Privacy policy

Last updated: March 20, 2026

Privacy Policy

Libi & Daughters Alchemy Ltd ("we", "us", "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit or make a purchase through our website.

This Privacy Policy applies to purchases made through the United Kingdom store operated by Libi & Daughters Alchemy Ltd and delivered within the United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the Data Controller.

This Privacy Policy should be read together with our Terms of Service, Refund Policy, Cancellation Policy, and Shipping Policy.

1. Company Details

Libi & Daughters Alchemy Ltd
Company number: 12226453
Registered office: 101 New Cavendish Street, 1st Floor South, London, W1W 6XH, United Kingdom
Email: care@libi.com

2. Personal Data We Collect

We limit the collection of personal data to what is necessary for the purposes described in this Policy.

We may collect, use, store and transfer the following types of personal data:

Identity and Contact Data

  • First name and last name

  • Email address

  • Telephone number

  • Billing and delivery address

Transaction Data

  • Details of products purchased

  • Payment status and transaction history

We do not store full payment card details. Payments are processed securely by third-party payment providers.

Technical and Usage Data

  • IP address

  • Browser type and version

  • Device information

  • Pages visited and interaction data

Marketing and Communications Data

  • Your preferences for receiving marketing

  • Records of your consent and opt-in actions

3. How We Collect Your Data

We collect personal data:

  • Directly from you when you place an order, contact us, or subscribe to marketing communications

  • Automatically through cookies and similar technologies when you use our website

  • From third-party service providers involved in payment processing, delivery, analytics, and marketing

4. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To process and fulfil your orders (contract)

  • To manage payments, refunds, returns, and cancellations (contract)

  • To communicate with you regarding your order and customer service requests (contract / legitimate interests)

  • To detect and prevent fraud and misuse of our Service (legitimate interests)

  • To improve our website, products, and services (legitimate interests)

  • To comply with legal and regulatory obligations (legal obligation)

  • To send marketing communications where you have provided consent (consent)

Processing of order-related data is necessary for the performance of our contract with you and is further governed by our Refund Policy, Shipping Policy, and Terms of Service.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract — to fulfil your order

  • Legal obligation — for accounting, tax, and regulatory compliance

  • Legitimate interests — to operate, improve, and protect our business

  • Consent — for marketing communications and certain cookies

Where we rely on legitimate interests, we have carried out a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms.

Where we need to collect personal data by law or under the terms of a contract, and you fail to provide that data, we may not be able to fulfil your order or perform the contract.

Further details about the specific legal basis applicable to particular processing activities can be provided upon request.

6. Marketing Communications

Where you have provided consent, we may contact you via email and/or WhatsApp with skincare updates, product launches, and offers.

You can withdraw your consent at any time by:

  • Clicking “unsubscribe” in emails

  • Replying “STOP” on WhatsApp

  • Contacting us at care@libi.com

We may continue to send non-marketing communications (such as order confirmations and service updates), where permitted by law.

7. Sharing Your Personal Data

We may share your personal data with:

  • Payment processors (e.g. Stripe)

  • Delivery providers (e.g. DHL Express)

  • Customer support platforms

  • Marketing platforms (e.g. Klaviyo)

  • Analytics providers (e.g. Google Analytics)

We only share personal data where necessary for these purposes. All third parties act as data processors or independent controllers (as applicable) and are required to process personal data in accordance with applicable data protection laws.

We do not sell your personal data.

8. International Transfers

Your personal data may be transferred outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, including:

  • UK adequacy regulations, or

  • Standard Contractual Clauses

9. Data Retention

We retain your personal data only for as long as necessary:

  • To fulfil the purposes for which it was collected

  • To comply with legal obligations (e.g. tax and accounting requirements)

  • To resolve disputes, enforce our agreements, and establish, exercise, or defend legal claims

10. Cookies

We use cookies and similar technologies to:

  • Ensure the website functions correctly

  • Improve user experience

  • Analyse website usage

  • Support marketing activities (with your consent)

Non-essential cookies are only used where you have provided consent.

Our use of cookies is managed through our cookie consent banner, where you can accept, reject, or customise your preferences at any time.

11. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Object to processing

  • Request restriction of processing

  • Request transfer of your data

  • Withdraw consent at any time

To exercise your rights, contact: care@libi.com

We may need to verify your identity before responding.

We will respond to all valid requests within one month, unless an extension is permitted under applicable law.

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). We would, however, appreciate the opportunity to address your concerns before you approach the ICO.

Automated Decision-Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

12. Security

We implement appropriate technical and organisational measures to protect your personal data.

However, no method of transmission over the Internet or method of storage is completely secure.

In the event of a personal data breach, we will comply with our legal obligations, including notifying the Information Commissioner’s Office and affected individuals where required.

13. Children

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

15. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page and, where appropriate, notified to you.

16. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us:

Email: care@libi.com
WhatsApp: +44 7520 640127