Last updated: October 2026. This policy explains how Citrus Reefs ("we", "us") collects and uses your personal information when you visit citrusreefs.com or buy from us. We follow the UK GDPR and the Data Protection Act 2018.
Who we are
Citrus Reefs is a small UK skincare and wellness brand. We are responsible for your personal information. You can reach us any time at hello@citrusreefs.com.
What we collect
When you order: your name, email, phone number, delivery and billing address, and order details. Card details are handled securely by our payment providers. We never see or store your full card number.
When you browse: basic device information such as your browser, IP address and the pages you visit, collected through cookies.
When you contact us or sign up: your email address and anything you choose to tell us.
How we use it
To make and deliver your order, take payment, send order and delivery updates, handle subscriptions, answer your questions, prevent fraud, and improve our website. If you sign up to our emails, we'll also send you news and offers. You can unsubscribe at any time using the link in any email.
Our legal reasons for using it
We use your information to fulfil our contract with you (your order), because of legal obligations (such as keeping tax records), for our legitimate interests (running and improving our shop and preventing fraud), and with your consent (marketing emails and non-essential cookies).
Who we share it with
Only the services we need to run our shop: Shopify (our online store), our payment providers, our couriers (DHL and Royal Mail) so they can deliver your parcel, and our email, analytics and advertising tools. We never sell your personal information. Some of these services may store data outside the UK, and when they do, they use approved safeguards to protect it.
Cookies
We use essential cookies to make the shop and checkout work. With your permission, we also use analytics and advertising cookies. You can change your choice using the cookie banner or your browser settings.
How long we keep it
We keep order records for as long as needed for tax and accounting, usually 6 years. Marketing data is kept until you unsubscribe or ask us to delete it.
Your rights
You can ask to see, correct or delete your information, ask us to limit or stop using it, object to marketing, or ask for a copy to take elsewhere. Just email hello@citrusreefs.com. We'll reply within one month.
Children
Our website is not intended for anyone under 18, and we don't knowingly collect information from children.
Complaints
If you're unhappy with how we've handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page.