← Back to the drops
FEMINA+/Policies

Privacy Policy

Last updated: 21 August 2026

At FEMINA+ we take your privacy seriously. This Privacy Policy explains what personal data we collect when you visit feminaplus.co.uk or buy FEMINA+ Lymphatic Drainage Drops, why we collect it, who we share it with, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read it alongside our Terms of Service and Refund Policy. If anything is unclear, email us at support@feminaplus.co.uk.

1. Who we are

FEMINA+ is the controller of your personal data, which means we decide how and why it is used.

Although we are based outside the United Kingdom, we sell to customers in the UK and this policy is written to meet UK data protection law.

2. What personal data we collect

We only collect what we need to run our shop and look after you as a customer.

Information you give us

  • Identity and contact details: your first and last name, email address, telephone number, and billing and delivery addresses.
  • Order details: the products you buy (for example Buy 1, Buy 2 Get 1 Free, or Buy 3 Get 2 Free), the price paid in pounds sterling (£), your order number and order history.
  • Customer service messages: anything you send us by email, including refund or guarantee requests and any information you choose to share with us.
  • Marketing preferences: whether you have agreed to receive offers and news from us.

Payment information

Payments are handled securely by our payment providers. We do not see or store your full card number, security code or bank details. We receive only confirmation that payment has been made, the payment method used (for example "Visa ending 1234") and the amount.

Information collected automatically

  • Technical and browsing data: your IP address, device and browser type, approximate location, the pages you visit, the links you click, how you arrived at our site and how long you stay.
  • Cookies and similar technologies: see section 7 below.

We do not knowingly collect special category data (such as health information). Please do not include health details in messages to us unless you need to in order to explain a refund request; if you do, we will use that information only to handle your request.

3. How we use your data and our lawful bases

UK GDPR requires us to have a lawful basis for every use of your personal data. These are ours.

  • To process and deliver your order (taking payment, packing, arranging free tracked shipping, sending order and dispatch confirmations). Lawful basis: performance of a contract with you.
  • To provide customer service, answer your questions and handle returns, refunds and our 30-day money-back guarantee. Lawful basis: performance of a contract and our legitimate interest in supporting our customers.
  • To send you marketing emails about FEMINA+ offers and news. Lawful basis: your consent, or (for existing customers, in relation to similar products) our legitimate interest under the "soft opt-in" rule. You can unsubscribe at any time using the link in every email or by contacting us.
  • To run, secure and improve our website, understand how it is used and fix problems. Lawful basis: our legitimate interest in operating a safe, well-functioning shop; consent for non-essential cookies.
  • To prevent and detect fraud and protect our business and customers. Lawful basis: our legitimate interest in preventing fraud, and compliance with legal obligations.
  • To keep records for accounting, tax and consumer-law purposes. Lawful basis: compliance with legal obligations.
  • To show you relevant advertising on social media and other platforms, and measure how well our adverts work. Lawful basis: your consent (given through our cookie banner).

Where we rely on legitimate interests, we have checked that our interests are not overridden by your rights and freedoms. You can ask us about this assessment at any time.

4. Who we share your data with

We never sell your personal data. We share it only with trusted service providers who need it to help us serve you, and who are contractually bound to use it solely for that purpose and to keep it secure. They include:

  • Shopify, which hosts our online store, processes orders and stores customer and order records on our behalf.
  • Payment providers (such as the card-processing and express-checkout services offered at our checkout), which process your payment securely and may carry out fraud checks.
  • Shipping and fulfilment partners, which receive your name, delivery address, phone number and email so they can pack, dispatch and track your parcel and send you delivery updates.
  • Email and customer-service platforms, which send transactional emails (order and shipping confirmations) and, if you have agreed, our marketing emails, and help us manage your support requests.
  • Analytics and advertising providers (for example Google, Meta and similar platforms), which, where you have consented to cookies, help us understand site traffic and measure and deliver our advertising.
  • Professional advisers such as accountants, lawyers and insurers where necessary.
  • Authorities and regulators where we are required to by law, or to protect our legal rights.

If FEMINA+ is ever sold, merged or restructured, your data may be transferred to the new owner, who will be bound by this policy.

5. International transfers

FEMINA+ is based in the United Arab Emirates, and some of our service providers (for example Shopify and our email and advertising platforms) operate from the United States, the European Economic Area and other countries. This means your personal data may be transferred outside the United Kingdom.

Whenever that happens, we make sure your data is protected in line with UK GDPR by relying on one of the following safeguards:

  • a UK adequacy regulation recognising that the destination country offers adequate protection (for example the EEA);
  • the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures needed; or
  • the UK Extension to the EU-US Data Privacy Framework, where the provider is certified.

You can ask us for more information about the safeguards we use by emailing support@feminaplus.co.uk.

6. How long we keep your data

We keep your personal data only for as long as we need it for the purposes described above, after which it is deleted or anonymised. As a guide:

  • Order, invoice and payment records: 6 years after the end of the tax year in which the order was placed, to meet accounting and tax obligations and to deal with any disputes.
  • Customer account and order history: for as long as you remain a customer, and then for up to 3 years after your last order or interaction with us.
  • Customer service correspondence: up to 3 years after the matter is closed.
  • Marketing data: until you unsubscribe or withdraw consent, or after 3 years of inactivity, whichever is sooner. We keep a minimal suppression record so that we respect your choice not to be contacted.
  • Analytics and advertising data: according to the cookie lifetimes set out in our cookie banner, typically between 1 day and 2 years.

We may keep data for longer where the law requires it or where it is needed to establish, exercise or defend legal claims.

7. Cookies and similar technologies

Cookies are small text files stored on your device when you visit a website. We use them for the following purposes:

  • Strictly necessary cookies: these make the site work, remember your basket, keep your checkout secure and prevent fraud. They do not require consent.
  • Analytics cookies: these help us understand how visitors use our site (pages viewed, time spent, errors encountered) so we can improve it. Used only with your consent.
  • Marketing and advertising cookies and pixels: these allow us and our advertising partners (for example Meta, Google and TikTok) to show you relevant adverts on other websites and social media, and to measure the results of our campaigns. Used only with your consent.

When you first visit our site you can accept or decline non-essential cookies through our cookie banner, and you can change your mind at any time using the cookie settings link on our site. You can also delete or block cookies through your browser settings, although blocking strictly necessary cookies may stop parts of the site, including checkout, from working properly.

8. Your rights

Under UK GDPR you have the following rights over your personal data:

  • Access: ask for a copy of the personal data we hold about you.
  • Rectification: ask us to correct data that is inaccurate or incomplete.
  • Erasure: ask us to delete your data where we no longer have a valid reason to keep it.
  • Restriction: ask us to limit how we use your data in certain circumstances, for example while we check its accuracy.
  • Objection: object to processing based on our legitimate interests, and object at any time to direct marketing.
  • Portability: receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another provider where technically possible.
  • Withdraw consent: where we rely on your consent (for example marketing emails or cookies), withdraw it at any time. This does not affect processing carried out before you withdrew it.
  • Automated decisions: we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

How to exercise your rights

Email support@feminaplus.co.uk with the subject line "Privacy request", telling us which right you wish to exercise and the email address you used to place your order. We may ask for additional information to confirm your identity before we act.

We will respond within one month. If your request is especially complex, we may extend this by up to two further months, and we will tell you if that is the case. Exercising your rights is free, although we may charge a reasonable fee or decline to act if a request is clearly unfounded or excessive.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put things right. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

9. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, disclosure or alteration. Our store runs on Shopify's PCI DSS compliant platform, all pages are encrypted using SSL/TLS, payment details are handled only by our payment providers, and access to customer data is limited to people who need it to do their job.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we will notify you and the ICO where the law requires us to in the event of a data breach affecting you.

10. Children

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.

11. Links to other websites

Our site may contain links to third-party websites or social media platforms. We are not responsible for their privacy practices, so please read their own privacy policies before sharing any information with them.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our business or in the law. The latest version will always be published on this page with the "Last updated" date shown at the top. Where a change is significant, we will let you know by email or by a notice on our website.

13. Contact us

If you have any questions about this policy or how we use your personal data, please get in touch: