Loss or damage is foreseeable if they were an obvious consequence of our breach or if they were contemplated by you and us at the time we entered into this Contract. Professional advisers who may also be acting as processors or joint controllers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.

Ghost | Superdrug Ghost | Superdrug

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender. In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time. Personal data, or personal information, means any information about an individual from which that person can be identified.

We will let you know which entity will be the controller for your data when you purchase a product or service with us. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

Ghost | Fragrance | | SEPHORA UK Ghost | Fragrance | | SEPHORA UK

The number of loyalty points you have received after a qualifying purchase will be confirmed after the dispatch of the product or products purchased.Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. We may, however, collect information about your health in certain circumstances, such as the reporting of an adverse reaction to a product. Details of your statutory right of cancellation, and an explanation of how to exercise it, are provided in the Dispatch Confirmation.