Privacy policy
Last updated: 16 June 2026
This Privacy Policy explains what personal data we collect when you use this website, why we collect it, who we share it with, and the rights you have over your data. We are committed to protecting your privacy and handling your data in line with the UK GDPR and EU GDPR.
Who we are
This website is operated by TOPCART LTD (“we”, “us”, “our”), registered in England & Wales under company number 16633322, with its registered address at 12 Robin Way, Staines-Upon-Thames, England, TW18 4RL. For any privacy-related questions or requests, contact us at support@dermavia.co.
What personal data we collect
• Name, email address and phone number (if provided).
• Shipping and billing address.
• Payment information (processed securely by our payment providers — we do not store full card details).
• Order history and customer-support correspondence.
• Technical data such as IP address, browser and device information.
• Cookie and usage data when you browse the site.
How we use your personal data
• To process and deliver your orders.
• To provide customer support and respond to your enquiries.
• To send order and delivery updates relating to your purchase.
• To prevent fraud and keep our website secure.
• To understand how our website is used and to improve it.
Legal basis for processing
We process your data on the basis of contract (to fulfil your order), legal obligation (for example, tax and accounting records), legitimate interests (to run and secure our business), and consent where required, such as for non-essential cookies. You can withdraw consent at any time.
Cookies and tracking
We use cookies and similar technologies to make the website work, remember your preferences, and understand site usage. Essential cookies are required for the site to function. Analytics and any advertising cookies are used only where you have given consent. You can manage cookies through the cookie banner or your browser settings.
Marketing communication
We do not currently run email or SMS marketing campaigns for this store. If we introduce marketing in future, we will only contact you where you have given the appropriate consent, and every message will include a simple way to unsubscribe.
Third-party services
We share data only as needed to run the store. Recipients may include:
• Shopify — our e-commerce and hosting platform.
• Payment providers — to process payments securely.
• Shipping and fulfilment partners — to deliver your order.
• Analytics providers — to understand site usage, where consent is given.
We require these providers to protect your data and use it only for the services they provide to us. Some providers may process data outside the UK/EU; where they do, appropriate safeguards are applied.
Data storage and security
We keep your personal data only for as long as necessary to fulfil the purposes described here or to meet legal requirements. We use appropriate technical and organisational measures to protect it against unauthorised access, loss or misuse.
Your rights
• Request access to the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data, where applicable.
• Object to or restrict certain processing.
• Withdraw consent for any processing based on consent.
• Lodge a complaint with your data protection authority (in the UK, the Information Commissioner's Office).
Contact information
To exercise any of your rights or for privacy questions, email support@dermavia.co. We usually reply within 24–48 hours.
As you sell into the UK and EU and DERMAVIA+ is a medical device, this Privacy Policy should be reviewed by a lawyer or data-protection specialist, and the third-party list updated to match the exact tools you connect (e.g. Google Analytics, Meta/TikTok pixels) if you later enable them.