Last updated: 2 September 2026
This Privacy Policy explains what personal data Element for Men collects, why, what we do with it, who we share it with, how long we keep it, and the rights you have over it. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who we are
Element for Men is a trading name of Element Essentials Men Limited, a company registered in England and Wales.
-
Company number: 16282325
-
Registered office: Capital Office, 124 City Road, London, England, EC1V 2NX
-
Website: www.elementformen.com
-
Contact for all data protection matters: contact@elementformen.com
We are the data controller for the personal data described in this policy. We are not required to appoint a Data Protection Officer; data protection enquiries are handled by the address above.
2. Who this policy covers
Anyone who buys from us, subscribes, creates an account, joins our mailing list, enters a competition, leaves a review, uses our referral scheme, contacts us, or simply visits www.elementformen.com.
3. The personal data we collect
a. Data you give us
-
Identity and contact: name, email address, delivery and billing address, phone number.
-
Account: login credentials, order history, saved addresses, subscription settings.
-
Order and payment: what you bought, order value, delivery method, and payment confirmation. We never receive or store your full card number. Card details are captured and held by our payment providers.
-
Communications: emails, contact form messages, social media messages, and our replies.
-
Marketing preferences: whether you have opted in to email or SMS, and what you have opted out of.
-
Content you submit: product reviews and review photos, competition entries, referral details, and survey or scent-quiz answers.
b. Data collected automatically
- IP address, approximate location derived from it, device type, operating system, browser and language.
- Pages viewed, products viewed, time on site, referring site, search terms used on our site.
- Cart and checkout activity, including abandoned carts.
-
Session recordings and heatmaps — anonymised recordings of mouse movement, scrolling and clicks on our pages, used to find and fix usability problems. These are collected by Microsoft Clarity and exclude the content of form fields and payment details.
- Email and SMS engagement — whether a message was opened, and which links were clicked.
- Cookie and pixel identifiers. See section 7.
c. Data from third parties
- Shopify, which powers our store and checkout, including its fraud-analysis signals.
- Payment providers, confirming whether a payment succeeded.
- Royal Mail, for delivery and tracking status.
- Advertising and analytics platforms, where you have consented to those cookies — aggregated and pseudonymised campaign data.
- Social media platforms, where you interact with our accounts or advertising.
d. Data we do not collect
We do not knowingly collect special category data — health, ethnicity, religion, political opinions, sexual orientation, biometrics, trade union membership. Please do not send it to us. If you tell us about a skin sensitivity or allergy when contacting us, we use it only to answer your question and do not add it to your marketing profile.
4. Why we use it, and our lawful basis
Under the UK GDPR we must have a lawful basis for every use of your data. Ours are set out below.
| What we do |
Lawful basis |
| Take your order, take payment, pack and deliver it, send order and dispatch emails |
Performance of our contract with you |
| Run and manage your subscription, take recurring payments, send renewal reminders |
Performance of our contract with you |
| Manage your account, returns, refunds and customer service |
Performance of our contract; our legitimate interest in running the business properly |
| Send marketing emails and SMS about our products |
Your consent — or, if you have bought from us, the "soft opt-in" under regulation 22 of PECR, with an opt-out in every message |
| Analytics cookies, session recording, advertising cookies and pixels, and building advertising audiences |
Your consent |
| Publish and moderate product reviews and customer content |
Your consent |
| Run our referral scheme and competitions |
Performance of our contract with you; your consent where you enter |
| Detect and prevent fraud, and keep the site and checkout secure |
Our legitimate interest in protecting the business and our customers; legal obligation |
| Improve our products, our site and our service, including aggregated reporting |
Our legitimate interest in improving what we sell |
| Keep accounting, VAT and company records |
Legal obligation |
| Establish, exercise or defend legal claims |
Our legitimate interest in protecting our legal position |
Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms and concluded that our use does not override them. You can ask us for the detail of that assessment, and you can object — see section 10.
5. Marketing, and how to stop it
We send marketing only where you have opted in, or where you have bought from us and we are marketing similar products under the PECR soft opt-in. Either way you can stop it at any moment:
-
Email: click unsubscribe at the foot of any marketing email.
-
SMS: reply STOP to any marketing text.
-
Or: email contact@elementformen.com and ask us to remove you.
Opting out is immediate for future sends and free. We keep a minimal suppression record — your email address or number and the fact you opted out — so we do not contact you again by mistake. That is a legal obligation, not marketing.
Service messages — order confirmations, dispatch notices, subscription renewal reminders, refund confirmations — are not marketing and are sent whether or not you have opted in, because they are part of fulfilling your order.
We do not sell your personal data, and we never have.
6. Who we share your data with
We share personal data only with organisations that need it to deliver our service to you. Each is bound by a written contract to process it only on our instructions and to keep it secure.
-
Shopify Inc. / Shopify International Limited — our ecommerce platform, hosting, checkout, customer accounts, the Shop app and fraud analysis.
-
Payment providers — Shopify Payments (processing by Stripe), PayPal, Apple Pay, Google Pay and Shop Pay. They act as controllers in their own right for payment data; see their own privacy notices.
-
Appstle Inc. — manages our subscriptions, schedules and renewals.
-
Klaviyo, Inc. — sends our emails and SMS and hosts our sign-up forms.
-
Judge.me — collects, hosts and displays our product reviews, including review request emails.
-
Royal Mail Group Limited — delivers your order and provides tracking.
-
Microsoft Corporation (Microsoft Clarity) — session recordings and heatmaps used to improve the site.
-
Advertising and analytics platforms — Meta Platforms (Facebook and Instagram), Google (Google Ads, Google Analytics, Merchant Center, YouTube) and TikTok. These receive data only where you have consented to advertising and analytics cookies.
-
Our accountants and accounting software — for invoicing, VAT and statutory records.
-
Professional advisers — lawyers and auditors, where we need advice.
-
Regulators, law enforcement and courts — where we are legally required to disclose.
-
A buyer or successor — if the business or its assets are sold or reorganised. We would tell you if that changed how your data is used.
For a current, itemised list of our processors, email contact@elementformen.com and we will send it.
7. Cookies and similar technologies
Cookies are small files stored on your device. We use them in four categories:
-
Strictly necessary — the cart, the checkout, security, load balancing, and remembering your cookie choices. These cannot be switched off and do not need your consent.
-
Functional — remembering preferences such as your chosen scent or region.
-
Analytics — how people find and use the site, which pages work and which do not, including session recordings and heatmaps.
-
Advertising — measuring our advertising and showing you relevant ads on Meta, Google and TikTok. This includes conversion pixels and audience building.
We set functional, analytics and advertising cookies only with your consent. Where a cookie preference tool is shown to you on the site, you can accept, reject or change your choices there at any time, and withdrawing consent is as easy as giving it.
You can also control cookies in your browser settings, and you can opt out directly with the main platforms:
Where your browser sends a Global Privacy Control signal, we treat it as an opt-out of advertising and analytics cookies on that browser. Blocking cookies may stop parts of the site working, including the cart and checkout.
8. Sending data outside the UK
Some of our providers — including Shopify, Klaviyo, Appstle, Judge.me, Microsoft, Meta, Google and TikTok — process data outside the United Kingdom, principally in the United States and the European Economic Area.
Where data leaves the UK we rely on one of the following safeguards:
- UK adequacy regulations, where the destination country has been recognised as providing adequate protection, including the EEA and the UK Extension to the EU–US Data Privacy Framework where the recipient is certified;
- the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK International Data Transfer Addendum;
- in each case supported by a transfer risk assessment and, where appropriate, additional technical measures.
To request a copy of the safeguards in place for a specific transfer, email contact@elementformen.com.
9. How long we keep it
| Data |
Retention period |
| Order, invoice and transaction records |
6 years from the end of the financial year in which the order was placed, to meet HMRC and Companies Act requirements |
| Customer account and subscription records |
While the account is active, and for 24 months after your last order or login |
| Marketing contact and engagement data |
Until you unsubscribe, or after 24 months with no engagement, whichever comes first |
| Unsubscribe and suppression records |
Kept indefinitely, so we do not contact you again in error |
| Customer service correspondence |
24 months from the last message |
| Reviews and published customer content |
Until you ask us to remove it |
| Session recordings and heatmap data |
Up to 13 months |
| Cookie, analytics and advertising identifiers |
Per cookie, typically up to 24 months from your last visit |
| Fraud and security records |
6 years |
When a period ends we delete the data or anonymise it so it can no longer identify you. Aggregated, anonymised statistics may be kept indefinitely.
10. Your rights
Under the UK GDPR you have the following rights. They apply free of charge, and we will respond within one month, extendable by up to two further months for complex requests — we will tell you if that happens and why.
-
Access — a copy of the personal data we hold about you, and an explanation of how we use it.
-
Rectification — correction of anything inaccurate or incomplete.
-
Erasure — deletion of your data where we no longer need it, where you withdraw consent, or where you object and we have no overriding grounds. This right is not absolute: we must keep order records for tax purposes.
-
Restriction — to have us pause processing while a dispute about accuracy or legitimate interests is resolved.
-
Portability — a copy of the data you gave us, in a structured, commonly used, machine-readable format, or transferred to another provider.
-
Object — to processing based on our legitimate interests, on grounds relating to your situation.
-
Object to direct marketing — an absolute right. Say stop and we stop, with no balancing exercise.
-
Withdraw consent — at any time, where we rely on consent. Withdrawal does not affect processing already carried out.
-
Rights on automated decision-making — see section 11.
To exercise any of these, email contact@elementformen.com with "Data request" in the subject line and tell us which right you are using. We may ask you to confirm your identity before we act, to make sure we do not disclose your data to someone else.
11. Automated decision-making and profiling
We use profiling for marketing — grouping customers by what they have bought or how they have engaged, so that emails and advertising are more relevant. You can object to this at any time under section 10.
Our checkout uses Shopify's automated fraud analysis, which scores orders for risk. We review flagged orders ourselves before cancelling anything; no order is refused by a machine alone.
We do not make decisions producing legal effects or similarly significant effects on you by solely automated means.
12. Security
Our site and checkout run over HTTPS. Payment data is handled by PCI DSS compliant providers and never touches our own systems. Access to customer data is limited to people who need it, and protected by strong authentication.
No system is perfectly secure. If a breach were to put your rights and freedoms at risk, we will notify the Information Commissioner's Office within 72 hours and tell you without undue delay where the law requires it.
13. Children
Our products and our site are intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, email contact@elementformen.com and we will delete it.
14. Other websites
Our site links to other websites and social platforms. We are not responsible for their privacy practices. Read their policies before giving them your data.
15. Complaints
If you are unhappy with how we have handled your data, tell us first at contact@elementformen.com — we would rather fix it than have you escalate.
You also have the right to complain to the UK supervisory authority at any time:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
16. Changes to this policy
We may update this policy to reflect changes to our practices, our providers or the law. The date at the top shows when it last changed. Where a change is material, we will tell you by email or by a notice on the site before it takes effect.
17. Contact us
Element Essentials Men Limited (trading as Element for Men)
Capital Office, 124 City Road, London, England, EC1V 2NX
Company number: 16282325
Email: contact@elementformen.com
We reply to all enquiries within 1 to 2 working days.