Privacy Policy
Last updated: August 2026
This policy explains what personal data RÉVENE collects when you use reveneco.com, why we collect it, and what rights you have. We are the data controller. Contact: revenecohelp@outlook.com.
What we collect
- When you order — name, delivery and billing address, email, phone number, order contents. Payment card details go directly to our payment providers; we never see or store your full card number.
- When you contact us — your email address and whatever you tell us in the message, including any skin or shade information you choose to share.
- When you subscribe — your email address, and your phone number if you opt into SMS.
- Automatically — IP address, device and browser type, pages viewed, referring site, and cookie identifiers. See our Cookie Policy.
Sensitive data
If you email us about a skin condition, allergy or medical concern, that may be health data. We use it only to answer your question, we don't add it to marketing profiles, and we delete it once the query is closed unless you ask us to keep it on file.
Why we use it, and our legal basis
- To fulfil your order — performance of our contract with you.
- To provide support and handle refunds — contract, and our legitimate interest in running the business properly.
- To send marketing emails or SMS — your consent, which you can withdraw at any time.
- To measure advertising and improve the site — consent for non-essential cookies, and legitimate interest in aggregated analytics.
- To prevent fraud and meet accounting and tax obligations — legal obligation and legitimate interest.
Who we share it with
We do not sell your personal data. We share it only with providers who need it to deliver the service:
- Shopify — hosts the store and processes orders.
- Payment providers — Shopify Payments, PayPal, and the card networks.
- Fulfilment and delivery partners — receive your name, address and contact details in order to ship and deliver your parcel.
- Email and SMS platforms — where you have subscribed.
- Advertising and analytics platforms — Meta, Google and TikTok, where you have consented to marketing cookies.
- Professional advisers and authorities — where we are legally required to disclose.
International transfers
Some of these providers are based outside the UK and EEA, including in the United States. Where data is transferred, it is protected by UK/EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.
How long we keep it
Order and transaction records are kept for 7 years to meet UK tax and accounting requirements. Support emails are kept for 2 years. Marketing contact data is kept until you unsubscribe, and then suppressed rather than deleted so we don't email you again by accident. Analytics data is kept in line with the retention settings of the platform concerned.
Your rights
Under UK GDPR and EU GDPR you have the right to access a copy of your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Withdrawing consent does not affect processing that already happened.
To exercise any of these, email revenecohelp@outlook.com. We respond within one month. We may need to verify your identity first — usually by confirming details of an order.
Marketing opt-out
Every marketing email has an unsubscribe link at the bottom. For SMS, reply STOP. Transactional messages about an order you've placed will still be sent.
Children
This site is not directed at children under 16 and we do not knowingly collect their data. If you believe we have, tell us and we'll delete it.
Security
The site runs over HTTPS and payment data is handled by PCI-DSS compliant processors. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data and will notify you and the regulator where legally required in the event of a breach.
Complaints
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority if you're in the EU.
Changes
We'll update this page if our practices change, and update the date at the top.