DIREM BEAUTY – PRIVACY POLICY

Who we are
We are Direm Beauty (“Direm”), trading at https://dirembeauty.co.uk.

Introduction
This privacy policy applies to personal data we process as a data controller, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. To the extent that Direm decides why and how personal data is processed, Direm is a data controller of such personal data.

Direm may process the personal data of customers, potential customers, website visitors, as well as those who work for our suppliers, whenever you or they access or use our services, register with us, contact us, send us feedback, purchase products or services, post material, complete customer surveys, or provide us with supplies. When this privacy policy refers to “you”, it is referring to those individuals whose personal data is processed by Direm as a data controller.

Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed.

If you have any questions about this privacy policy please contact Direm in the following ways:
Phone: +44 7729286813
Post: Direm Beauty, 42 Russell Road, N13 4RP, United Kingdom
Website: https://dirembeauty.co.uk
You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).

This privacy policy is kept under regular review and may be updated from time to time.

Personal data collected by Direm
Direm may collect, use, store and transfer different kinds of personal data about you, for example:

  • Information about your identity such as your name or age.
  • Your contact information such as a billing address, email address or telephone number.
  • Your financial information such as your bank account details where needed for payments or refunds.
  • Transaction records such as dates of payments.
  • Technical data obtained when you use the Direm website such as your IP address and login details.
  • Use data such as how you use our services and any feedback you give us via phone, email, post or social media.
  • Marketing and communications data such as your preferences in receiving marketing from Direm and your communication preferences.

Direm will collect personal data through direct interactions with you, such as when you give your personal information by post, phone, email, fill out a form on the website, purchase products or services, or complete customer surveys.

How Direm uses your personal data
Direm will use your personal data where the law permits it. This will include using your information to:

  • Create and manage your account with us.
  • Provide goods and services to you.
  • Customise our website and its content to your particular preferences.
  • Notify you of any changes to our website or to our services that may affect you.
  • Notify you of any additional products or services that we think may be of interest to you, particular to your relationship with us.
  • Correspond with you via our WhatsApp chat function (where you have opted in).
  • Where it is necessary for the legitimate interests of Direm, and your interests and fundamental rights do not override those interests.
  • To comply with a legal obligation.

Legitimate interest means the interest of Direm in conducting and managing its business and to give you the best service. The potential impact on you (positive and negative) and your rights will be considered and balanced before your personal data is processed for legitimate interests. For example, we have a legitimate interest to process your personal data where you are an employee at one of our corporate clients, contacts or suppliers.

Your personal data will not be used for activities where Direm’s interests are overridden by the impact on you, unless you have provided consent or it is otherwise required or permitted by law.

Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that Direm is subject to.

Examples of the purposes for which Direm will process your personal data are:

  • To notify you about changes to our privacy policy, on the basis of Direm’s legitimate interests to keep its policies up to date and to comply with a legal obligation.
  • To send you marketing communications, on the basis of Direm’s legitimate interests in growing and developing business.
  • To create and manage your account with us.
  • To provide goods and services to you.
  • To customise our website and its content to your particular preferences.
  • To improve our services.

Direm does not normally rely on consent as a legal basis to process your personal data. Where you are asked to provide consent, we will provide full details of what we are seeking consent for. Where you have provided consent, you may withdraw that consent at any time by contacting us using the contact details above.

Marketing
Direm may use your personal data to form a view of products, services and offers that may be relevant to you. You may receive marketing communications from Direm if you have purchased goods or services from Direm, and have not opted out of marketing. Direm will obtain your express opt-in consent before sharing your personal data with any third party for any third party marketing purposes.

You can ask Direm to stop sending you marketing communications at any time by using the contact information in this privacy policy, or by following the opt-out information in the marketing communications.

WhatsApp
Direm uses WhatsApp chat to communicate with customers. Communication by WhatsApp is only ever initiated by you (we will not send you unsolicited messages) and you will need to opt-in before we send you any messages. If after using the chat function you no longer wish to communicate with Direm via WhatsApp, you can text “Stop” to opt out at any time.

Change of purpose
Direm will only use your personal data for the purposes for which it was collected, unless reasonably considered that Direm needs to use it for another reason and that reason is compatible with the original purpose. If you wish an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact Direm by using the contact information in this privacy policy.

If your personal data is required for an unrelated purpose, Direm will notify you and explain the legal basis.

Please note that Direm may process your personal data without your knowledge or consent where this is required or permitted by law.

Website
The Direm website is not intended for children.

The Direm website may contain links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. Direm is not responsible for their privacy statements.

Disclosures of personal data and international transfers
Direm may disclose your personal data to third parties if it sells, transfers or merges part of its business or assets with another organisation. Direm may also seek to acquire other businesses or merge with them. If a change like this happens to Direm, the new owners may use your personal data as set out in this privacy policy.

Direm does not allow any third parties to use your personal data for their own purposes, save as set out in this policy.

We will also share your data as required to do so by law.

Direm does not transfer your personal data outside the UK or the European Economic Area (EEA) which includes all EU countries and also Iceland, Liechtenstein and Norway, unless we have put in place appropriate safeguards.

Keeping your information secure
Direm has appropriate security measures in place to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

Direm limits access to your personal data by any employees, agents, contractors and other third parties who have a genuine business need to know your personal data. Such parties will only process your personal data on our instructions and will be subject to a duty of confidentiality.

Direm has procedures in place to deal with any suspected data breaches. You will be notified and any applicable regulators will be notified of a breach, where there is a legal requirement to do so.

Data retention
How long your personal data will be used for

Direm will retain your personal data for as long as is reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying a legal, regulatory, tax, accounting or reporting requirement. Direm may require your personal data for a longer period of time in the event of a complaint having been made, or a reasonable belief that there is a prospect of litigation in respect of our relationship with you.

In order to determine the appropriate retention period for your personal data, Direm considers the amount, nature and sensitivity of personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which Direm processes your personal data and whether those purposes can be achieved through other means, and the applicable regulatory, legal, tax, accounting or other purposes.

Direm may be required by law to keep basic customer information for a set period of time after they cease being customers for legal purposes.

In some circumstances, you can ask Direm to delete your personal data by using the contact information in this privacy policy. See “Your legal rights” below for more information.

In some circumstances, Direm may anonymise your personal data so that it can no longer be associated with you for research or statistical purposes. In such circumstances this information can be used indefinitely without further notice to you.

Your legal rights
Under certain circumstances you have rights under UK data protection laws. These rights are:

  • Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data Direm holds about you and to check that it is being lawfully processed.
  • Request correction of the personal data held by Direm about you. This enables you to have any incomplete or inaccurate data about you corrected, though any new personal data provided to us by you may need to be verified for accuracy.
  • Request erasure of your personal data. This enables you to ask for your personal data to be removed or deleted where there is no good reason for the processing to continue. You also have the right to ask for your personal data to be removed where you have successfully exercised your right to object to processing (see below), where the information has been processed unlawfully or where your personal data needs to be erased to comply with local law. Direm may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Request deletion of your Direm account, which means the permanent elimination of all privacy and cookie policies, terms and conditions, and cancellation of all ongoing subscriptions. To delete your account, you must log into your account, select the “My details” tab and then select “Delete account”.
  • Object to processing of your personal data where Direm is relying on a legitimate interest and you feel it impacts on your fundamental rights and freedoms. You also have the right to object where Direm is processing your personal data for direct marketing purposes. In some cases, Direm may demonstrate that it has compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request restriction of processing of your personal data. This applies if you want Direm to establish the data’s accuracy, if the use of the data is unlawful but you do not want it to be erased, where you need the data to be stored by Direm even if it is no longer required so that you can establish a legal claim, or if you have objected to our use of your data but Direm needs to verify whether we have overriding legitimate grounds to use it.
  • Request the transfer of your personal data to you or to a third party. Direm will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for or where the information was used to perform a contract with you.
  • Withdraw consent at any time where Direm relies on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, Direm may not be able to provide certain products or services to you.

If you wish to exercise any of these rights, please contact Direm using the contact information in this privacy policy.

You will not normally have to pay a fee to exercise your rights. However, Direm may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, Direm may refuse to comply with the request in these circumstances.

Direm may need to request information from you to confirm your identity and allow you to exercise your legal rights. Direm may also contact you to ask for further information in relation to your request to speed up the response.

Direm will try to comply with all legitimate requests within one month. However, if it will take longer because the request is particularly complex or a number of requests have been made, Direm will notify you.

Payments / Bank details
Where relevant for payments, refunds or invoicing, Direm uses the following bank details:
Country: United Kingdom (UK)
Account name: business account
Bank name: Tide Bank (Clearbank Limited)
Account number: 18790645
Sort code: 04-06-05
IBAN: GB89 CLRB 0406 0518 7906 45
BIC/SWIFT: CLRBGB22

Bank address:
4th Floor, The Featherstone Building, 66 City Road
London
EC1Y 2AL

Last updated: 25 November 2025