ALL PRODUCT
FACE
BODY
Brands

Privacy policy

Last updated: 20 October 2026

This notice explains how we use your personal data when you purchase from us, use our mobile app (where available) or contact us, and the rights you have under UK data protection law (the UK GDPR). If any part of it is unclear, please contact us and we will explain it.

WHO WE ARE

This store is operated by Transformative Learning Pte. Ltd. (UEN 201627009N), 24 Sin Ming Lane, #08-107, Midview City, Singapore 573970. We are the controller of the personal data described in this notice. You can contact us at care@theayurvedaexperience.co.uk.

We are not established in the United Kingdom. Under Article 27 of the UK GDPR we have appointed EDPO UK Ltd as our representative in the United Kingdom: Unit 33, Waterside, Schooner Court, 44-48 Wharf Road, London N1 7UX, United Kingdom (registered in England and Wales, company no. 12945565), privacy@edpo.com. You may contact EDPO UK on any matter covered by this notice.

THE DATA WE COLLECT

  • Information you provide — your name, delivery and billing address, email address, telephone number and payment and transaction information when you place an order, and the content of any email, message or review you send us.
  • Information collected automatically — your IP address, the device and browser you use, and your activity on the Site, collected through cookies and similar technologies.
  • Information arising from your orders — the products you have purchased and when, and the outcome of the fraud checks described below.
  • Information from our loyalty programme — your points balance and the purchases and referrals that earned it.
  • If you use our mobile app — your device identifiers and the notification permission you give.

You are not obliged to provide this information. However, we cannot process an order without your name, address, contact details and payment information, and we will be unable to accept your order if you do not provide them.

Where you use more than one of our stores, we may combine information relating to you across those stores for the purposes described above.

DATA WE RECEIVE FROM OTHERS

Not everything we hold comes directly from you. We also receive personal data about you from:

  • Affiliates and referral partners, where you reached us through their link and gave your details to them.
  • Payment and fraud-prevention providers, which return the outcome of the checks described below.
  • Delivery partners, which provide tracking and delivery status.
  • Advertising and analytics platforms, which provide measurement and audience information derived from your interaction with our advertising.

We use it for the purposes and on the legal bases set out below, and this notice applies to it from the point we receive it. We make this notice available in the communications we send you about your order.

WHY WE USE YOUR DATA, AND ON WHAT LEGAL BASIS

  • To supply our products — accepting, fulfilling and delivering your order, processing returns and refunds, and responding to your enquiries. Legal basis: this is necessary to perform our contract with you.
  • To run our loyalty programme — when you place an order, we enrol you in our loyalty programme: we award points for your purchases and referrals, show you your points balance and let you redeem your points. You can leave the programme at any time by writing to care@theayurvedaexperience.co.uk, and we keep your points for as long as you take part. Legal basis: our legitimate interest in rewarding our customers; you may leave the programme, or object, at any time.
  • To meet our legal obligations — retaining records required by tax, accounting, consumer-protection and data-protection law, including handling any request you make under this notice, verifying your identity when you do, and keeping a record of your marketing choices so that we continue to respect them. Legal basis: we are legally required to do these things.
  • To prevent payment fraud — screening orders as described below. Legal basis: our legitimate interest — and that of our customers and of card issuers — in preventing and detecting payment fraud.
  • For marketing — sending newsletters and messages by email, WhatsApp, SMS or, if you have allowed them, push notifications from our mobile app, concerning our Ayurvedic skincare and wellbeing products, and grouping customers into segments according to their purchases and their use of the Site so that the material we send is relevant. That grouping is profiling: analysing what customers buy so that we can predict what they may like. It is ordinary marketing analysis and has no legal effect on you. Legal basis: your consent where the law requires it; otherwise our legitimate interest in promoting our own products to our own customers.
  • For advertising — sharing your email address and telephone number with advertising platforms, in a form they can use only to match against their own users, so that they can show you our advertising and find people similar to our customers, and measuring the results. Legal basis: our legitimate interest in promoting our products to our customers and to people likely to be interested in them. You may object at any time, as described under Your rights.
  • To collect and publish product reviews — inviting you, after a purchase, to review the products you bought, and publishing the reviews you submit under the name you provide. You can decline any invitation, and publication happens only when you submit a review. Legal basis: your consent where the law requires it; otherwise our legitimate interest in obtaining genuine feedback on our products.
  • To handle complaints, payment disputes and legal claims — including responding to chargebacks raised with your bank and to complaints you make to us or to an authority. Legal basis: our legitimate interest in resolving disputes and defending our rights, and the legal obligations that apply to consumer complaints.
  • To operate and improve the Site and run our business — security, diagnostics, understanding how the Site is used, testing changes to the Site, and internal reporting and planning based on orders. Legal basis: our legitimate interest in maintaining a secure and functioning store and in managing our business.

COOKIES

We use cookies and similar technologies, including web beacons in our emails. They fall into three categories:

  • Necessary — required for the Site to function, for example to retain the contents of your basket.
  • Statistical — used to analyse how the Site is used so that we can improve it.
  • Marketing — used by us and by our advertising partners to deliver advertising and measure its effectiveness. The partners we currently use are listed in the cookie settings on the Site.

Statistical and marketing cookies are used on the basis of your consent, which you may amend or withdraw at any time through the cookie settings on the Site or in your browser. Necessary cookies are used on the basis of our legitimate interest in operating the Site.

FRAUD PREVENTION AND ORDER SCREENING

We screen orders in order to protect you and ourselves against payment fraud. Our e-commerce platform assesses the likelihood that an order is fraudulent using machine-learning models. The assessment takes account of factors including whether the billing address and card security code matched, the characteristics and location of the internet connection used relative to your billing and delivery addresses, whether payment has been attempted using multiple cards, and patterns within the order itself. Orders assessed as high risk are cancelled. The consequence of that assessment is limited to the order concerned: it is not dispatched, and you are told. It does not affect your ability to order from us again, and we do not use it for any other purpose. We also cancel unpaid orders displaying other indicators we associate with fraudulent ordering, such as the use of a disposable email address. We do not publish full details of these indicators, as doing so would enable them to be circumvented.

If we cancel your order, we will notify you and the order will not be dispatched. We do not retain payment for an order we have cancelled. Where payment has been taken, we refund it. Where payment was authorised but not taken, the authorisation is released, which your bank may take several days to process. If any amount remains outstanding against your card after that period, please contact us and we will resolve it. We may record a marker on your customer record noting the cancellation; that marker does not of itself prevent you from ordering from us again.

If you consider the decision to be wrong, you may ask us to review it. Screening is not infallible, and legitimate orders are occasionally affected — a mistyped billing address is sufficient. Please write to care@theayurvedaexperience.co.uk. A member of our team will review the decision personally, explain the reasons so far as we are able, take your comments into account, and reinstate the order if the review supports reinstatement.

WHO WE SHARE YOUR DATA WITH

We share your data only where the law permits, and only with:

  • Service providers acting on our documented instructions, under contracts that bind them to protect your data and follow those instructions — our e-commerce platform, hosting and cloud providers, payment providers, logistics and fulfilment partners, customer service tools, our loyalty-programme provider, our review platform, the provider that runs our mobile app, analytics providers, and the platforms through which we send email, WhatsApp and SMS messages. A current list of these providers is available on request. You may also ask us which recipients have received your own data.
  • Advertising and analytics partners, where you have consented to the use of marketing cookies.
  • Affiliate networks, which receive the order reference and value when you reached our Site through an affiliate’s link, so that the affiliate can be paid. Legal basis: our legitimate interest in running and paying for our affiliate programme.
  • Public authorities and professional advisers, where disclosure is required by law or necessary to establish or defend legal claims.
  • An acquirer of our business, in the event of a sale, merger or reorganisation.

Advertising platforms. Where you have consented to marketing cookies, we and the advertising platforms we use (named in the cookie settings) jointly determine how certain data about your visit is collected on the Site and transmitted to them. For that collection and transmission, we are joint controllers with the platform; each of us is separately responsible for what we do with the data afterwards. You may exercise your rights against either us or the platform. You can stop this at any time by withdrawing consent in the cookie settings.

We do not sell or rent your personal data.

Text messaging originator opt-in data and consent will not be sold, rented, or shared with any third parties for marketing or promotional purposes.

WHERE YOUR DATA IS PROCESSED

We are based in Singapore and receive the data you provide there. We also use service providers located in India, the United Kingdom, the United States and Canada, so your data may be processed in those countries.

Where we transfer your data to a service provider outside the United Kingdom or the European Economic Area, we rely either on an adequacy decision covering that country, or on the applicable standard contractual clauses — for transfers from the United Kingdom, the UK Addendum or International Data Transfer Agreement — together with any further safeguards the transfer requires. You may obtain a copy of those safeguards by writing to care@theayurvedaexperience.co.uk or to EDPO at privacy@edpo.com.

HOW LONG WE RETAIN YOUR DATA

We retain your data for as long as is necessary for the purposes set out above and, after that, for as long as the law requires or permits us to keep it. Order records, and correspondence relating to an order, are kept for ten years from the date of the order, or longer if a legal claim requires it. Account data is kept for as long as you hold an account with us; marketing data until you unsubscribe or object, after which we keep only a suppression record so that we continue to respect your choice; cookies for the periods shown in the cookie settings.

You may ask us to erase your data at any time, as described under Your rights below, and we will do so unless we are required by law to retain it.

YOUR RIGHTS

You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling related to that direct marketing. If you object, we will stop using your data for those purposes. You are not required to give a reason.

Using the unsubscribe link in any email, or replying STOP to a WhatsApp or SMS message, stops those messages. To object to our use of your data for direct marketing — including matching your details with advertising platforms so that they can show you our advertising or find people similar to our customers — email us at care@theayurvedaexperience.co.uk. We will stop that use, and we will remove or suppress your data in every customer list and seed audience that remains in our advertising accounts. We keep a minimal record of your opt-out so that we continue to honour it.

You also have the right to:

  • ask what personal data we hold about you, and receive a copy of it;
  • have inaccurate data corrected and incomplete data completed;
  • have your data erased;
  • ask us to limit what we do with your data while a question about it is resolved;
  • receive your data in a machine-readable format, or have it sent to another provider;
  • object to any processing we base on our legitimate interests; and
  • withdraw any consent you have given, at any time; this does not affect what was lawfully done before you withdrew it.

To exercise any of these rights, please write to care@theayurvedaexperience.co.uk or contact EDPO. We will respond within one month; where a request is complex or we receive several from you, the law allows us up to two further months, and we will tell you if we need them. We may first need to verify your identity, and there are limited circumstances in which we cannot act on a request — for example where doing so would disclose another person’s data or conflict with a legal obligation. Where that applies, we will tell you why.

You are also entitled to complain to a data protection authority. For this store, that is the Information Commissioner's Office (ICO), and you may equally complain to the authority where you live or work. You are not required to contact us first, although we would welcome the opportunity to resolve the matter. If you complain to us directly, we will acknowledge your complaint within 30 days, look into it and keep you informed, and tell you the outcome without undue delay.

CHILDREN

The Site is not directed to children, and we do not knowingly collect personal data from children. If we become aware that we have done so, we will delete the data without undue delay. If you believe a child has provided us with personal data, please contact us at care@theayurvedaexperience.co.uk.

SECURITY

We maintain administrative, technical and organisational measures to protect your data, including encryption in transit. No system can be guaranteed secure against every attack, but we treat this obligation seriously and review our measures.

PUBLIC AREAS OF THE SITE

Where the Site permits you to post publicly, anything you post may be read by others and indexed by search engines. You should not include personal or payment details in a public post.

CHANGES TO THIS NOTICE

We may update this notice from time to time and will revise the date shown above when we do. Where a change materially affects how we use your data, we will bring it to your attention before it applies, and where a change requires your consent, we will obtain it first.