Legal

Privacy Policy

Last updated 21 September 2026

This policy explains what Covet Beauty does with your personal data, why we do it, and the rights you have. It is short because we collect very little.

Who we are

Covet Beauty is the customer-facing trading brand of TRELLIS BRANDS LTD (registered in England and Wales, company number 17462821). That company, not the brand, is the data controller for the personal data described here, and it is the one accountable to you for it. Its registered office is:

You can reach us about anything in this policy at hello@covetbeauty.co.uk.

What this policy covers

It covers this website, covetbeauty.co.uk, and the Covet list. The Covet Beauty store is not open, so we do not take orders, hold accounts or process payments, and this policy does not describe any of those things. It will be extended before the store opens.

What we collect, and why

When you join the Covet list

We collect your email address and a record that you ticked the consent box, together with the date. We do not ask for your name, your address, your date of birth or anything else, and the form has nowhere to put them.

We use your address for one purpose: to email you about the Covet Beauty launch, new arrivals, offers and beauty inspiration. Our lawful basis is your consent, which you give by ticking the box, and which you can withdraw at any time.

When you visit the site

Our hosting provider, Cloudflare, handles the technical information every website receives in order to answer a request: your IP address, the page you asked for, your browser and operating system, and the time. This is used to serve the site, to keep it available and to protect it from abuse. Our lawful basis is our legitimate interest in running a secure, working website.

When you submit the signup form, your IP address is also used, at that moment, to limit how many times the form can be submitted in quick succession. We do not store it and it is never sent to our email provider.

Who we share it with

We do not sell your personal data, and we do not share it for anyone else’s marketing. Two suppliers process it on our instructions:

• Resend, our email platform. Your email address and consent record are stored there, and it sends the emails you have asked for.
• Cloudflare, which hosts and delivers this website.

Sending your data outside the UK

Resend Inc. is based in the United States, so joining the Covet list means your email address is transferred out of the United Kingdom.

That transfer is covered by the Article 28 data processing addendum that is in force on our Resend account. Under it, transfers out of the UK are made on the Standard Contractual Clauses as amended by the UK Addendum issued by the Information Commissioner — the safeguard UK data protection law provides for exactly this. Resend also states that it participates in the EU-US Data Privacy Framework and its UK Extension, which sits alongside that addendum rather than replacing it.

Resend publishes the companies it uses in turn at resend.com/legal/subprocessors, and gives us notice before that list changes.

We may also disclose personal data where the law requires it.

How long we keep it

We keep your email address on the Covet list until you unsubscribe or ask us to remove you. When you do, we remove you from the list; we keep a minimal record that you opted out, so that we do not add you back by mistake.

Cookies

Our cookie policy sets out what, if anything, this site stores on your device, and how you choose.

Your rights

Under UK data protection law you have the right to ask us for a copy of your personal data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw your consent at any time. Withdrawing consent does not affect anything we did before you withdrew it.

To exercise any of these, email hello@covetbeauty.co.uk. You do not have to give a reason, and it is free.

The fastest way to stop our emails is the unsubscribe link at the bottom of every one of them.

Complaints

If you think we have handled your personal data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

When this policy changes we will update the date at the top of this page. If a change is significant, we will say so in an email to the Covet list.