.
Our registered details are:
LaboTest Ltd
Crown House Business Centre
Suite 503, 5th Floor
North Circular Road
London
England
NW10 7PN
United Kingdom
Registered in England and Wales under company number 09786559
VAT registration number: GB 288072964
Website: www.faustinaskin.com
Data protection email: info@faustinaskin.com
4. Personal Information We Collect
The information collected depends on how a Customer uses the Website and our Services.
4.1 Identity and contact information
This includes a Customer’s name, title, email address, telephone number, billing address and delivery address.
4.2 Account information
When a Customer creates an account, we collect the username, encrypted password, account preferences, saved addresses and associated order history.
Customers are responsible for keeping their account credentials confidential and for notifying us if they believe their account has been accessed without authorisation.
4.3 Order and transaction information
We record the products ordered, purchase date, order value, payment status, transaction reference, delivery status, returns, refunds and warranty requests.
For international orders, we also process information required for shipping and customs clearance, such as the shipment value, product description, country of origin and order contents.
4.4 Payment information
Payments are processed by Stripe or PayPal, depending on the payment method selected during checkout.
We receive limited payment information, such as:
the payment status;
the payment method;
a transaction reference;
billing details; and
fraud-screening or verification results.
Complete payment card numbers and card security codes are processed by the selected payment provider. LaboTest Ltd does not normally receive or store those complete details.
4.5 Communications and customer-service information
We retain communications sent through email, website forms or other customer-service channels. This includes product enquiries, technical-support requests, complaints, reviews, return requests and warranty correspondence.
We do not routinely request health information. Where health-related information is genuinely necessary to answer a product-suitability or safety enquiry, we will explain why it is needed and obtain explicit consent where required by law.
Customers should not provide medical records or other sensitive information unless specifically requested.
4.6 Technical and website-usage information
When a Customer uses the Website, technical information can be collected automatically, including:
IP address;
browser and device type;
operating system;
cookie or similar technology identifiers;
pages viewed;
time and date of visits;
referring website or advertising source;
interactions with Website features; and
checkout or purchase events.
This information supports Website operation, security, troubleshooting and analytics.
5. How We Obtain Personal Information
Most Personal Information is provided directly by the Customer when placing an order, creating an account, contacting us, submitting a form or requesting customer service.
Technical and usage information is collected automatically through the Website, server logs, cookies and similar technologies.
We also receive limited information from organisations involved in providing our Services, principally:
Stripe and PayPal in relation to payments;
UPS and other delivery providers in relation to shipments;
Google Analytics 4 in relation to Website usage;
website hosting and information-technology providers; and
fraud-prevention, accounting or professional-service providers.
6. Purposes and Lawful Bases
We only process Personal Information where we have a lawful basis under UK data protection law.
| Purpose | Personal Information Used | Lawful Basis |
|---|---|---|
| Processing orders and supplying products | Identity, contact, order, account and transaction information | Performance of a contract under Article 6(1)(b) UK GDPR |
| Processing payments and refunds | Billing details, payment status, payment method, transaction references and fraud-screening results | Performance of a contract and our legitimate interest in preventing payment fraud |
| Delivering orders and completing customs formalities | Name, delivery address, telephone number, email address, order contents, shipment value and customs information | Performance of a contract and compliance with legal obligations |
| Managing accounts, returns, warranty claims and customer support | Account, order, contact and communications information | Performance of a contract and our legitimate interest in providing effective customer service |
| Preventing fraud, misuse and security incidents | Transaction, account, technical and device information | Our legitimate interests in protecting Customers, the Website and our business |
| Maintaining tax, accounting and company records | Order, payment, refund and transaction information | Compliance with legal obligations under Article 6(1)(c) UK GDPR |
| Handling complaints, disputes and legal claims | Orders, communications, payments, delivery records and support information | Compliance with legal obligations and our legitimate interest in establishing, exercising or defending legal rights |
| Improving the Website and understanding its use | Cookie information, device information, pages viewed, referral information and Website interactions | Consent where required; legitimate interests only where a lawful exception from consent applies |
| Sending marketing communications | Name, email address, marketing preferences and relevant purchase history | Consent or our legitimate interests where the customer soft opt-in rules lawfully apply |
| Publishing product reviews | Name or display name, review content and related product information | Consent and our legitimate interest in providing genuine product feedback |
| Responding to health-related product enquiries | Information voluntarily provided for the specific enquiry | Explicit consent where Special Category Information is processed |
Where we rely on legitimate interests, we consider whether the processing is necessary and whether the Customer’s rights and interests outweigh our business purpose.
Consent can be withdrawn at any time. Withdrawal does not affect processing that took place lawfully before consent was withdrawn.
7. Website and E-Commerce Services
The Website uses WordPress and WooCommerce to provide product pages, shopping-basket functions, checkout facilities, Customer accounts, order management, returns and refunds.
Information entered through these facilities is stored within our Website and associated hosting systems and is accessible only to authorised personnel and service providers who require access for Website administration, order processing or technical support.
8. Stripe and PayPal Payments
Stripe and PayPal process payments using their own secure payment systems.
When a Customer selects one of these payment methods, the relevant provider receives the information needed to authenticate and process the transaction, prevent fraud, comply with financial regulations and manage any payment dispute.
Stripe and PayPal process information in accordance with their respective privacy notices and legal responsibilities. Their processing can include automated fraud and risk assessments.
LaboTest Ltd receives confirmation of whether a transaction was authorised or declined, together with limited transaction and billing information. We do not use complete payment-card information for independent purposes.
9. Delivery and International Orders
UPS is our principal courier for domestic and international orders. Where appropriate, another postal, courier or logistics provider can be used to complete a particular delivery.
We provide the delivery company with the information needed to transport and deliver the order, including the Customer’s name, address, telephone number, email address, order reference and parcel information.
International orders can require disclosure of the product description, shipment value, country of origin and recipient information to customs, tax, postal and border authorities. These disclosures are necessary to deliver the order and comply with import and export requirements.
Delivery providers use Personal Information under their own legal and privacy obligations when performing delivery, customs-clearance and fraud-prevention services.
10. Cookies and Google Analytics 4
The Website uses cookies and similar technologies to operate its essential features, retain shopping-basket contents, support account login, protect checkout functions and maintain Website security.
We also use Google Analytics 4, commonly called GA4, to understand how Customers find and use the Website. GA4 provides information about matters such as pages visited, device and browser type, approximate geographic area, referral source and Website interactions.
GA4 does not require us to provide Google with a Customer’s name or complete payment-card details.
Where consent is required, GA4 and other non-essential technologies will not be activated until the Customer has made the appropriate choice through our cookie-consent tool. A Customer can subsequently change or withdraw that choice through the Website’s cookie settings.
Strictly necessary technologies and any technologies covered by a lawful statutory exception can be used without consent where permitted.
More detailed information about individual cookies, their purpose and duration is provided in our separate Cookie Policy.
11. Marketing Communications
We send promotional emails only where the Customer has consented or where the limited customer soft opt-in rules permit us to contact an existing Customer about similar FAUSTINA products.
Every marketing email provides an unsubscribe facility. A Customer can also opt out by updating available account preferences or contacting info@faustinaskin.com.
Opting out of marketing does not prevent us from sending service messages concerning an order, payment, delivery, return, warranty claim, account security or other active Customer request.
We do not sell or rent Personal Information to third parties for their independent marketing.
After a Customer unsubscribes, we retain a minimal suppression record so that the marketing preference continues to be respected.
12. When We Share Personal Information
Personal Information is disclosed only where there is a valid business or legal reason.
Recipients can include:
Stripe and PayPal;
UPS and other delivery or logistics providers;
Google in connection with Google Analytics 4;
Website hosting, maintenance and information-technology providers;
accountants, insurers, legal advisers and other professional advisers;
fraud-prevention and security providers;
customs, tax and border authorities;
courts, regulators and law-enforcement authorities; and
a purchaser or successor where LaboTest Ltd undergoes a genuine sale, merger, financing, restructuring or transfer of business assets.
Service providers acting on our behalf are required, where applicable, to follow our documented instructions, maintain appropriate security and use Personal Information only for the agreed service.
Some recipients, including payment providers, couriers and public authorities, determine aspects of their processing independently and are responsible for complying with their own data-protection obligations.
13. International Transfers
Some organisations used to operate the Website, process payments, provide analytics or deliver international orders process Personal Information outside the United Kingdom.
International deliveries also require information to be transferred to delivery providers and customs authorities in the destination country.
Where a transfer is restricted under UK data protection law, we use an approved transfer mechanism. Depending on the destination and recipient, this can include:
UK adequacy regulations;
the United Kingdom International Data Transfer Agreement;
the UK Addendum to approved European Union standard contractual clauses;
another legally recognised safeguard; or
a specific legal exception where permitted.
Where required, we also assess whether the transfer provides an appropriate level of protection in practice.
Further information about the safeguards applying to a particular provider can be requested by contacting info@faustinaskin.com.
14. How Long We Retain Information
We retain Personal Information only for as long as it is reasonably needed for the purpose for which it was collected and to satisfy legal, accounting, tax, warranty and dispute-resolution requirements.
Our principal retention periods are:
Order, payment and accounting records: generally retained for six years from the end of the relevant company financial year, or longer where required by tax law, an investigation or an unresolved legal matter.
Customer accounts: retained while the account remains active. When an account is closed or deleted, information that is not required for another lawful purpose is removed. Order and accounting records remain subject to their separate retention period.
Customer-service, return, warranty and complaint records: retained for the period needed to resolve the matter and, where necessary, for up to six years afterwards to manage contractual or legal claims.
Marketing information: retained until the Customer unsubscribes, withdraws consent or the information is no longer useful. A minimal suppression record can be retained for as long as needed to honour an opt-out.
Google Analytics 4 information: identifiable user-level and event-level analytics data is retained for no longer than 14 months. Aggregated statistical reports that no longer identify a Customer can be retained for longer.
Security and technical logs: retained for a period proportionate to the security, troubleshooting or fraud-prevention purpose.
Product reviews: retained while the review remains relevant and published, unless deletion is requested and no overriding legal reason requires continued retention.
Information that is no longer required is deleted, securely destroyed or irreversibly anonymised.
15. Information Security
We use technical and organisational safeguards appropriate to the nature of the Personal Information and the risks presented by its processing.
These safeguards include secure hosting, encryption where appropriate, account authentication, access controls, restricted administrative permissions, software updates, backups, security monitoring and internal limits on access to Customer information.
Payment-card information is processed through Stripe or PayPal rather than stored directly by LaboTest Ltd.
No internet transmission or storage system can be guaranteed to be completely secure. Customers should use a strong, unique account password and notify us promptly if they suspect unauthorised access.
16. Your Data-Protection Rights
Depending on the circumstances and the lawful basis used, a Customer can have the right to:
receive information about how Personal Information is used;
obtain a copy of Personal Information held about them;
correct inaccurate or incomplete information;
request deletion of Personal Information;
request restriction of processing;
object to processing based on legitimate interests;
receive certain information in a portable format;
withdraw consent;
object to direct marketing; and
obtain safeguards concerning certain solely automated decisions.
These rights are not absolute. A request can be restricted where an exemption applies or where information must be retained for legal, accounting, contractual or fraud-prevention purposes.
Requests should be sent to info@faustinaskin.com. We can request reasonable information to confirm the requester’s identity and protect Personal Information from unauthorised disclosure.
We respond to valid requests without undue delay and normally within one month. Where the law permits an extension because a request is complex or numerous, we will explain the extension and the reason for it.
No fee is normally charged. A reasonable fee can be charged, or a request can be refused, where the law permits this because the request is manifestly unfounded or excessive.
17. Data-Protection Complaints
A Customer who is concerned about how we have collected or used Personal Information can submit a data-protection complaint by emailing:
The email should include the subject line “Data Protection Complaint” and provide sufficient information for us to identify and investigate the issue.
We will acknowledge a data-protection complaint within 30 days and provide a substantive response without undue delay. Where additional time is required, we will explain the reason and provide an update.
A Customer also has the right to complain to the Information Commissioner’s Office, the United Kingdom’s independent data-protection regulator. We encourage Customers to contact us first so that we have an opportunity to investigate and resolve the concern.
18. Automated Decision-Making
LaboTest Ltd does not itself use Personal Information to make decisions producing legal or similarly significant effects solely through automated processing.
Stripe, PayPal and fraud-prevention providers can use automated systems to assess transaction risk, verify identity or decide whether to authorise a payment. This can affect whether a transaction is accepted.
Further information about those systems and any available review rights is provided in the relevant payment provider’s privacy information.
19. Children’s Information
The Website and FAUSTINA products are intended for adults and are not directed towards children.
We do not knowingly collect Personal Information directly from children without appropriate authority. A parent or guardian who believes that a child has submitted Personal Information should contact info@faustinaskin.com so that the matter can be investigated.
20. Third-Party Websites
The Website can contain links to payment services, social-media platforms or other third-party websites.
Those organisations control their own websites and privacy practices. This Privacy Policy does not govern information collected directly by a third party after a Customer leaves the Website or chooses to use an external service.
Customers should review the relevant third party’s privacy information before providing Personal Information.
21. Changes to This Privacy Policy
We review this Privacy Policy when our Website, providers, business activities or legal obligations change.
The revised version will be published on the Website with an updated revision date. Where a change materially affects how existing Personal Information is used, we will provide additional notice or obtain consent where required.
22. Contact
Questions, rights requests and data-protection complaints should be sent to:
LaboTest Ltd
Crown House Business Centre
Suite 503, 5th Floor
North Circular Road
London
England
NW10 7PN
United Kingdom
Email: info@faustinaskin.com
Website: www.faustinaskin.com
