Privacy & Cookie Policy

Last Updated: September 2026

Attracta Beauty Awards ("ABA"), ABA Edit, and Attracta Courtney personally ("we", "us", "our") are committed to protecting and respecting your privacy. This policy outlines how we collect, use, store, and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).

This policy applies to all interactions across the Attracta Beauty Awards platform, including website visitors, commercial entrants, brand representatives, beauty experts, wellness centres, judges, and editorial panellists.

​

1. Data Controller Information

For the purposes of applicable UK data protection law, the Data Controller is: Attracta Beauty Awards

Email for Data Protection Enquiries: info@attractabeauty.com

Legal Enquiries & Service of Notice: In accordance with Section 1.17 of our Terms & Conditions, legal notices and data rights requests may be directed via email to info@attractabeauty.com.

2. Information We Collect

We collect and process personal data exclusively to facilitate business-to-business (B2B) entry submissions, editorial evaluation, awards administration, press communications, and site functionality.

​

A. Business & Contact Data (Entrants, Experts, Clinics & Brands)

When you register an entry, submit a product, or enter as an expert or wellness centre, we collect:

Full name and professional title

Company name and registered business address

Direct business email address and telephone contact number

Payment metadata and invoicing details (Note: We do not store raw credit/debit card numbers; transactions are processed securely via PCI-compliant payment gateways)

Product entry details, sample dispatch notes, and supporting press assets

​

B. Panellist & Expert Data

For appointed judges, panellists, and evaluating experts, we collect:

Full name, professional biography, and verified credentials

Business contact information and delivery address for sample testing dispatches

Health disclosures or skin/treatment preferences voluntarily submitted for trial matching

​

C. Technical Data (Website Visitors)

When you browse our site, our infrastructure automatically processes basic technical connection data (such as IP address, browser type, operating system, and essential session identifiers) strictly necessary to serve web pages securely and efficiently.

​

3. How We Use Your Data & Legal Bases for Processing

We process your personal data strictly under the following legal bases:

Purpose / Activity Type of Data Legal Basis under UK GDPR

Processing Award Entries & Administration Contact, Business & Entry Details Contract Performance (Executing the entry agreement under Section 1 of our Terms & Conditions)

Invoicing & Transaction Records Contact, Business & Payment MetadataLegal Obligation (Taxation and statutory accounting compliance)

Judicial Allocation & Treatment Bookings Contact, Professional & Sample Data Contract Performance / Legitimate Interests (Facilitating product trials and expert clinic evaluations)

Editorial Coverage & Media Announcements Professional Title, Company, Assets Legitimate Interests (Journalistic publication, editorial reviews, and promoting award winners)

Direct B2B Communications & Updates Business Email & Name Legitimate Interests (Notifying past/present commercial entrants about entry deadlines and cycle updates)

Platform Security & Infrastructure Technical Session Identifiers Legitimate Interests (Ensuring site stability, preventing fraud, and secure delivery)

​

4. Third-Party Sharing & Data Transfers

We do not sell, rent, or trade your personal data to third parties. Data is shared strictly on a need-to-know basis under confidential operational agreements with:

1. Independent Judges & Panellists: Recipient contact details and delivery addresses are shared solely to facilitate product sample dispatches and clinic evaluation visits.

2. Operational Service Providers: Secure cloud hosting, platform infrastructure (including Wix.com), payment processors, and automated email dispatches.

3. Logistics & Couriers: Delivery names and shipping addresses provided for sample distribution.

​

International Data Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are implemented in accordance with UK GDPR, such as Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs), ensuring an equivalent level of data protection.

​

5. Cookie Policy & Platform Architecture (PECR Compliance)

Attracta Beauty Awards ("ABA") operates a privacy-first web platform.

Strictly Necessary Operational Cookies: Our website relies exclusively on essential operational cookies deployed by our hosting infrastructure (Wix.com) for core platform stability, session routing, security, and fraud prevention (e.g., XSRF-TOKEN, hs, svSession). These cookies do not track individual users across third-party websites or build advertising profiles.

No Non-Essential Tracking or Advertising Cookies: We do not deploy third-party analytics tracking (such as Google Analytics), advertising pixels (such as Meta Pixel), or behavioral profiling tools.

No Cookie Consent Banner Required: Because our platform uses solely strictly necessary operational cookies exempt under PECR regulation, visitors can browse our website without intrusive tracking pop-ups or consent banners. Visitors may manage or restrict essential browser cookies at any time via their web browser settings.

 

6. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, tax, or regulatory reporting requirements.

Financial & Entry Records: Retained for 6 years following the completion of the relevant award cycle in accordance with UK tax legislation.

Editorial & Press Records: Published award results, winner archives, and press mentions remain part of the public editorial record unless a valid erasure request is approved.

Marketing Communications: Retained until you unsubscribe or opt out via the link in our dispatches.

 

7. Your Statutory Rights under UK GDPR

Under the Data Protection Act 2018 and UK GDPR, you have the following rights regarding your personal data:

​Right of Access: Request a copy of the personal data we hold about you (Subject Access Request).

Right to Rectification: Request correction of inaccurate or incomplete data.

Right to Erasure ("Right to be Forgotten"): Request deletion of your data where processing is no longer necessary, subject to legal retention obligations.

Right to Restrict or Object to Processing: Object to processing based on legitimate interests or request processing restrictions.

Right to Data Portability: Receive your personal data in a structured, commonly used format.Right to Withdraw

Consent: Where processing relies on consent, you may withdraw consent at any time.

​

To exercise any of these rights, please contact our Data Protection lead at info@attractabeauty.com.

If you remain dissatisfied with our response, you have the right to lodge a formal complaint with the UK supervisory authority: Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

​​

8. Updates to This Policy

We review and update this Privacy & Cookie Policy periodically to reflect operational changes or regulatory requirements. Any modifications will be posted directly to this page with an updated revision date.