1.1 The website under the domain name www.ecoya.co.uk (the Website) is operated by Macden Beauty Ltd (We). We are responsible for the processing of your personal data and we are the Data Controller for all such information.

1.2 We are registered with the Information Commissioner. Our registration number is ZA785180.

1.3 We have developed this Privacy Policy so that you may feel confident about the privacy and security of your personal data. This Privacy Policy (together with the terms of use of the Website and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us, the purpose of our collection of it and how we protect the information.

1.4 Countries in the European Economic Area (EEA) are required to have a similar standard of protection of personal data. This is not always the case outside that area.



2.1 As Data Controller, we take all necessary steps to comply with the Data Protection Act 1998 (as amended, restated or re-enacted from time to time), GDPR and its relevant subordinate legislation when handling any personal information.

2.2 When you supply any personal information to us we will meet our legal obligations to you in the way that we deal with that information.

2.3 In accordance with the Data Protection Act 1998 and GDPR we are required to collect the information fairly and to let you know how we will use it and whether we will pass the information on to anyone else.

2.4 We will take reasonable precautions to safeguard your personal data against loss and unauthorised disclosure or access.

2.5 Personal data means information that identifies you or could be used to identify you, such as your name and contact details. It may also include information about how you use our website.



3.1 We may collect and process the following personal information about you, including:

3.1.1 when you register and log in;

3.1.2 when you respond to requests to submit personal information about yourself;

3.1.3 if you contact us, we may keep a record of that correspondence.

3.2 We may also keep a record of those parts of the Website that you use most often to enable us to monitor, support, improve and develop our service and to know which parts are of the most interest to you.

3.3 We will use the personal information supplied by you to: 

3.3.1 to deliver to you products, services and information which you have requested;

3.3.2 to ensure that content from the Website is presented in the most effective manner for you and for your computer;

3.3.3 to carry out our obligations arising from any contracts entered into between you and us;

3.3.4 to contact you for your views on our services and events and to notify you occasionally about important changes or developments to the Website or our services.

3.4 By using the Website you consent to our collection and use of this information.

3.5 The information you supply to us will be held on our computer systems in the United Kingdom.

3.6 You can at any time send an email to info@ecoya.co.uk if you decide that you no longer wish to receive particular information.



4.1 We take all reasonable care to prevent any unauthorised access to your personal data.

4.3 We will only supply your personally identifiable information to any third party:

4.3.1 in order to provide the service we offer you or where we have your consent to share the information; 

4.3.3 where we need to send the information to persons or organisations who work on our behalf to provide a product or services to you but such persons or organisations may only use this information in order to provide such product or service and not for any other purpose;

4.3.4 where we are required to forward the information in order to comply with a regulatory or legal process.



5.1 Should you wish to obtain a copy of the personal data we hold on you please write to Macden Beauty Ltd, 1 Victoria Court, Bank Square, Leeds, United Kingdom, LS27 9SE

5.2 As soon as we are satisfied as to your identity, we will send you within 30 working days a copy of all the data we hold concerning you.

5.3 If it transpires that the information held is inaccurate, we will make the necessary amendments and confirm to you that these have been made.

5.4 If at any time you wish to erase your personal data from our records please send your request to the address in 5.1 above.



6.1 The internet is not a secure medium; however, we take great care to ensure the security of the Website and of your personal information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage by keeping all script current and using various encryption methods to secure your data.

6.2 As a user of the Website, it is your responsibility to protect log-in details. You must treat these as confidential and must not share or disclose your log-in details to any other party.

6.3 We will retain your information to perform the contract or for as long as the law requires.



7.1 Our website store is hosted on Shopify. They provide us with the online e-commerce platform that allows us to sell our products and services to you.

7.2 Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

7.3 If you choose a direct payment gateway to complete your purchase, then Shopify stores your payment card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

7.4 All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. 

7.5 For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).



8.1 We may work with third parties to research certain usage and activities on the Website on our behalf. No personal information about you is shared, however in the course of conducting this research these third parties may place a unique “cookie” on your browser.

8.2 A cookie is a small file which is sent to your browser and stored on your computer’s hard disc and helps us understand and track your use of the Website and where we can improve the information and services provided. 

8.3 We use cookies solely to gather information on IP addresses, to analyse trends, administer the Website, track user’s movements on the Website and gather broad demographic information for aggregate use. IP addresses are not linked to other personally identifiable information and will not be used to deliver targeted marketing messages.

8.4 For information about blocking the use of cookies, please refer to the instructions/help screen on your internet browser. Please note that you may not be able to use or access certain parts of the Website or online services if you block the use of cookies.



9.1 This Privacy Policy extends only to the Website and therefore does not extend to your use of, provision of data to, and collection of data on any website not connected to us to which you may link by using the hypertext links * within the Website.

9.2 * Hypertext links are a means by which visitors can skip from one website to another or from one page to another within the same site.



We may edit or amend this Privacy Policy from time to time. It will be published on our website.



If you are unhappy in any way at all in the way we have handled your personal data, please contact us so we can put matters right.

Please contact us at info@ecoya.co.uk or write to us:


Data Protection Officer

Macden Beauty Ltd

1 Victoria Court

Bank Square


United Kingdom

LS27 9SE


If you remain dissatisfied, you have the right to contact the Information Commissioner’s Office (ICO).