Privacy Policy

1. Who We Are

Tribal Āfer (“we”, “us”, “our”) is a UK-based luxury skincare brand. We are the data controller for personal data collected through this website. For any privacy enquiries, please contact us at hello@tribal-afer.com.

2. What Data We Collect

• Name, email address, and delivery address when you place an order
• Email address if you sign up to our newsletter
• Payment information (processed securely by Square; we do not store card details)
• Browsing and usage data via cookies (see Section 6)
• Any correspondence you send us

3. How We Use Your Data

• To process and fulfil your orders
• To send order confirmations and shipping updates
• To send marketing emails if you have opted in (you may unsubscribe at any time)
• To improve our website and product range
• To comply with our legal obligations

4. Legal Basis for Processing

We process your data under the following lawful bases (UK GDPR Article 6):

• Contract — to fulfil orders you have placed
• Consent — for marketing emails and non-essential cookies
• Legitimate interests — to improve our services and prevent fraud
• Legal obligation — to comply with applicable law

5. Data Sharing

We do not sell your personal data. We share it only with trusted third parties who help us operate our business (e.g. Square for payment processing, Royal Mail or courier services for delivery). All processors are contractually bound to handle your data securely and only for the purposes we specify.

6. Cookies

We use essential cookies to keep the site functioning and, with your consent, analytics cookies to understand how visitors use our site. You can manage cookie preferences via the banner shown on your first visit or by clearing your browser data. For full details see our GDPR Notice.

7. Data Retention

We retain order data for 7 years to comply with HMRC requirements. Newsletter subscriber data is held until you unsubscribe. You may request deletion at any time (see Section 8).

8. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email hello@tribal-afer.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Changes to This Policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website after changes are posted constitutes acceptance of the updated policy.