Privacy policy

Last Updated: 05/10/2026

This Privacy Policy outlines how Jenny Nordic Holistic Beauty ("we," "us," or "our"), a registered company in the UK complying with GDPR, collects, uses, and discloses your personal information when you interact with bayouspa.com (the "Site") or utilize our services (collectively, the "Services"). By accessing and using the Services, you acknowledge and agree to the terms outlined in this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in practices, operational requirements, or legal and regulatory obligations. Any modifications will be posted on the Site with the "Last updated" date, and we will adhere to applicable legal requirements in making such updates.

How We Collect and Use Your Personal Information

In providing the Services, we gather personal information from various sources, depending on your interaction with our Site.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

Personal Information We Collect

Information You Directly Submit to Us:

  • Basic contact details (name, address, phone number, email)
  • Order information (billing address, shipping address, payment confirmation)
  • Account information (username, password, security questions)
  • Shopping information (items viewed, cart contents, Wishlist)
  • Customer support information (communication content)

Information We Collect through Cookies:

  • Usage Data (device information, browser details, network connection, IP address)

Information We Obtain from Third Parties:

  • Provided by vendors and service providers (e.g., Shopify)
  • Payment information from processors for order fulfilment
  • Data collected by third parties via online tracking technologies

How We Use Your Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
  • With business and marketing partners, including MailerLite, to provide services and advertise to you. We use MailerLite to support personalised advertising with third-party services. Our business and marketing partners will use your information in accordance with their own privacy notices.
  • When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent.
  • With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.

Cookies

We use Cookies on our Site to enhance functionality and user experience. Third parties may also use Cookies to tailor services, products, and advertising. You can manage your Cookie preferences in your browser settings, but note that this may affect the functionality of certain Services.

How We Disclose Personal Information

We may disclose your personal information in various circumstances, such as to vendors, business partners, affiliates, or in connection with a business transaction. Categories of disclosed information include identifiers, commercial information, and internet or network activity.

User Generated Content

Publicly shared user-generated content on the Services is accessible to anyone. We are not responsible for the privacy or security of such information.

Third-Party Websites and Links

Links to third-party websites are provided, and users are advised to review their privacy policies. We are not responsible for the privacy or security of external sites.

Children’s Data

The Services are not intended for children. Parents or guardians can contact us to request the deletion of any personal information provided by a child.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

  • Right to Access / Know. You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
  • Right to Delete. You may have a right to request that we delete personal information we maintain about you.
  • Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
  • Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
  • Right to Opt out of Sale or Sharing or Targeted Advertising. You may have a right to direct us not to "sell" or "share" your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. Please note that if you visit our Site with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out of the "sale" or "sharing" of information for the device and browser that you use to visit the Site.
  • Right to Limit and/or Opt out of Use and Disclosure of Sensitive Personal Information. You may have a right to direct us to limit our use and/or disclosure of sensitive personal information to only what is necessary to perform the Services or provide the goods reasonably expected by an average individual.
  • Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.
  • Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.
  • Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
  • Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, You may designate an authorised agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

For complaints about our processing of personal information, contact us. If dissatisfied, you may appeal our decision or lodge a complaint with your local data protection authority.

International Users

Your personal information may be transferred and processed outside your country. If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at jenny@jennynordic.com.