Privacy policy

Please read these terms and conditions carefully before using this site.

We are Derma Organics by CFBP Limited, a company registered in England and Wales. Our company registration number is 10765234 and our registered office is at 47 Lord Kensington House, 5 Radnor Terrace, London W14 8BU (“we”).

You can contact us by writing to us at our registered office above, or emailing us at

We are committed to protecting and respecting your privacy.

This policy (together with our Terms and Conditions and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting you are accepting and consenting to the practices described in this policy.

In the light of the General Data Protection Regulation (GDPR), we are the data controller of your personal data.


We will collect and process the following data about you:

  • Information you give us directly. This is information about you that you give us by filling in forms on our site (our site) or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our site, search for a product, place an order on our site, participate in discussion boards or other social media functions on our site, enter a competition, promotion or survey, and when you report a problem with our site. The information you give us may include your name, address, e-mail address and phone number, financial and credit card information, or other personal data that you choose to provide to us.
  • Information that is acquired indirectly. With regard to each of your visits to our site we will automatically collect the following information: technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions and operating system and platform; information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number.


We process your personal data for the following purposes:

  • To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
  • To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
  • To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you in case you have previously agreed to receive advertising material. If you are an existing customer, we might also contact you by electronic means (e-mail or SMS) with information about goods and services similar to those, which were the subject of a previous sale or negotiations of a sale to you. If you do not want us to use your data in this way, please tick the relevant box situated on the form on which we collect your data.
  • To notify you about changes to our service;
  • To ensure that content from our site is presented in the most effective manner for you and for your computer;
  • To administer and improve our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  • To allow you to participate in interactive features of our service, when you choose to do so;
  • As part of our efforts to keep our site safe and secure;
  • To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
  • To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.


We process your personal data based on one of the following grounds (GDPR Art. 6):

  • your provided consent;
  • necessity to carry out the concluded agreement (carry out obligations once you purchase from us);
  • legal requirements imposed on us;
  • necessity to ensure yours or ours best interests;
  • any other applicable ground, established in GDPR Art. 6.

When the processing of you personal data takes place based on your consent, you always have the right to withdraw the given consent.


We might disclose your personal information:

  • In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets;
  • If we or substantially all of our assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets;
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use or terms and conditions of supply and other agreements; or to protect the rights, property, or safety of Derma Organics by CFBP Ltd, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

We might need to share your personal information with:

  • Prospective purchaser of our business or assets or part of our business or assets;
  • Any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006;
  • Payment services providers;
  • State institutions and bodies;
  • Selected third parties including (other personal data processors): business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you; advertisers and advertising networks that require the data to select and serve relevant adverts to you and others (only in cases when you have agreed in prior to receive the marketing material).

The following third parties might be disclosed with your personal information:

  • Autoketing;
  • Shopify;
  • Flexify AG;
  • Pandectes;
  • Mintt Studio;
  • Mailchimp;
  • Google;
  • Facebook;
  • Webify Technology;
  • SpurIT;
  • Privy;
  • ShopSync;
  • com;
  • StoreAutomator LCC.


We may transfer the data collected from you to third party processors that are located in countries outside of European Economic Area (EEA). We will comply with GDPR requirements when carrying out any of such transfers. Please note, that countries, that are outside of EEA, might not have the same level of data protection as in the EEA, however our personal data processing, storage and handling will continue to be governed by this Privacy Policy.

By using our Website, you consent, that your personal data might be transferred outside of EEA, where necessary.


By using our website, you (the visitor) agree to allow third parties to process your IP address, in order to determine your location for the purpose of currency conversion. You also agree to have that currency stored in a session cookie in your browser (a temporary cookie which gets automatically removed when you close your browser). We do this in order for the selected currency to remain selected and consistent when browsing our website so that the prices can convert to your local currency. We also engage with third parties to process the payments.

We currently engage with the following third party payment providers:

  • Apple Pay;
  • Google Pay;
  • PayPal;
  • Shopify Secure.

The list of third party payment providers might change at any given moment. In case of using any of these platforms to execute the payment for the products, please get familiar with their applicable terms and conditions.


All information you provide to us is stored on our secure Shopify servers, located in the United States.

Any payment transactions that we accept directly will be encrypted using SSL technology. Payment transactions using third party payment providers will be subject to those providers’ terms and conditions. Where we have given you (or where you have chosen) a password, which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

We will do our best to protect your personal data, though, we cannot guarantee the security of your data transmitted to our site via Internet; any transmission is at your own risk.


When you place an order with us, we will maintain your personal information for our records as long as we will be involved in a commercial relationship. After the commercial relationship is over, the personal information will be stored for no longer than 3 years, a longer retention period is established in local legislation. In any case, the personal information will not be kept longer, than it is required for the processing purposes.


  • Right to be informed – you have the right to be informed about your personal data processing activities;
  • Right to access – you have the right to request information about the personal data we hold on you at any time;
  • Right to data portability – whenever we processes your personal data, you have the right to get a copy of your data transferred to you or to another party (this only includes the personal data you have submitted to us);
  • Right to rectification – you have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed;
  • Right to data erasure – you have the right to erase any personal data processed by us at any time, except where it is necessary to continue processing the personal data (e.g. you have placed an order that has not been shipped yet; you have an unsettled debt with us; etc.);
  • Right to object to processing – you have the right to object to processing of your personal data. We will not continue to process the personal data unless we can demonstrate legitimate grounds for the process which overrides your interest and rights or due to legal claims;
  • Right to object automated decision making and profiling – you have the right to object to automated decision making and profiling. You have the right to request a manual review of your information.

You can exercise your rights at any time by reaching us at


Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.


Your right of access can be exercised in accordance with the GDPR. Any access request will be free of charge.


Our website uses cookies to distinguish you from other users of our website and to facilitate the smooth interaction on the Website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookie policy below.


Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

We use the following cookies:

  • Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
  • Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
  • Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  • Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose. Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
  • You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.


In case of having any inquiries, complaints or wanting to use any of the data subject rights attributed to you, please reach us via


Any changes we make to our privacy and cookies policy in the future will be posted on this page.