Last Updated: 27 May 2026
This document outlines how your personal information is utilized and distributed when you navigate our site, buy Virtual Goods, reach out to us, or otherwise supply data via our platform. It also details vital information regarding your privacy entitlements. Should you submit data on behalf of another individual, you must notify them about how their data will be processed and direct them to this document.
Our platform is located at: https://www.spektraskins.com/.
The entity responsible for your data (Data Controller) is SPEKTRASKINS LIMITED. Our company registration number is 17232462, and our registered address is 6 Liddell Place, West Hampstead, London, NW6 2ET, United Kingdom. You can reach us via email at general@spektraskins.com. Unless stated otherwise, terms used here share the definitions found in our Terms and Conditions.
Individual Account Creation & Management. To establish an account, clients must supply their name, surname, phone, personal email address, and a password. This information is processed for setting up the account, managing it, and ensuring security. We maintain the right to check a customer's location using technical methods to ensure compliance and security. If this check shows inconsistencies or access from restricted countries, we may deny account creation or refuse to process orders. Users are allowed only one account and must not use VPNs while on the site. Legal Basis: Performance of a Contract.
Verification & Compliance. We might ask for documents like ID, payment proof, authorization to act on behalf of the customer, or alternative contact details to verify client information. Clients have 1 (one) business day to provide these documents or scans. If they fail to do so, their registration may be denied, or their Virtual Goods purchase might be canceled and refunded. Legal Basis: Legal Obligation and Legitimate Interest (fraud prevention).
System Usage Information & Analytics. We gather details on how our platform is accessed, known as Usage Data. This can encompass your IP address, browser specifics, pages visited, time and date of access, time spent on pages, and unique device identifiers. We use this to run and enhance our services, compile general statistics, and monitor for unauthorized access. Legal Basis: Legitimate Interest (improving our services and ensuring security).
Marketing & Advertising. If you opt-in, we will send you newsletters and promotional materials regarding our services. Legal Basis: Consent (which you can withdraw at any time).
Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device automatically if they are strictly necessary for the operation of this site. For all other types of cookies, we need your explicit permission.
We deploy the following cookie categories on our platform:
Necessary. Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
Preferences. Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
Statistics. Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
Marketing. Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
The cookies we use fall into two lifespan categories:
Session Cookies: These are temporary cookies that remain on your device only until you close your web browser.
Persistent Cookies: These remain on your device for a pre-defined period or until you manually delete them. For example, if you select “Remember Me” during login, a persistent cookie will keep you logged in for up to two weeks.
We also use cookies provided by trusted third parties. These are cookies set by a domain other than our Website (spektraskins.com). We typically use third-party cookies for our advertising and analytics efforts. For example, third-party analytics providers (such as Google Analytics) help us understand how you use the site so we can improve your experience, while third-party marketing cookies help us deliver relevant advertisements to you on other platforms. Please note that we do not control the exact deployment of these third-party cookies, and they are governed by the privacy policies of the respective third-party providers.
In addition to standard cookies, we use similar technologies to help manage our site and track engagement:
Pixel Tags & Web Beacons: Tiny graphics files with unique identifiers that enable us to recognize when someone has visited our Website or opened an email we sent them.
Local Storage: We may use HTML5 Local Storage to save data within your browser's local cache to improve site performance and remember your preferences.
You have the right to choose whether or not to accept non-essential cookies. You can change or withdraw your consent at any time in the Cookie Settings.
We only use data for its intended purpose unless we notify you of a new, unrelated purpose with a valid legal basis. We may process data without your knowledge or consent if legally required or permitted.
Service Providers: We may share data with IT hosts, KYC/fraud prevention services, and professional advisors (accountants, lawyers) who act on our behalf. We control and remain responsible for your data at all times.
Independent Controllers: If you give data to third parties directly, they act as independent controllers, and we are not liable for their processing. Please review their privacy notices.
Payment Processors: Card details are processed directly by third-party services complying with PCI-DSS standards; we do not collect or store this information. Transaction info is deleted after the order is completed.
Marketing: If selected on the Website, you will receive weekly newsletters and ads related to our services, which you can unsubscribe from at any time via the footer link in emails.
International Transfers: We may share personal data internally within Data Controller’s subsidiary, affiliated and partner companies or with third parties for purposes described in this Privacy Policy. Personal data collected within the European Economic Area (“EEA”) may, for example, be transferred to countries outside of the EEA for the purposes as described in this Privacy Policy. We utilize standard contractual clauses approved by the European Commission, adopt other means under European Union law (such as, where applicable, corporate binding rules), and obtain your consent to legitimize data transfers from the EEA to other countries.
Aggregated data: We create anonymous, aggregated data to spot trends and improve services, which we may share commercially without restriction.
Automated decision making (“ADM”) & AI: ADM is used when a decision is made solely on automated processing (including profiling) which produces legal effects or significantly affects an individual. We do not use ADM when a decision has a legal or similar significant effect on an individual unless (a) you provide us with your consent, (b) ADM is authorized by law or (c) ADM is necessary for the performance of or entering into a contract you have with us. We use ADM to recommend services to you, block or limit features when prohibited behaviour is detected, and prevent chargeback fraud. AI chatbots may handle support tasks with your consent, and AI may assist with chat suggestions or translation through trusted partners. Your data is safe and processed only to provide these services. You can request human assistance if preferred by contacting support.
Cross-device Tracking: We link your devices for a seamless experience and work with third parties using statistical modeling to track usage across devices for security, measuring campaigns, and targeted ads (with consent).
Corporate Changes & Legal Defense: Data may be transferred during mergers, acquisitions, bankruptcy, or dissolution. We may also disclose data to comply with laws, enforce terms, defend claims, protect safety, or address fraud.
Analytics data is kept in an identifiable state for up to 1 year.
Communication data used to improve service quality is stored for up to 1 month.
Other personal data is stored for the duration of the account’s existence plus 3 years.
Data may be kept longer if necessary to protect legitimate interests, handle legal disputes, or fulfill legal obligations.
The Website utilizes a 256-bit SSL encryption to ensure the security of Customer information and we continuously implement the latest software and security measures to minimize any potential vulnerabilities. Our server undergoes daily scans to guarantee its protection against unauthorized access and malicious activities. The server is housed in a secure facility to prevent unauthorized access. Although we make every effort to secure your information with appropriate technical and administrative measures, it is important to note that the internet is not completely secure, and no server can be guaranteed to be completely immune from security breaches. While we take extensive measures to ensure the security of your information, we cannot provide an absolute guarantee.
For residents of the EU or UK (as data subjects, whose personal information is collected, stored and processed), under the GDPR, UK GDPR, and Data Protection Act 2018, you have specific rights:
You have the right to obtain confirmation if your personal information is being processed by us. If that is the case, you can access your personal information and the following information:
the purposes of the processing;
the categories of personal information;
to whom the personal information have been or will be disclosed;
the envisaged period for which the personal information will be stored, or the criteria used to determine that period.
If you would like to have a copy of your personal information from us, we will provide it only in case: (1) you will prove your identity, (2) it will not adversely affect the rights and freedoms of others.
You have the right to demand that we erase your personal information, and we shall erase it without undue delay where one of the following grounds applies:
this personal information is no longer necessary in relation to the purposes for which they were processed;
you withdraw consent if the processing was based on your consent, and where there is no other legal ground for the processing;
you object to the processing and there are no overriding legitimate grounds;
your personal information has been unlawfully processed;
your personal information has to be erased for compliance with a legal obligation.
You have the right to receive your personal information which you provided us with in a structured, commonly used and machine-readable format and have the right to transmit those data to another company, where: (a) the processing is based on your consent or on a contract; and (b) the processing is carried out by automated means.
You have the right to withdraw your consent for processing of your personal information at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal information infringes GDPR. For the UK, please contact the Information Commissioner’s Office.
You can exercise the above rights by contacting our support team via the email address indicated above.
We regularly review and reserve the right to modify this Privacy policy to comply with laws. Changes and clarifications take effect immediately upon their publication on our Website. Please review this document from time to time to stay updated.
