Updated September 2026
We are committed to your right to privacy. This Privacy Notice contains information about how we process personal data about you. If you have additional questions or require more information about our processing activities, do not hesitate to contact us.
Oslo Skin Lab is operated by NutraQ UK Ltd. NutraQ UK Ltd is the controller of the personal data processed in connection with Oslo Skin Lab Uk. NutraQ UK Ltd is a company registered in UK with registered address c/o Qualitycall Centre Ltd, 7a High Street, Gosport, Hampshire, PO12 1BX. In this Privacy Notice, when we refer to "Oslo Skin Lab UK", we mean NutraQ UK Ltd in its capacity as the controller.
We process personal data about the following individuals:
The table below lists the personal data that we process and for what purposes, our sources for such data, and our legal basis for it.
| Purpose | Types of personal data | Source | Legal basis |
|---|---|---|---|
| To manage purchases | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you | Necessary to perform our contract with you |
| To manage your user account | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you | Necessary to perform our contract with you |
| To manage campaigns and competitions | Name, e-mail address, gender, age, telephone number | From you and potentially third parties where consent is given | Our legitimate interest in administering campaigns and competitions, or your consent where required by applicable law We will ask for consent before publishing the name or details of any competition winner. |
| To manage loyalty programs and customer memberships | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you | Necessary to perform our contract with you |
| To send you marketing communication by SMS/ messages or email, including personalised newsletters, offers and other promotional content | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you and potentially third parties where consent is given | Where required by law, we will obtain your consent before sending marketing communications, including personalised marketing. Where permitted, we may rely on our legitimate interest to send marketing to existing customers. |
| To contact you by telephone with marketing communications | Name, telephone number, purchase history | From you and potentially third parties where consent is given | Your consent where required under applicable marketing laws, or where permitted, our legitimate interest in promoting our products, subject to your right to object. |
| To communicate with you (e.g. related to invoice or delivery deviations) | Name, address, telephone number, email address, gender, age, purchase details, customer communication history, customer satisfaction score | From you | Our legitimate interest in providing customer service and responding to your enquiries. |
| To manage complaints and claims | Name, address, telephone number, email address, gender, age, purchase details, customer communication history, customer satisfaction score | From you | Our legitimate interest in managing complaints and claims |
| To send you marketing surveys | Name, address, telephone number, email address, gender, age, purchase details, customer communication history, customer satisfaction score | From you | Our legitimate interest in improving our products and services. |
| To screen individuals against sanctions lists and fraud databases | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you and potentially third parties | Our legal obligations under applicable sanctions and anti-money laundering legislation, and our legitimate interest in preventing fraud. |
| To gain insights and improve our products and communication | Name, address, telephone number, email address, gender, age, purchase details, customer communication history, customer satisfaction score | From you and potentially third parties where consent is given | Our legitimate interest in improving our products and communication or, where required, your consent |
Please note that we may also collect or receive additional types of data if required to fulfil the purposes listed above.
On a case-by-case basis, we may also use your personal data for certain purposes that are not incompatible with the purpose for which the data was originally collected, such as audits, analytics, reporting, innovation, dispute resolution and mergers and acquisitions.
If our legal basis for processing your personal data is consent, you may at any time withdraw your consent. You may do so by contacting customer care, using the unsubscribe function included in our newsletter or by changing your preferences on “MyPage” where available. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
We may disclose your personal data to the following categories of recipients, to the extent necessary for the purposes mentioned above:
We may transfer your personal data to countries outside the EEA in certain situations, including where our suppliers, sub-suppliers or business partners are located in such countries.
Where the relevant country has not been recognised by the European Commission as providing an adequate level of data protection, we will ensure that other appropriate safeguards are in place to protect your personal data. Such safeguards may include the European Commission’s Standard Contractual Clauses.
Where required, we will assess whether the country provides sufficient protection for personal data. If needed, we will take additional steps to ensure your personal data is protected to a standard equivalent to EEA data protection requirements.
We will provide further information about international transfers of your personal data upon request. If you would like to obtain a copy of the relevant safeguards, please contact us using the contact details set out below.
We retain your personal data only for as long as necessary for the purposes described above, or as required by applicable law.
The table below sets out the applicable retention periods, or the criteria used to determine them.
In some cases, we may retain personal data for a longer or shorter period, for example where required by law or where necessary in connection with complaints, disputes, or claims brought by or against us. In such cases, we will delete the personal data once it is no longer needed, unless we are legally required to retain it for longer.
| Categories of personal data | Storage period |
|---|---|
| Name, gender, age, contact details, purchase and communication history, loyalty points, customer satisfaction score | Customer data is retained for as long as the customer relationship is active, and thereafter for up to 12 months after you terminate your subscription or membership. For customers with active loyalty points, we store customer data up to 36 months. Data required by accounting laws or other legal requirements will be stored as long as we have a legal obligation to do so. Non-customer contact details collected for marketing campaigns are deleted within a reasonable time after the campaign has been completed, unless consent has been obtained for further marketing. The time for deletion may be specified in the campaign terms. |
| IP address, type of device and operating system, location, website behavior, clicks, time on website etc | For information about storage of data collected via cookies, please see our Cookie Policy, including details on retention periods and third-party access. |
You have several rights in relation to our processing of your personal data. Such rights include:
| Right | Description |
|---|---|
| Information | To receive further information on how we process your personal data. |
| Access | To receive a copy of the information we have on you. |
| Rectification | To request rectification and completion of the information we have on you. |
| Erasure | To request erasure of information if there are no applicable legal grounds for processing such information. |
| Restriction | To ask that we restrict the processing of your information. |
| Data portability | To ask that your information is transferred to you in a structured, commonly used and machine-readable format. |
| Objection | To object to our processing of your personal data. This also includes the right to opt out of direct marketing, such as newsletters. |
Please note that these rights are subject to conditions and limitations under applicable law. This means that we may not always be required or able to comply with your request in full.
If you find that we use your personal data in violation of applicable law, you may file a complaint to the local Data Protection authority, the Information Commissioner's Office (ICO). However, we encourage you to contact us first, so that we can clarify any possible misunderstandings.
We have pages on social media where we provide information about our services and interact with the users, including Facebook, Instagram, TikTok. Through these pages, we may receive aggregated or anonymized insights, such as statistics on users’ age, gender, and location, as well as information you choose to share with us, including messages, comments, and likes. Your use of these platforms is governed by their own privacy and other policies.
As we are joint controllers with the social media provider for some of the data processed on the platform, such as aggregated insight that we get from your activity on our pages, you may contact us for more information or to exercise your privacy rights. Please note that we may not be able to respond to all requests and may need to refer you to the relevant platform.
We may change this Privacy Notice from time to time when deemed necessary. You will always find the latest version of this Privacy Notice on our website.
If you visit our website, we place cookies on your device. You will find more information about the use of cookies in our Cookie Policy.
Please feel free to contact us if you have any questions, comments or would like to exercise your rights, including the right to withdraw your consent. We will respond to your inquiry as soon as possible and typically within one month at the latest.
You can use the following contact details: gdpr@nutraq.com.
We are committed to your right to privacy. This Privacy Notice contains information about how we process personal data about you. If you have additional questions or require more information about our processing activities, do not hesitate to contact us.
Oslo Skin Lab is operated by NutraQ UK Ltd. NutraQ UK Ltd is the controller of the personal data processed in connection with Oslo Skin Lab Uk. NutraQ UK Ltd is a company registered in UK with registered address c/o Qualitycall Centre Ltd, 7a High Street, Gosport, Hampshire, PO12 1BX. In this Privacy Notice, when we refer to "Oslo Skin Lab UK", we mean NutraQ UK Ltd in its capacity as the controller.
We process personal data about the following individuals:
The table below lists the personal data that we process and for what purposes, our sources for such data, and our legal basis for it.
| Purpose | Types of personal data | Source | Legal basis |
|---|---|---|---|
| To manage purchases | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you | Necessary to perform our contract with you |
| To manage your user account | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you | Necessary to perform our contract with you |
| To manage campaigns and competitions | Name, e-mail address, gender, age, telephone number | From you and potentially third parties where consent is given | Our legitimate interest in administering campaigns and competitions, or your consent where required by applicable law We will ask for consent before publishing the name or details of any competition winner. |
| To manage loyalty programs and customer memberships | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you | Necessary to perform our contract with you |
| To send you marketing communication by SMS/ messages or email, including personalised newsletters, offers and other promotional content | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you and potentially third parties where consent is given | Where required by law, we will obtain your consent before sending marketing communications, including personalised marketing. Where permitted, we may rely on our legitimate interest to send marketing to existing customers. |
| To contact you by telephone with marketing communications | Name, telephone number, purchase history | From you and potentially third parties where consent is given | Your consent where required under applicable marketing laws, or where permitted, our legitimate interest in promoting our products, subject to your right to object. |
| To communicate with you (e.g. related to invoice or delivery deviations) | Name, address, telephone number, email address, gender, age, purchase details, customer communication history, customer satisfaction score | From you | Our legitimate interest in providing customer service and responding to your enquiries. |
| To manage complaints and claims | Name, address, telephone number, email address, gender, age, purchase details, customer communication history, customer satisfaction score | From you | Our legitimate interest in managing complaints and claims |
| To send you marketing surveys | Name, address, telephone number, email address, gender, age, purchase details, customer communication history, customer satisfaction score | From you | Our legitimate interest in improving our products and services. |
| To screen individuals against sanctions lists and fraud databases | Name, address, telephone number, email address, gender, age, purchase details, customer communication history | From you and potentially third parties | Our legal obligations under applicable sanctions and anti-money laundering legislation, and our legitimate interest in preventing fraud. |
| To gain insights and improve our products and communication | Name, address, telephone number, email address, gender, age, purchase details, customer communication history, customer satisfaction score | From you and potentially third parties where consent is given | Our legitimate interest in improving our products and communication or, where required, your consent |
Please note that we may also collect or receive additional types of data if required to fulfil the purposes listed above.
On a case-by-case basis, we may also use your personal data for certain purposes that are not incompatible with the purpose for which the data was originally collected, such as audits, analytics, reporting, innovation, dispute resolution and mergers and acquisitions.
If our legal basis for processing your personal data is consent, you may at any time withdraw your consent. You may do so by contacting customer care, using the unsubscribe function included in our newsletter or by changing your preferences on “MyPage” where available. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
We may disclose your personal data to the following categories of recipients, to the extent necessary for the purposes mentioned above:
We may transfer your personal data to countries outside the EEA in certain situations, including where our suppliers, sub-suppliers or business partners are located in such countries.
Where the relevant country has not been recognised by the European Commission as providing an adequate level of data protection, we will ensure that other appropriate safeguards are in place to protect your personal data. Such safeguards may include the European Commission’s Standard Contractual Clauses.
Where required, we will assess whether the country provides sufficient protection for personal data. If needed, we will take additional steps to ensure your personal data is protected to a standard equivalent to EEA data protection requirements.
We will provide further information about international transfers of your personal data upon request. If you would like to obtain a copy of the relevant safeguards, please contact us using the contact details set out below.
We retain your personal data only for as long as necessary for the purposes described above, or as required by applicable law.
The table below sets out the applicable retention periods, or the criteria used to determine them.
In some cases, we may retain personal data for a longer or shorter period, for example where required by law or where necessary in connection with complaints, disputes, or claims brought by or against us. In such cases, we will delete the personal data once it is no longer needed, unless we are legally required to retain it for longer.
| Categories of personal data | Storage period |
|---|---|
| Name, gender, age, contact details, purchase and communication history, loyalty points, customer satisfaction score | Customer data is retained for as long as the customer relationship is active, and thereafter for up to 12 months after you terminate your subscription or membership. For customers with active loyalty points, we store customer data up to 36 months. Data required by accounting laws or other legal requirements will be stored as long as we have a legal obligation to do so. Non-customer contact details collected for marketing campaigns are deleted within a reasonable time after the campaign has been completed, unless consent has been obtained for further marketing. The time for deletion may be specified in the campaign terms. |
| IP address, type of device and operating system, location, website behavior, clicks, time on website etc | For information about storage of data collected via cookies, please see our Cookie Policy, including details on retention periods and third-party access. |
You have several rights in relation to our processing of your personal data. Such rights include:
| Right | Description |
|---|---|
| Information | To receive further information on how we process your personal data. |
| Access | To receive a copy of the information we have on you. |
| Rectification | To request rectification and completion of the information we have on you. |
| Erasure | To request erasure of information if there are no applicable legal grounds for processing such information. |
| Restriction | To ask that we restrict the processing of your information. |
| Data portability | To ask that your information is transferred to you in a structured, commonly used and machine-readable format. |
| Objection | To object to our processing of your personal data. This also includes the right to opt out of direct marketing, such as newsletters. |
Please note that these rights are subject to conditions and limitations under applicable law. This means that we may not always be required or able to comply with your request in full.
If you find that we use your personal data in violation of applicable law, you may file a complaint to the local Data Protection authority, the Information Commissioner's Office (ICO). However, we encourage you to contact us first, so that we can clarify any possible misunderstandings.
We have pages on social media where we provide information about our services and interact with the users, including Facebook, Instagram, TikTok. Through these pages, we may receive aggregated or anonymized insights, such as statistics on users’ age, gender, and location, as well as information you choose to share with us, including messages, comments, and likes. Your use of these platforms is governed by their own privacy and other policies.
As we are joint controllers with the social media provider for some of the data processed on the platform, such as aggregated insight that we get from your activity on our pages, you may contact us for more information or to exercise your privacy rights. Please note that we may not be able to respond to all requests and may need to refer you to the relevant platform.
We may change this Privacy Notice from time to time when deemed necessary. You will always find the latest version of this Privacy Notice on our website.
If you visit our website, we place cookies on your device. You will find more information about the use of cookies in our Cookie Policy.
Please feel free to contact us if you have any questions, comments or would like to exercise your rights, including the right to withdraw your consent. We will respond to your inquiry as soon as possible and typically within one month at the latest.
You can use the following contact details: gdpr@nutraq.com.