Effective Date: 01/03/2026

1. Who We Are

Alfa Theory (“we”, “us”, “our”) is a cosmetics brand specialising in premium hair and beauty products.

The data controller responsible for your personal data is:

Company Name: G&A Cosmetics Ltd
Registered Address: 556 lordship lane N225BY
Email: info@alfatheory.com

We are committed to protecting your personal data and respecting your privacy in accordance with the UK GDPR, EU GDPR, and the Data Protection Act 2018.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  1. Identity Data
  2. Contact Data
    • Email address
    • Billing address
    • Delivery address
    • Telephone number
  3. Financial Data
    • Payment details (processed securely via third-party payment providers – we do not store full card details)
  4. Transaction Data
    • Details of products purchased
    • Order history
    • Payment confirmations
  5. Technical Data
    • IP address
    • Browser type and version
    • Time zone setting
    • Operating system
    • Website usage data via cookies
  6. Marketing & Communications Data
    • Preferences in receiving marketing from us
    • Responses to campaigns

3. How We Use Your Personal Data

We use your data for the following lawful purposes:

  • To process and fulfil orders
  • To deliver products
  • To manage payments and prevent fraud
  • To respond to customer service enquiries
  • To improve our website and customer experience
  • To send marketing communications (only if you opt in)
  • To comply with legal and regulatory obligations

We only process your data where we have a lawful basis, including:

  • Contractual necessity
  • Legal compliance
  • Legitimate interest
  • Consent (for marketing)

4. Marketing Communications

You will only receive marketing communications if:

  • You have requested information from us, or
  • You have purchased from us and have not opted out, or
  • You have explicitly subscribed.

You may unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.

5. Sharing Your Data

We may share your data with:

  • Payment processors (e.g. Stripe, PayPal)
  • Shipping and courier companies
  • Website hosting providers
  • IT and system administration services
  • Professional advisers (legal, accounting)

All third parties are required to respect the security of your personal data and treat it in accordance with the law.

We do not sell or rent your personal data.

6. International Transfers

If we transfer your data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses
  • Adequacy decisions
  • Approved certification mechanisms

7. Data Retention

We retain personal data only as long as necessary to:

  • Fulfil the purposes we collected it for
  • Comply with legal, tax, and accounting obligations

Typically, order data is retained for 6 years for accounting compliance.

8. Your Legal Rights

Under data protection law, you have the right to:

  • Request access to your personal data
  • Request correction
  • Request erasure
  • Object to processing
  • Request restriction
  • Request data portability
  • Withdraw consent (where applicable)

To exercise any of these rights, please contact us at [Insert Email].

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Secure servers
  • SSL encryption
  • Restricted access to authorised personnel only

10. Cookies

Our website uses cookies to improve functionality and analyse website traffic.

You may control or disable cookies through your browser settings.

A separate Cookie Policy may be provided.

11. Children’s Privacy

Our products are not intended for children under 16. We do not knowingly collect personal data from children.

If we become aware that we have collected such data, we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

G&A Cosmetics Ltd
556 lordship lane
N22 5BY
London