Privacy Policy

Who We Are

This privacy policy explains how BGI Northern Limited (“we”, “us”) collects and uses personal information when you visit xanthel.com, contact us or buy Xanthel®. We’re the data controller for that information. BGI Northern Limited is registered in England and Wales, company no. 07601621, and our registered office is Library Chambers, 48 Union Street, Hyde, Cheshire, England, SK14 1ND.

If you have any question about this policy or your information, email info@xanthel.com or call +44 20 8050 1681.

Last updated: 5 October 2026.

What Information We Collect

We collect information when you give it to us, and a small amount automatically when you use the site:

• Your details: your name, email address, phone number and delivery and billing addresses, when you order or get in touch.
• Order details: what you bought, when, and the payment confirmation PayPal sends us. We don’t receive or store your card or bank details.
• Skin and health details: photos of your eyelids, your skin type and tone, and anything you tell us about your skin or health, when you ask for advice or order a kit made to order for you.
• Messages: anything you send us by email, phone or the contact form.
• Website use: pages visited, the device and browser used, your IP address and the website that sent you here, collected by our analytics service, Clicky.

How We Use Your Information

We use your information to:

• answer your questions and give you honest advice on whether Xanthel® suits you
• make your kit to order for your skin type and tone
• take payment, deliver your order and send you emails about it
• help with any question, return or problem after you’ve ordered
• keep the records the law requires, such as for tax
• understand how people use the site, so we can improve it
• protect the site and our customers from fraud and misuse

We only email you about your enquiry or your order. We don’t send newsletters or marketing emails, and we never sell or rent your information to anyone.

Our Legal Reasons For Using It

UK and EU data protection law requires us to have a lawful basis for each use:

• Contract: to process your order, take payment, make and deliver your kit, and handle returns.
• Legal obligation: to keep financial records for tax and accounting.
• Legitimate interests: to answer general enquiries, measure how the site is used and keep it secure, in ways you’d reasonably expect.
• Explicit consent: for photos of your skin and any health details, which the law classes as special category data. You give that consent when you choose to send them to us, and you can withdraw it at any time by emailing us. Withdrawing it means we may not be able to advise you or make your kit.

Your Photos

Photos you send us are used to advise you and to make your kit. They’re seen only by the small team who need to see them. We only ever publish a customer’s photos, for example on our before and after page, with that customer’s clear permission, without their name, and with any identifying details removed. You can ask us to take a published photo down at any time.

Who We Share It With

We only share your information with the services we need to run the business, and only what each one needs:

• PayPal, which handles all payments. PayPal’s own privacy policy covers how it uses your payment details.
• Our manufacturing partner in the EU, which makes your kit to order. It receives only the details needed to make it.
• The postal or courier service delivering your kit, which receives your name, address and, where needed, your phone number.
• Our website host and email provider, which store the site and our messages for us.
• Clicky, our website analytics service, which tells us how the site is used.

These services may only use your information to do their job for us. We may also share information if the law requires it, for example with HMRC or the police.

International Transfers

Some of these services, including PayPal and Clicky, may store or process information outside the UK, for example in the European Union or the United States. Where that happens, we rely on the protections UK law requires, such as adequacy regulations or the standard contract clauses approved for international transfers.

How Long We Keep It

• Orders and payment records: six years from the end of the financial year, as UK tax law requires.
• Photos, skin details and advice emails: only as long as we need them to advise you and support your order, then we delete them, unless you’ve agreed to a photo being published.
• Analytics: kept in Clicky’s reports for the period its service allows.

Cookies

Cookies are small files a website saves in your browser. We use the cookies the site needs to work, such as remembering what’s in your basket and keeping checkout secure. Clicky may also set a cookie to count unique visitors. You can block or delete cookies in your browser settings; the shop may not work properly without its essential cookies.

Keeping Your Information Safe

The whole site runs over a secure, encrypted connection, payments are handled entirely by PayPal, and only the people who need your information can see it. No website can be completely secure, but we take sensible steps to protect what you share with us.

Your Rights

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that’s wrong
• ask us to delete your information, unless we have to keep it by law
• ask us to limit how we use it, or object to how we use it
• ask for your information in a format you can take elsewhere
• withdraw your consent for photos and health details at any time

To use any of these rights, email info@xanthel.com. We’ll reply within one month, and there’s no charge.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the UK Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. If you live in the EU, you can contact the data protection authority in your country.

Children

Xanthel® is for adults. We don’t knowingly collect information from anyone under 18, and if we find we have, we’ll delete it.

Links To Other Websites

Our site links to other websites, such as PayPal and Facebook. We’re not responsible for how those sites handle your information, so please read their own privacy policies.

Changes To This Policy

We may update this policy from time to time, and the date at the top will always show the latest version. Please also read our terms and conditions.