Your bag is empty
Explore our curated collections and secure your skincare selections.
Privacy Policy
1. Purpose of the Privacy Notice
This Privacy Policy (hereinafter, “Privacy Policy”) of Natura Bissé International Limited (hereinafter, “Natura Bissé”) regulates the obtainment, use and other forms of processing of personal data provided by Users on this website (the “Website”) or in any of the company's Internet environments.
All legal texts are available to users and / or those interested in the relevant website. These texts may be modified and/or updated according to the needs and activities carried out by Natura Bissé.
1.1. Who is the data controller responsible for processing your data?
The data identifying the data controller are: Natura Bissé International Limited. VAT No.: 145190326. Address: Fourth Floor 15, Grosvenor Gardens, London, United Kingdom, SW1W OBD. Email: naturabisse@naturabisse.com
Natura Bissé International Limited is the legal entity responsible for controlling and processing your personal data in connection with the services it provides.
References in this Privacy Policy to “Natura Bissé”, “we”, “us” or “our” mean Natura Bissé International Limited.
We are committed to respecting and safeguarding your privacy and the security of your data.
1.2. Who is our Representative and how can you contact them?
Our Representative acts as interlocutor between us and yourself in order to ensure compliance by Natura Bissé® with data protection legislation and with the rights granted by law. You can contact the Representative at the following email address: dpd.uk@naturabisse.com.
1.3. For what purpose(s) do we collect your data?
In accordance with current legislation, we only collect data that is strictly necessary to offer the services derived from our activity and other benefits, management and activities attributed by law.
Only contact data and personal data provided by the Users are processed in this Website. The data collected from Users will be processed for the purpose of keeping a business relationship with them. The operations foreseen to carry out the processing are:
i) Sending of commercial advertising communications by email, WhatsApp, SMS, MMS, social communities and any other electronic or physical means, present or future, that enables commercial communications. These communications will be carried out by the DATA CONTROLLER in relation to its products and services, or its collaborators or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
ii) Carrying out statistical studies.
iii) Process orders, requests or any other type of petition made by users through any of the contact forms that are made available.
iv) Sending the website newsletter.
v) Management of the candidate selection process.
vi) Manage access to our facilities and provide the greatest possible security of assets and people.
vii) Investigate and find out the effectiveness of the products with which we collaborate.
viii) Carry out an adequate evaluation of the care of your skin now and on the future.
ix) Performing cosmetics test.
x) Provision of contractual or pre-contractual services.
2. Lawful basis
We use your personal information to provide our products and services. Some are essential for us to provide the services you use or to fulfil our legal obligations. Some help us run our business efficiently and effectively. Some enable us to provide you with more relevant and personalised offers and information for example to set up and run your account, process orders and transactions, respond to queries and comments and provide you with the best possible level of customer service.
We may use it to contact you about orders you’ve placed or to contact you in emergency situations, such as an urgent product recall or where we have a duty of care to notify you of information that relates to your health.
In all cases we must have a reason and a legal ground for processing your personal information. Some of the most common legal grounds we rely on are briefly explained below.
Consent. You will be asked to confirm that you’re happy to provide your personal data and that you give permission to NATURA BISSÉ INTERNATIONAL LIMITED to process your personal data. Information relating to why we want your data, how it will be used and if your data will be shared, will be provided at the time of asking you for your consent. Where we are relying on consent you will usually see a tick box. You have the right to withdraw your consent at any time if you no longer want to be part of the Natura Bissé® processing activity (See the ‘Withdrawing my Consent’ section below).
Contractual. Processing data for the purposes of a contract to which you are party to. There is a range of legal and regulatory requirements we and our parent company need to comply with, and some of these may affect the way we process personal data, or the length of time for which we are required to keep it.
Legal obligation. We will occasionally be under a legal obligation to obtain and disclose your personal data. Where possible we will notify you when processing your data due to a legal obligation, however this may not always be possible.
Legitimate interest. We holds personal data for our own legitimate business interest. This relates to us managing our business to enable us to give you the best service/products and most secure experience. When we rely on this, we carry out a legitimate interest assessment to ensure we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws.
The legitimate business interests of Natura Bissé® do not automatically override your interests - we will not use your personal data for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted to by law.
By means of implementing the forms included in the different websites, related to services provided by us, Users accept the inclusion and processing of the data provided in a personal data processing, the data controller of which is Natura Bissé International Limited, and will be able to exercise the pertinent rights according to what is stated in the following clauses.
3. User commitment to have their data registered for processing
We recommend that, before entering the data in any or some of the data collection sheets of this website, users should read the Legal Notice, Cookie Policy and the present Privacy Policy carefully. In any case, users are responsible for the authenticity of the data provided, that they are accurate, current and complete for the purpose for which they are provided, taking on responsibility for damages, both for lost profits and for consequential damage, which may be generated by such inaccuracies or misrepresentations. In any case, if the data provided in the corresponding forms were owned by a third party, the user takes responsibility for the correct collection of consent and information to the third party on the aspects stated in this legal notice and privacy policies.
4. User responsibility for use and content
Both the access to the websites and the use that can be made of the information and contents included therein will be the exclusive responsibility of whoever does this. Therefore, the use that may be made of the information, images, content and / or products reviewed and accessible through it, will be subject to applicable law, whether national or international, and to the principles of good faith and lawful use by Users, who will be entirely responsible for such access and proper use. Users will be obliged to make reasonable use of the services or contents, under the principle of good faith and observing current law, morality, public order, good customs, the rights of third parties and of Natura Bissé® itself, all according to the possibilities and purposes for which they are conceived. We take no liability, whether direct or indirect, for consequential damages or lost profits, arising from the misuse of services or content made by Users or third parties.
4.1. To which recipients will your personal data be communicated?
Natura Bissé will not carry out transfers of your Personal Data except subsidiaries of Natura Bissé International Limited (Natura Bissé International, S.A.). Whenever any type of transfer of personal data is carried out, the express, informed, and unequivocal consent of Users will be requested beforehand. All data requested through the website are mandatory, as they are required for the provision of optimal service to the User. In case of not providing all data, no guarantee is given that the information and services provided will be completely according to your needs.
However, we may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in compliance with any legal obligation, or in order to enforce or apply any agreements; or to protect the rights, property, or safety of the organisation, or others. This includes exchanging information with other companies and organisations for the purposes of safeguarding or other statutory regulations with which we must comply.
On the same way, we use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organization apart from us. They will hold it securely and retain it for the period we instruct.
We do not sell, rent, or transfer the personal data of Users of these websites, except where necessary for the provision of the service itself.
The Website has links, applications and functionalities shared with third parties, such as social networks or on-line communication systems. Natura Bissé International Limited takes no responsibility for the information collected in such applications, functionalities or social networks owned by third parties as it has no management capacity or control over them, the legal notices and privacy policies that may appear on websites or similar third parties being therefore applicable. We encourage you to read the privacy notices on the other websites you visit.
4.2. How long do we keep your personal data for?
We retain your personal data in a live environment for as long as necessary to fulfil the purpose(s) for which it was collected (including as required by applicable law or regulation, typically 7+ years).
We may keep your data for longer to establish, exercise, or defend our legal rights and yours.
Where there is a need, personal data is securely archived with restricted access and other appropriate safeguards where there is a need to continue to retain it.
We are required to keep details of financial transactions for seven years to meet accountancy and HMRC requirements.
We will anonymise or delete personal data if, after a period of seven years, we have not had any contact or communication from you (this will be measured on a rolling seven-year period) – subject to special circumstances concerning legacies.
We maintain data retention criteria to help implement this. This takes account of our legal and accounting obligations, balancing this with what would be considered reasonable.
Personal data will be retained if the user does not state otherwise and for the legally established retention periods, unless for logical and obvious reasons the data have lost their usefulness or legitimate purpose for which they were collected.
Data retention criteria: your personal data shall be retained by us for as long as there is a mutual interest in maintaining the purpose of the processing and when they are no longer required for that purpose, they shall be deleted with appropriate security measures to ensure the data’s anonymisation or its total destruction.
5. Security of your personal data
In accordance with the Data Protection Act 2018 and UK GDPR, we have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
Additionally, we put in place appropriate security procedures and access controls to ensure the confidentiality of the special categories of personal data that we process. For instance, information relating to the religious beliefs of our supporters.
Personal data collected through our Website is transmitted across the Internet securely using high-grade encryption and we take particular care with online giving. We only use service providers who specialise in the secure capture and processing of online payments. The online donation form is secure, and your information is encrypted and stored on a secure database. We do not retain any card payment information.
The data we collect from you is processed on our servers located in the UK. If your data needs to be transferred outside of the European Economic Area (EEA), or to a country that has not been granted a finding of adequacy by EC, we will transfer your data using ‘appropriate safeguards’ i.e. Binding Corporate Rules (BCR) and/or Standard Contract Clauses (SCC) (also known as Model Contract Clauses) etc., or we will seek your consent, on a case-by -case basis, and where appropriate to do so.
5.1. Our use of Cookies
Our website uses Cookies to record visits to the website. For instance, we may collect information about your computer, including where available, your IP address, operating system, and browser type, for system administration purposes. This information helps us to improve the website and provide you with a good experience when you browse our web pages. Please see our Cookie Policy for more information.
6. LSSI-CE information
In compliance with the duty of information established in applicable law, we hereby inform you that the driver and content manager of the Website where you can download several applications and / or information is Natura Bissé International Limited with address in Fourth Floor 15, Grosvenor Gardens, London, United Kingdom, SW1W OBD, who is the manager of the Internet domain https://www.naturabisse.com/gb/en/home registered in the corresponding registry, which attends communications received from users and/or stakeholders by e-mail naturabisse@naturabisse.com.
Any other commercial, trade, administrative or contracting activity of goods and/or services is the responsibility of the aforementioned company, who is the owner of this domain.
7. The mandatory or optional nature of information provided by users.
Users will mark the corresponding boxes and enter data in the fields marked with an asterisk (*) in the contact form or download forms to expressly and unequivocally accept that their data are necessary for the service provider to grant their request, the inclusion of data in the remaining fields being voluntary. Users guarantee that the personal data provided to the Controller are true and take responsibility for communicating any changes thereto.
7.1. What are the rights of the Users who provide us with their data?
We support your data subject rights in relation to the processing of your personal data under the Data Protection Act 2018 and the UK GDPR, including your:
• Right to be informed (chiefly via this policy)
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making including profiling.
You can exercise any of these rights by contacting us using any of the methods shown below in the ‘How do I contact you?’ section. We will respond to your request as quickly as possible. Usually, this will be within one month of receiving your request.
You may choose to correct, update, or delete your personal data, by contacting us using any of the methods shown below in the ‘How do I contact you?’ section.
If you have opted-in to receiving communications form us, your preferences will remain in effect until you tell us that you want to opt-out of receiving any further communications. Normally, you can do this by clicking the link at the footer of the email you have received.
You can change your preferences at any time by clicking the relevant link in the emails we send you or by contacting using any of the methods shown below in the ‘How do I contact you?’ section.
The rights referred to in the preceding paragraph may be exercised by each User by means of a written and signed request, accompanied by a photocopy of your ID card (DNI) or Passport, sent to the following address: dpd.uk@naturabisse.com.
8. Withdrawing consent
Where we® processes your information based on your consent, you may withdraw your consent at any time. You can do this by contacting us using any of the methods shown below in the ‘How do I contact you?’ section.
9. How to contact us
We hope you will never have the need to do so, but if you do want to complain about our use of your personal data, or our facilitation of your data subject rights requests.
You can contact us using any of the methods shown below: By post: Data Protection Officer Natura Bissé International Limited Fourth Floor 15, Grosvenor Gardens, London, United Kingdom, SW1W OBD By email: dpd.uk@naturabisse.com.
Our Data Protection Officer will investigate your complaint and provide you with an appropriate response as quickly as possible.
10. Making a complaint to the Information Commissioner
You can lodge a complaint with the Information Commissioner at any time. For instance, if you are unhappy with the way in which we are processing your information, or we have failed to facilitate your data subject rights.
The Information Commissioner can be contacted as follows: By post: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF By phone: 0844 496 4636 (local rate)
Further information about your data subject rights and how to complain to the ICO can be found here: ICO Make a Complaint.
11. Changes to our Privacy Policy
This Privacy Policy was last updated in April 2021. We continuously review the content of our Privacy Policy to ensure it accurately reflects what we do with your information, so we recommend that you check back here occasionally. If we make changes, we think may affect you significantly, particularly if they could have an impact on the choices, you have made or your marketing preferences, we will provide you with a prominent notice.
V1. June, 2022.
