Important:
This policy describes our current use of cookies and similar
technologies. The live preference tool is the most current record of
the optional categories available on your device.
01
Who we are and when this policy applies
PrecisionDermal is a trading name of
Astflick Group Ltd (company number 05950580).
In this policy, “PrecisionDermal”, “we”, “us” and “our” refer to
Astflick Group Ltd.
This policy applies when you visit
precisiondermal.co.uk, use our online store, sign
in to an account, contact us through the website or interact with an
embedded service on the site.
Although our sales are business-to-business, privacy and electronic
communications rules can still apply to individual website visitors
and representatives of our business customers.
Registered address
Unit 7, Latham Road Business Park
Latham Road, Huntingdon
Cambridgeshire, PE29 6YE
United Kingdom
02
What cookies and similar technologies are
A cookie is a small text file stored on your browser or device. We
also use, or may allow our service providers to use, technologies
that perform a similar storage or access function.
Browser cookiesLocal and session storagePixels and web beaconsScripts, tags and SDKsDevice or browser identifiersLink decoration and attribution tags
These technologies can be set directly by us or Shopify
(“first-party”), or by a provider whose service appears on our site
(“third-party”). Some last only for the browser session; others
remain until their expiry date or until you delete them.
03
The categories we use
01
Strictly necessary
Required for security, fraud prevention, network management,
page navigation, accessibility, account sign-in, cart, checkout,
payments, delivery settings and recording your privacy choices.
Always active
02
Preferences and functionality
Remember choices such as language, location, currency, display
settings and other features that make the store more convenient
or personalised.
Your choice where required
03
Analytics and performance
Help us understand visits, navigation, errors, traffic sources
and store performance so we can improve the site and measure our
services.
Your choice where required
04
Marketing and advertising
Measure campaigns, attribute sales, limit repeated adverts and,
where enabled, create or use audiences for relevant advertising
across websites or services.
Consent required in the UK
04
Technologies currently used on our store
The examples below are representative rather than exhaustive.
Cookie names, providers and lifetimes can change when Shopify or an
installed app updates its service. The live preference tool shows
the optional categories currently available to you.
Provider / examples
Main purpose
Category
Typical duration
Shopify cart,
cart_currency,
localization
Maintain the basket, selected market, currency and
storefront operation.
Strictly necessary / preferences
Session to approximately one year, depending on function
Shopify security and accounts secure_customer_sig,
_shopify_essential
Authentication, security, fraud prevention and protected
store functions.
Store analytics, session measurement, landing pages and
referral attribution.
Analytics
Session to approximately one year
Payments and checkout providers
Process payments, prevent fraud, maintain checkout and meet
security obligations.
Strictly necessary
Session or provider-defined security period
Kaching Cart / Pumper Bundles
Cart functions, offers, bundle selection, discount display
and checkout continuity.
Necessary or preferences, depending on the feature
Session or provider-defined period
Klaviyo
Email sign-up, campaign attribution, communications and,
where enabled, behavioural marketing.
Necessary for a requested form; otherwise analytics or
marketing
Session to provider-defined persistent period
Judge.me
Display and manage product or service reviews and help
prevent review abuse.
Functionality; analytics where enabled
Session or provider-defined period
Google, social-media or advertising pixels
Only where enabled
Measure campaigns, attribute conversions and provide
advertising or audience services.
Analytics / marketing
Provider-defined; commonly days to months
A technology can only be treated as strictly necessary when it is
genuinely required to provide a service you requested or to transmit
a communication. We do not classify a technology as necessary merely
because it is convenient for us.
05
Consent, choices and limited exceptions
Under the Privacy and Electronic Communications Regulations 2003
(“PECR”), we normally ask for your consent before storing or
accessing non-essential information on your device.
Consent must be a freely given, specific, informed and unambiguous
positive choice. Closing or ignoring a banner is not consent.
Strictly necessary technologies do not require consent. Following
changes introduced by the Data (Use and Access) Act 2025, certain
limited technologies used solely for statistical purposes or to
remember a display or functionality preference may also qualify for
a PECR exception if every statutory condition is met.
Where we rely on such an exception, we provide clear information and
an easy way to object or opt out.
What does not fall within those limited exceptions?
We continue to seek consent for advertising, profiling, cross-site
tracking and technologies used for multiple non-exempt purposes.
Refusing optional technologies will not prevent you from using the
core store, although some optional features may be less
personalised or may not work.
06
Shopify and other third parties
Our store is hosted by Shopify. Shopify provides the storefront,
customer accounts, cart, checkout, fraud prevention, analytics,
pixels and related ecommerce services.
We also use specialist providers for payments, hosting and security,
customer communications, reviews, analytics, shopping-cart
enhancements, bundles, customer support and marketing.
A third party may receive information such as your IP address, device
data, page activity, order attribution or an identifier when its
technology is permitted to run.
We require providers to handle personal data under appropriate
contractual and security obligations. Their own notices explain any
processing they carry out as an independent controller.
We periodically review our installed apps and pixels and update this
policy when our use materially changes.
07
How cookie data is handled under data-protection law
PECR determines whether storing or accessing information on a device
needs consent or falls within an exception. Where a cookie or similar
technology also involves personal data, the UK GDPR and Data
Protection Act 2018 apply separately.
Consent:
used for optional analytics, personalisation or marketing where
consent is required.
Legitimate interests:
may support proportionate security, fraud prevention, service
improvement or low-risk measurement where the law permits and your
rights do not override our interests.
Contract:
used where processing is necessary to provide a store function or
service you request.
Legal obligation:
used where records, security or disclosures are required by law.
Consent under PECR does not automatically provide a lawful basis for
every later use of personal data. We assess both rules.
More information about personal data, recipients, international
transfers and your rights appears in our
Privacy Policy.
08
How to control cookies
Use our preference centre
You can accept, refuse or change optional categories at any time. A
change applies from that point forward; it does not make earlier
lawful processing unlawful.
Refusing a category stops Shopify-managed services that correctly
honour Shopify consent signals from using that category going
forward.
Browser and device controls
Most browsers let you view, block or delete cookies. Blocking all
cookies may prevent the cart, account, checkout or payment services
from working.
Browser controls do not always stop pixels, local storage or
server-side processing, so use our preference centre as well.
If your browser sends a recognised privacy signal, such as Global
Privacy Control, Shopify may apply it in regions where that signal
creates an applicable opt-out right. This is separate from the UK
opt-in consent rules for non-essential cookies.
09
Retention, audits and changes to this policy
Session technologies normally expire when you close your browser.
Persistent technologies remain for the period shown by the provider,
until replaced, or until you delete them.
We seek to use the shortest period reasonably necessary for the
purpose and periodically review persistent technologies.
We may update this policy when our site, providers, legal duties or
technology changes. The date at the top shows the latest revision.
Material changes may also be highlighted through the site or consent
interface.
Previous consent is not treated as covering a materially different
purpose.
10
Questions or concerns
Contact us if you have a question about this policy, cannot use the
preference centre or want to exercise a data-protection right
connected with cookie data.
Astflick Group Ltd, Unit 7, Latham Road Business Park,
Huntingdon, PE29 6YE
You may also complain to the UK Information Commissioner’s Office.
We would appreciate the opportunity to address your concern first,
but this does not affect your right to contact the ICO.
Your privacy choices
Manage cookie preferences
Choose which optional categories we may use. Strictly necessary
technologies cannot be switched off because the store depends on
them.
Strictly necessary
Security, cart, checkout, accounts and consent records.
