Wish List 0

Privacy Policy

Last updated: 5 October 2026

The British Shop ("we", "us", "our") sells carefully selected UK beauty, skincare and wellness products to customers in Sri Lanka through britishshop.lk. This policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices and rights you have. By using this website you agree to the practices described here.

1. Who we are

The data controller is The British Shop, Hudson House, Station Drive, Epsom, Surrey, KT19 8DL, United Kingdom.
Email: Contact Us
Telephone / WhatsApp:

We handle your personal data in line with the UK Data Protection Act 2018 and UK GDPR, and with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, where it applies to you.

2. Information we collect

  • Information you give us: your name, email address, telephone or WhatsApp number, delivery and billing address, and password when you create an account or place an order; the details you enter in our contact form, newsletter sign-up, wish list or compare list; and anything you tell us when you message us by email, WhatsApp or the chat on this site.
  • Order information: the products you buy, order totals, delivery details, payment method chosen, and your order history.
  • Information collected automatically: your IP address, browser and device type, pages viewed, referring page, language and currency choice, and the date and time of your visit, collected through cookies and similar technologies (see section 7).

We do not knowingly collect special categories of personal data (such as health information). Please do not include it in messages to us.

3. How we use your information

  • To process and deliver your orders, take payment, and send order updates.
  • To create and manage your account, and to reply to your questions and requests.
  • To send our newsletter and offers, only if you subscribe. You can unsubscribe at any time.
  • To keep the website secure, prevent fraud and spam, and meet our legal and accounting duties.
  • To understand how the website is used so we can improve our range, content and service.

4. Our legal basis for using your data

  • Contract: to deliver the goods you order.
  • Consent: for marketing emails and non-essential cookies. You may withdraw consent at any time.
  • Legitimate interests: to run, secure and improve the shop, where these interests are not outweighed by your rights.
  • Legal obligation: to keep records required by law.

5. Who we share your information with

We do not sell your personal data. We share it only as needed with:

  • Delivery and courier partners who deliver your order to you, and the suppliers who fulfil it.
  • Service providers that help us run the website: our hosting provider, Cloudflare (security and performance), Google Analytics (website statistics), the Elfsight chat widget (customer messaging), and our email provider.
  • Messaging apps. If you contact us through WhatsApp, WhatsApp's own privacy policy applies to that conversation.
  • Authorities and advisers when the law requires it, or to protect our rights.

Our team and some service providers are in the United Kingdom, and some are in other countries, including Sri Lanka and the United States. Where your data is sent abroad, we take steps to make sure it is still protected.

6. Payments

This website does not store your card number or card security code. Payment is made at checkout. Card payments are handled by the payment provider on its own secure page, under its own privacy policy.

7. Cookies

Cookies are small text files stored on your device. We use:

  • Essential cookies to keep you signed in, remember your cart, and remember your language and currency.
  • Analytics cookies (Google Analytics) to count visits and see which pages are popular. These do not identify you by name.
  • Third-party cookies that may be set by the chat widget and by embedded content.

You can block or delete cookies in your browser settings. If you do, some parts of the website, such as the cart and checkout, may stop working. You can also opt out of Google Analytics with Google's browser add-on.

8. How long we keep your data

We keep your information only for as long as needed for the purposes above. Order and invoice records are kept for up to six years to meet UK accounting and tax rules. Account details are kept until you ask us to close your account. Newsletter details are kept until you unsubscribe. After that we delete or anonymise the data.

9. How we protect your data

We use reasonable technical and organisational measures to protect your data, including encrypted (HTTPS) connections, access controls, and regular backups. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. Please keep your password private.

10. Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete your data, or restrict how we use it;
  • object to our use of your data, including for marketing;
  • withdraw your consent at any time; and
  • ask for your data in a portable format.

To use any of these rights, email Contact Us. We may need to confirm your identity first, and we will reply within one month. If you are not satisfied, you may complain to the Information Commissioner's Office (ICO) in the United Kingdom, or to the Data Protection Authority of Sri Lanka.

11. Marketing emails

If you subscribe to our newsletter, we will email you news and offers. You can unsubscribe at any time using the link in any email, or by writing to us.

12. Children

Our website is for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, please contact us and we will delete it.

13. Links to other websites

Our website may link to other sites, such as our social media pages. We are not responsible for their content or privacy practices, so please read their policies.

14. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date above. Please check back regularly.

15. Contact us

Questions about this policy or your data? Contact The British Shop at Contact Us, call or WhatsApp , or write to Hudson House, Station Drive, Epsom, Surrey, KT19 8DL, United Kingdom.