Privacy Policy
PRIVACY NOTICE AND COOKIES POLICY
OVERMUSK LTD TRADING AS OVERMUSK
Last updated: 22 June 2026
1. INTRODUCTION
This Privacy Notice and Cookies Policy explains how OVERMUSK LTD, trading as OverMusk, collects, uses, stores and protects your personal information when you visit our website, place an order, create an account, contact us, subscribe to marketing communications or interact with our online store.
This policy applies to customers, prospective customers and website visitors in the United Kingdom.
In this policy, “personal information” means information that identifies you or can reasonably be linked to you.
2. WHO WE ARE
The data controller is:
OVERMUSK LTD
Company number: 17018098
Registered office: 24-26 Arcadia Avenue, Fin009, London, United Kingdom, N3 2JU
Trading as: OverMusk
For privacy questions, data protection requests or complaints, you can contact us at:
Email: contact@overmusk.com
3. PERSONAL INFORMATION WE COLLECT
We may collect and process the following categories of personal information.
3.1 Order and account information
This may include:
- name and surname;
- billing address;
- delivery address;
- email address;
- telephone number;
- order number;
- products purchased;
- payment status;
- returns, refunds and complaint history;
- customer account login details, if customer accounts are enabled.
3.2 Payment information
When you pay for an order, your payment is processed by our payment service providers. We do not store full payment card details on our own systems.
Depending on the payment options enabled on our website, payment providers and payment methods may include:
- Shopify Payments;
- Stripe;
- PayPal;
- Apple Pay;
- Google Pay;
- banks, card networks and fraud-prevention tools connected to those services.
We may receive limited payment-related information, such as transaction ID, payment status, payment method type, refund status, fraud-screening information and, where available, the last four digits of a card.
3.3 Delivery information
We share delivery details with couriers and fulfilment partners so they can deliver your order.
Couriers and delivery partners may include:
- Royal Mail;
- DPD;
- DHL;
- UPS;
- Evri;
- InPost UK;
- other delivery partners used for your selected delivery method.
3.4 Communication information
If you contact us by email, website form, phone, chat, social media or another channel, we may process:
- your contact details;
- message content;
- order references;
- complaint or support history;
- attachments or images you choose to send.
Please do not send us sensitive personal information, such as health information, unless it is necessary for your request.
3.5 Marketing information
If you subscribe to our newsletter or agree to marketing communications, we may process:
- email address;
- name, if provided;
- marketing preferences;
- consent records;
- unsubscribe records;
- email engagement information, such as opens and clicks, where permitted.
3.6 Technical and device information
When you visit our website, we may collect:
- IP address;
- browser type and version;
- device type;
- operating system;
- approximate location derived from IP address;
- pages visited;
- referral source;
- session information;
- cookie and consent preferences;
- security and fraud-prevention logs.
3.7 Analytics, advertising and website-use information
Depending on the tools enabled on our website and your cookie choices, we may collect information through analytics, advertising and similar technologies, including:
- Google Analytics;
- Google Ads;
- Google Tag Manager;
- Meta Pixel / Facebook Pixel;
- TikTok Pixel;
- Pinterest Tag;
- Shopify analytics;
- other similar tools used to operate, measure and improve our website and advertising.
4. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
- directly from you when you place an order, create an account, subscribe to marketing, contact us or use our website;
- automatically when you browse our website, depending on your cookie and privacy choices;
- from payment providers, fraud-prevention providers, couriers, e-commerce platforms, marketing platforms and analytics providers where this is necessary to provide our services;
- from social media platforms where you interact with our pages, advertisements or messages.
5. HOW AND WHY WE USE YOUR PERSONAL INFORMATION
We only use personal information where we have a lawful basis under UK data protection law.
We may use your personal information for the following purposes:
5.1 Processing and delivering orders
We use your name, contact details, delivery address, billing address, order details and payment status to process your order, deliver products and provide order updates.
Lawful basis: performance of a contract.
5.2 Taking payment and issuing refunds
We use payment status, transaction ID, order information and refund information to process payments, confirm transactions, prevent payment fraud and issue refunds.
Lawful basis: performance of a contract, legal obligation and our legitimate interests in operating a secure and reliable online store.
5.3 Customer service and order support
We use your contact details, messages and order history to respond to questions, resolve problems and provide support.
Lawful basis: performance of a contract and our legitimate interests in providing customer service.
5.4 Returns, refunds and complaints
We use order details, correspondence, refund information and complaint history to process returns, refunds, exchanges and complaints.
Lawful basis: performance of a contract, legal obligation and our legitimate interests in managing customer issues and protecting our business.
5.5 Accounting, tax and business records
We use order records, invoices, payment records and refund records to meet accounting, tax and legal record-keeping obligations.
Lawful basis: legal obligation.
5.6 Fraud prevention and website security
We use IP addresses, device data, payment risk signals, order information and security logs to detect fraud, protect our website, prevent misuse and maintain secure services.
Lawful basis: our legitimate interests in protecting our customers, website and business, and legal obligation where applicable.
5.7 Newsletter and marketing communications
We use your email address, name, marketing preferences and consent records to send marketing communications where you have subscribed or where marketing is legally permitted.
Lawful basis: consent, or legitimate interests where the UK “soft opt-in” rules apply to existing customers.
5.8 Similar-product marketing to existing customers
Where permitted by law, we may send marketing about similar products to customers who have bought from us or negotiated to buy from us, provided they were given a clear opportunity to opt out when we collected their details and in every marketing message.
Lawful basis: legitimate interests, subject to the UK Privacy and Electronic Communications Regulations.
5.9 Analytics and website improvement
We use analytics information to understand how visitors use our website, improve our product pages, improve checkout performance and measure website performance.
Lawful basis: consent for non-essential analytics technologies, unless a legal exception applies.
5.10 Personalised advertising and retargeting
Where you consent, we may use advertising cookies, pixels and similar technologies to measure advertising performance, build audiences, show relevant advertising and retarget visitors who viewed products or interacted with our website.
Lawful basis: consent.
5.11 Legal requests and compliance
We may use personal information to comply with legal requests, court orders, regulatory requirements or obligations owed to public authorities.
Lawful basis: legal obligation.
5.12 Legal claims
We may use order records, correspondence, transaction details and logs to establish, exercise or defend legal claims.
Lawful basis: legitimate interests.
6. OUR LEGITIMATE INTERESTS
Where we rely on legitimate interests, those interests may include:
- running and improving our online store;
- providing customer service;
- preventing fraud and misuse;
- protecting website and payment security;
- keeping business records;
- understanding customer needs;
- managing complaints and disputes;
- sending permitted marketing to existing customers;
- establishing, exercising or defending legal claims.
We only rely on legitimate interests where we consider that our interests are not overridden by your rights, freedoms or interests.
7. WHEN YOU MUST PROVIDE PERSONAL INFORMATION
You are not required to provide personal information just to browse our website.
However, if you want to place an order, we need certain information such as your name, delivery address, email address, telephone number and payment details. Without this information, we may not be able to process your order, deliver products, provide updates or respond to your request.
8. NEWSLETTER AND MARKETING COMMUNICATIONS
You may subscribe to our newsletter by providing your email address and giving consent.
We may use newsletter data to send information about:
- new products;
- offers and promotions;
- beauty, fragrance, skincare or product content;
- brand updates;
- abandoned basket reminders, where enabled and legally permitted.
You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us at contact@overmusk.com.
Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
We may also send non-marketing service messages, such as order confirmations, shipping updates, payment updates, return updates, refund updates, customer service replies, account notices and security notices. These messages are not newsletter marketing messages.
9. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies. These may include cookies, pixels, tags, scripts, web storage, tracking pixels, device identifiers and similar technologies that store or access information on your device.
We use these technologies to:
- operate the website;
- keep items in your basket;
- support checkout and payment;
- remember cookie choices;
- secure the website;
- detect fraud;
- understand how visitors use the website;
- improve the user experience;
- measure marketing campaigns;
- show relevant advertising, where you consent.
9.1 Strictly necessary cookies
Strictly necessary cookies are required for the website to work. They may be used for basket functionality, checkout, payment security, login, fraud prevention, load balancing and remembering your privacy choices.
These cookies do not usually require consent because they are necessary to provide the service you request.
9.2 Functional cookies
Functional cookies help remember choices such as preferences, region, language or display settings.
Where required by law, we will ask for your consent before using non-essential functional cookies.
9.3 Analytics cookies
Analytics cookies help us understand how visitors use our website, which pages are visited, how customers move through the site and how we can improve the shopping experience.
Analytics tools may include Google Analytics and Shopify analytics.
We ask for your consent before using non-essential analytics cookies and similar technologies.
9.4 Advertising and retargeting technologies
Advertising technologies help us measure advertising performance, understand conversions, build audiences and show relevant ads.
Advertising tools may include:
- Google Ads;
- Google Tag Manager;
- Meta Pixel / Facebook Pixel;
- TikTok Pixel;
- Pinterest Tag;
- similar advertising or conversion-tracking technologies.
We only use advertising, retargeting and conversion-tracking technologies where you have given consent through our cookie banner or preference centre.
9.5 Social media and third-party content
Our website may include links to social media platforms or third-party content. If you interact with those features, the relevant third party may collect information according to its own privacy and cookie policies.
9.6 Managing cookies
When you first visit our website, you will be shown a cookie banner or preference centre. You can accept, reject or manage non-essential cookies.
You can change your cookie choices at any time by using the “Cookie Settings” link or button on our website.
You can also block cookies in your browser settings. Some parts of the website may not work properly if strictly necessary cookies are disabled.
10. WHO WE SHARE PERSONAL INFORMATION WITH
We may share personal information with trusted third parties where necessary for the purposes described in this policy.
These may include:
- e-commerce platform providers, including Shopify;
- website hosting and infrastructure providers;
- payment service providers, including Shopify Payments, Stripe, PayPal, Apple Pay and Google Pay;
- banks, card networks and fraud-prevention providers;
- couriers and fulfilment partners, including Royal Mail, DPD, DHL, UPS, Evri and InPost UK;
- email and communication service providers;
- newsletter and marketing automation providers;
- analytics providers;
- advertising platforms, including Google, Meta, TikTok and Pinterest where applicable;
- customer support or chat providers;
- review platforms;
- IT, security and maintenance providers;
- accountants, lawyers, insurers and professional advisers;
- HMRC, regulators, courts, law enforcement or public authorities where legally required.
Where a supplier processes personal information on our behalf, we require them to protect it and only process it according to our instructions.
Some third parties, such as payment providers, couriers, advertising platforms and social media platforms, may also process personal information as independent controllers under their own privacy policies.
We do not sell personal information.
11. INTERNATIONAL TRANSFERS
Some of our suppliers may process personal information outside the United Kingdom. This may happen where we use international technology providers, cloud hosting, analytics tools, payment providers, advertising platforms, customer support systems or e-commerce services.
Where personal information is transferred outside the UK, we rely on appropriate safeguards or transfer mechanisms where required by law. These may include:
- UK adequacy regulations;
- the UK Extension to the EU-US Data Privacy Framework, where applicable;
- the UK International Data Transfer Agreement;
- the UK Addendum to the EU Standard Contractual Clauses;
- another lawful transfer mechanism under UK data protection law.
12. HOW LONG WE KEEP PERSONAL INFORMATION
We keep personal information only for as long as necessary for the purposes described in this policy.
We generally keep information for the following periods:
- order and transaction records: generally up to 6 years after the end of the relevant financial year, or longer if required for tax, accounting, disputes or legal claims;
- invoices and accounting records: generally 6 years, subject to UK tax and accounting requirements;
- customer account data: until the account is closed, then only as long as required for legal, tax, fraud-prevention, complaint or claims purposes;
- customer service messages: usually up to 3 years, or up to 6 years where relevant to complaints, refunds, disputes or legal claims;
- newsletter data: until you unsubscribe or withdraw consent;
- marketing suppression records: as long as needed to ensure we do not contact you again after you opt out;
- cookie consent records: for the period necessary to evidence and manage your choices;
- security logs: usually up to 12 months, unless needed for investigation, fraud prevention, legal claims or security reasons;
- analytics data: according to the settings of the relevant analytics tool and our cookie configuration.
We may delete, anonymise or aggregate personal information when we no longer need to identify you.
13. HOW WE PROTECT PERSONAL INFORMATION
We use appropriate technical and organisational measures to protect personal information, including:
- SSL/TLS encryption for website traffic;
- access controls;
- password and account protection;
- limited staff access on a need-to-know basis;
- secure hosting and e-commerce platform providers;
- payment processing through specialist payment providers;
- monitoring for suspicious activity;
- backups and recovery measures;
- staff confidentiality obligations;
- supplier checks and contractual protections where appropriate;
- regular review of tools and suppliers.
No online service is completely risk-free, but we take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
14. YOUR RIGHTS
Under UK data protection law, you have rights over your personal information.
You may have the right to:
- access your personal information;
- receive a copy of your personal information;
- correct inaccurate or incomplete information;
- ask us to delete your personal information;
- restrict how we use your personal information;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- withdraw consent at any time where processing is based on consent;
- ask for data portability where applicable;
- challenge certain automated decisions where applicable;
- make a data protection complaint to us;
- complain to the Information Commissioner’s Office.
To exercise your rights, contact us at:
contact@overmusk.com
We may need to verify your identity before responding to your request.
We aim to respond to data protection rights requests within one month, unless the request is complex or the law allows an extension.
15. DATA PROTECTION COMPLAINTS
If you are unhappy about how we use your personal information, please contact us first so we can investigate.
You can complain to us by:
Email: contact@overmusk.com
Post:
OVERMUSK LTD
24-26 Arcadia Avenue, Fin009
London
United Kingdom
N3 2JU
We will:
- acknowledge your complaint within 30 days of receiving it;
- investigate it without undue delay;
- keep you informed where appropriate;
- tell you the outcome without undue delay.
You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: www.ico.org.uk
16. AUTOMATED DECISION-MAKING AND PROFILING
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
We may use automated tools for:
- fraud detection;
- payment risk checks;
- website security;
- analytics, where permitted;
- advertising audience creation and campaign measurement, where you consent.
Payment providers and fraud-prevention providers may carry out automated checks to help prevent fraud, unauthorised payments or misuse of payment methods.
If you believe an automated decision has affected you unfairly, contact us at contact@overmusk.com and we will review the matter where we are able to do so.
17. CHILDREN
Our website and products are intended for adults and are not directed at children under 13.
We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps.
18. THIRD-PARTY WEBSITES AND PLATFORMS
Our website may contain links to third-party websites, payment providers, courier tracking pages, social media pages or embedded content.
Those third parties have their own privacy policies and cookie practices. We are not responsible for how they use personal information when you leave our website or interact directly with their services.
19. CHANGES TO THIS POLICY
We may update this Privacy Notice and Cookies Policy from time to time.
When we make material changes, we will update the date at the top of this policy and, where appropriate, notify users or request renewed consent.
20. CONTACT US
For privacy questions, data protection requests, cookie questions or complaints, contact us at:
OVERMUSK LTD
24-26 Arcadia Avenue, Fin009
London
United Kingdom
N3 2JU
Email: contact@overmusk.com