Legal
Privacy Policy
Last updated 2026. This policy explains what we do with your personal data when you shop with us.
1. Who we are
Ovara Global Ltd, trading as Beverly Hills, Registered Office: 20 Wenlock Road, London N1 7GU, is the data controller for personal data collected through this website.
For any privacy question, or to exercise your rights, contact us through the Contact page.
2. Data we collect
Account and order data: name, email address, delivery and billing address, order history, subscription preferences.
Payment data: handled by our payment provider. We receive confirmation of payment and limited card metadata (such as card type and last four digits); we never see or store your full card number.
Communications: messages you send through the contact form, including the topic you select.
Technical data: IP address, device and browser information, and pages visited, used to keep the site secure and working correctly.
3. Why we use it
To take and fulfil your orders, manage subscriptions, provide customer support, and handle returns — this is necessary to perform our contract with you.
To meet legal duties such as tax and accounting records.
To protect the site against fraud and abuse, and to improve our products and pages — our legitimate interests.
To send marketing email only where you have opted in. You can unsubscribe at any time from any marketing email.
4. Who we share it with
Our payment provider, to process payments securely.
Royal Mail Click & Drop, to produce labels and deliver your parcel — this includes your name, delivery address and contact details.
Our hosting, database and email providers, acting on our instructions.
We do not sell your personal data.
5. Cookies
We use cookies and similar storage that are strictly necessary to run the site: keeping you signed in, remembering your basket, and completing checkout securely. You can block cookies in your browser, but parts of the site will stop working.
6. How long we keep it
Order and transaction records are kept for six years to satisfy UK tax and accounting requirements. Account data is kept while your account is active. Contact form messages are kept for up to two years. Marketing preferences are kept until you withdraw consent.
7. Security
Data is stored on managed infrastructure with encryption in transit, access controls and row-level restrictions so that customers can only see their own records. Administrative access is limited to named staff.
8. Your rights
You have the right to access your data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent to marketing at any time.
To make a request, contact us through the Contact page. If you are unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk).
9. International transfers and changes
Some of our providers process data outside the UK. Where they do, transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum.
We may update this policy; the current version always appears on this page.