Legal
Privacy Policy
Your privacy matters to us. This policy explains what personal information Iris & Rose collects, why, and the choices you have.
Last updated 13 October 2026
Who we are
Iris & Rose is a skincare brand based in Copenhagen, Denmark. We are responsible for the personal information described in this policy. You can reach us at hello@irisandrosebeauty.com.
Information we collect
When you place an order or contact us, we may collect your name, email address, shipping and billing address, phone number and order details. Payments are processed securely by Shopify and its payment partners; we do not store your full card details. With your consent, we also collect information about how you use our website through cookies.
How we use it
We use your information to process and deliver orders, provide customer care, prevent fraud, meet legal obligations and, where you have agreed, send marketing emails and improve our website.
Legal basis
Under the GDPR and UK GDPR we rely on performance of a contract (fulfilling your order), legitimate interests (running and improving our shop), legal obligation (tax and accounting records) and consent (marketing and optional cookies).
Sharing
We share information only with service providers who help us run our shop, such as Shopify (store and checkout), payment providers and delivery partners. We never sell your personal information.
Retention
We keep order information for as long as required for accounting and legal purposes, and other information only as long as needed for the purpose it was collected.
Your rights
You may request access to, correction of, or deletion of your personal information, object to or restrict processing, request portability, and withdraw consent at any time. To do so, email us. You also have the right to complain to your data protection authority, such as Datatilsynet in Denmark or the ICO in the UK.
Changes
We may update this policy from time to time. The latest version will always be published on this page.