Privacy policy

Last updated: 10 November 2026.

This policy explains what personal data we collect through this website, why we hold it, and the rights you have. It is written for visitors and prospective clients in the United Kingdom and reflects the UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

Vervy Lin Cosmetics, Dubai, United Arab Emirates, is the data controller for information submitted through this site. You can reach us at info@vervylincosmetics.com.

What we collect

• Enquiry data — name, email address, company, website, telephone number, market, project stage, product category, indicative volume, launch timing and the content of your message.
• Technical data — the server records standard request information such as IP address and browser type for security and diagnostic purposes.

Why we hold it, and on what basis

• To respond to your enquiry and take steps towards a contract — lawful basis: legitimate interests and, where a contract follows, performance of that contract.
• To keep a record of enquiries and project correspondence — lawful basis: legitimate interests in running the business.
• To meet legal, tax and accounting obligations — lawful basis: legal obligation.

We do not sell your data, and we do not add you to a marketing list because you sent an enquiry.

How long we keep it

Enquiries that do not become projects are deleted after 24 months. Project records, including technical documentation, are held for the period required by the relevant regulation — for cosmetic product information files this is ten years after the last batch is placed on the market.

Who we share it with

Only where necessary: our website hosting provider, our email provider, and — for a live project — the assessors, laboratories, manufacturers and Responsible Person organisations working on it. Where a supplier is outside the UK, transfers rely on appropriate safeguards such as the UK International Data Transfer Addendum or an adequacy decision.

Cookies

This site sets no advertising or analytics cookies and loads no third-party tracking scripts. Fonts are served from this domain rather than an external font service. If analytics is introduced, this policy will be updated and consent requested before any non-essential cookie is set.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. Write to info@vervylincosmetics.com and we will respond within one month.

If you are dissatisfied, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If this policy changes materially, the date at the top of the page will change and, where appropriate, we will tell clients directly.