PRIVACY & COOKIE POLICY

Last updated: 22 September 2026

At UYILO, operated by Contours by Mika and Overdaux, we respect your privacy and are committed to protecting your personal information.

This Privacy & Cookie Policy explains what information we collect when you visit our website, contact us or place an order, why we collect it, how we use it, who we may share it with and the rights you have over your information.

For the purposes of UK data protection law, UYILO / Contours by Mika is the data controller responsible for the personal information described in this policy.

Privacy contact: Uyilo.nails@gmail.com
Website: www.contoursbymika.com / uyilo.nails.com

1. INFORMATION WE COLLECT

Depending on how you use our website, we may collect the following information.

Identity and contact information

This may include:

Your name
Email address
Telephone number
Billing address
Delivery address

Order and transaction information

This may include:

Products ordered
Nail size, shape, length and other product selections
Customisation requests
Order numbers
Purchase history
Payment status
Delivery and tracking information
Refund, cancellation or customer-service information

Payment information

Payments are processed through payment providers made available through our eCommerce platform.

We do not normally receive or store your complete card number or card security code. Payment providers process this information in accordance with their own privacy and security obligations.

We may receive limited payment-related information such as payment status, payment method, transaction reference and limited identifying details where required to manage your order.

Communications

If you contact us, we may collect and store:

The contents of your message
Your contact information
Customer-service correspondence
Photographs or other information you voluntarily provide in connection with an order, sizing issue, damaged item, custom design or enquiry

Technical and website information

When you visit our website, certain information may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Pages viewed
Approximate location derived from your IP address
Referring website
Date and time of visits
Website interactions
Cookie and consent preferences

Some of this information is collected using cookies and similar technologies.

2. HOW AND WHY WE USE YOUR INFORMATION

We only use personal information where we have a lawful reason to do so.

Processing and fulfilling your order

We use your information to:

Accept and manage your order
Take or confirm payment
Prepare your products
Arrange delivery
Provide order confirmations and updates
Deal with cancellations, refunds, damaged products or other order issues

Our lawful basis is generally that the processing is necessary to perform our contract with you.

Responding to enquiries

We use information you provide through our contact forms, email or other customer-service channels to respond to your questions and requests.

Depending on the nature of the enquiry, our lawful basis may be:

Taking steps at your request before entering into a contract; or
Our legitimate interest in providing effective customer service and operating our business.

Running and improving our business

We may use appropriate information to:

Maintain and improve our website
Understand how customers use our services
Identify technical problems
Prevent misuse, fraud or security incidents
Improve our products and customer experience
Maintain business records

Where appropriate, we rely on our legitimate interests in operating, protecting and improving our business.

Where analytics or similar technologies require cookie consent, those technologies will only be used after the required consent has been provided.

Legal, accounting and regulatory requirements

We may keep and use information where necessary to:

Maintain tax and accounting records
Comply with applicable laws
Respond to lawful requests from authorities
Establish, exercise or defend legal claims
Prevent or investigate fraud

Our lawful basis is generally compliance with a legal obligation or, where appropriate, our legitimate interests.

Marketing

Where we offer email or other electronic marketing, we will only send it where permitted by law.

This may include situations where:

You have specifically opted in to receive marketing; or
The law permits us to contact an existing customer about our own similar products and we gave that customer a clear opportunity to opt out when their details were collected.

Every marketing message will provide a simple way to unsubscribe.

You can withdraw your consent or opt out of marketing at any time.

Service messages relating to an order, payment, delivery or customer-service matter are not marketing communications and may still be sent where necessary to fulfil your order.

3. WHO WE SHARE INFORMATION WITH

We do not sell your personal information.

However, we use trusted businesses and service providers to operate our store and fulfil orders. This means it may sometimes be necessary to share limited personal information with them.

These may include:

Website and eCommerce providers

Our website is hosted and operated using Wix and related Wix services.

Wix may process information necessary to host the website, operate the store, maintain security, process transactions and provide website functionality.

Payment providers

Payment providers may receive information required to securely process payments, prevent fraud and complete transactions.

Delivery and fulfilment providers

We may provide your name, delivery address, contact details and other necessary delivery information to postal services, couriers and delivery providers.

Technology providers

Where used, we may work with providers that support:

Website hosting
Email communication
Analytics
Customer support
Security
Fraud prevention
Data storage
Marketing

These providers may only receive information necessary to provide their service to us.

Professional advisers and authorities

Where reasonably necessary, information may also be disclosed to:

Accountants
Insurers
Legal advisers
Government bodies
Regulators
Law-enforcement authorities

where required by law or necessary to protect our legal rights.

We require service providers handling personal information on our behalf to handle it appropriately and in accordance with applicable data-protection requirements.

4. INTERNATIONAL DATA TRANSFERS

Some of the technology and service providers we use may store or process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate protections are in place as required by UK data-protection law.

Depending on the destination and provider, these protections may include an approved adequacy arrangement, recognised contractual safeguards or another lawful transfer mechanism.

5. HOW LONG WE KEEP YOUR INFORMATION

We do not keep personal information for longer than reasonably necessary.

How long information is retained depends on why it was collected and whether we are required to keep it for legal, accounting, tax, fraud-prevention or dispute-resolution purposes.

Generally:

Order and transaction records may be retained for up to six years where required for accounting, tax, legal or dispute-resolution purposes.
Customer-service communications may be retained for as long as reasonably necessary to deal with the enquiry and any related issue.
Marketing information is retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to retain it.
Cookie consent records may be retained to demonstrate the choices you made.
Technical and security records are retained only for an appropriate period based on their purpose.

Where information is no longer required, it will be deleted, anonymised or otherwise securely disposed of where reasonably possible.

6. HOW WE PROTECT YOUR INFORMATION

We take reasonable technical and organisational measures to protect personal information from:

Unauthorised access
Loss
Misuse
Disclosure
Alteration
Destruction

We also limit access to personal information to people and service providers who reasonably need it to perform their role.

No website, internet connection or electronic storage system can be guaranteed to be completely secure, but we take reasonable steps to protect the information entrusted to us.

7. YOUR DATA-PROTECTION RIGHTS

Depending on the circumstances, UK data-protection law may give you the right to:

Access your information

You may ask for confirmation of whether we hold personal information about you and request a copy of that information.

Correct your information

You may ask us to correct personal information that is inaccurate or incomplete.

Request deletion

You may ask us to delete your personal information in certain circumstances.

The right to deletion is not absolute. For example, we may need to retain certain transaction records to comply with legal, accounting or tax obligations or to establish or defend legal claims.

Restrict processing

You may ask us to restrict how your personal information is used in certain circumstances.

Object to processing

Where we rely on legitimate interests, you may have the right to object to our use of your personal information.

You have the right to object at any time to the use of your personal information for direct marketing.

Data portability

In certain circumstances, you may have the right to receive personal information you provided to us in a structured, commonly used and machine-readable format or ask for it to be transferred to another organisation.

Withdraw consent

Where we rely on your consent, you may withdraw that consent at any time.

Withdrawing consent does not affect processing that was lawful before consent was withdrawn.

8. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your privacy rights, contact us at:

uyilo.nails@gmail.com

or through the contact form on our website.

We may need to request information to confirm your identity before responding to a request.

We will normally respond within the period required by applicable data-protection law.

You will not normally be charged for exercising your rights. However, the law may allow us to charge a reasonable fee or refuse a request in limited circumstances, such as where a request is manifestly unfounded or excessive.

9. COMPLAINTS

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to address them.

You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)
www.ico.org.uk

You do not have to contact us before approaching the ICO, although the ICO may recommend that you raise the issue with us first where appropriate.

10. COOKIE POLICY

Cookies are small files or similar technologies placed on or accessed through your device when you visit a website.

We use cookies and similar technologies to operate our website, remember preferences, understand how the website is used and, where applicable and permitted, support analytics and marketing.

Cookies are not all treated in the same way.

Essential cookies

Essential cookies are required for the website to function properly.

They may be used for purposes such as:

Website security
Fraud prevention
Shopping-cart functionality
Checkout
Remembering privacy and cookie choices
Maintaining website sessions
Enabling features specifically requested by you

Because these cookies are necessary to provide the website or services requested by you, they do not normally require consent.

Functional cookies

Functional cookies may allow additional website features and remember preferences.

Where consent is required, these cookies will only be activated after you have agreed to them through our cookie controls.

Analytics cookies

Analytics cookies help us understand how visitors interact with our website, for example which pages are visited and how visitors navigate the site.

Where consent is required, analytics cookies will not be activated until you choose to allow them.

Marketing cookies

Marketing cookies and similar technologies may be used to measure advertising, understand the effectiveness of campaigns or personalise advertising.

Where these technologies are used and require consent, they will not be activated until you choose to allow them.

11. YOUR COOKIE CHOICES

When you first visit our website, you may be presented with a cookie consent banner.

You can choose whether to allow non-essential categories of cookies.

Rejecting non-essential cookies will not prevent you from accessing the basic functions of our website.

You can also change or withdraw your cookie choices later using the cookie privacy settings available on our website.

Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew it.

You can additionally control or delete cookies through your browser settings. However, disabling essential cookies may affect the operation of some website functions.

We do not treat continued browsing or simply using our website as consent to non-essential cookies.

The cookies and third-party technologies used on our website may change as the website develops. Our cookie consent tool may provide more detailed and up-to-date information about the individual cookies or services currently in use.

12. THIRD-PARTY LINKS

Our website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices of external websites. If you follow a third-party link, we recommend reviewing that organisation's privacy information before providing personal information to them.

13. CHANGES TO THIS POLICY

We may update this Privacy & Cookie Policy from time to time to reflect:

Changes to our services
Changes to the technologies we use
Changes to our service providers
Changes to applicable law or regulatory guidance

The latest version will be published on this page and the “Last updated” date will be revised when material changes are made.

We encourage you to review this policy periodically.

14. CONTACT US

If you have questions about this policy, how we use personal information or your privacy rights, please contact:

UYILO — by Contours by Mika

Email: uyilo.nails@gmail.com
You can also contact us using the contact form available on our website.