Privacy notice
Last updated: 4 November 2026
This notice explains how Thalen Limited uses the personal data you give us when you join the Novlen waitlist on novlenbeauty.com, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
Novlen is a brand of Thalen Limited, a company registered in England and Wales (company number 16569601), registered office 86-90 Paul Street, London EC2A 4NE. Thalen Limited is the controller of your personal data.
To contact us about your data, email hello@novlenbeauty.com.
2. What we collect
- Your first name and email address.
- Your preferred shade, if you choose to tell us.
- A record of your consent: the date and time you joined and the wording you agreed to.
We do not ask for, and you should not send us, any information about your health or skin conditions.
3. How we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Email you news about Novlen's launch, early access and launch events | Your consent (UK GDPR Article 6(1)(a)), given by ticking the box on the sign-up form |
| Use shade preferences, in aggregate, to decide which shades to make first | Your consent, given when you choose a shade |
| Keep a record of your consent and of any request to unsubscribe | Our legitimate interest in showing we follow the law (Article 6(1)(f)) |
We will not use your details for any other purpose, and we will never sell them.
4. Withdrawing consent
You can withdraw your consent at any time, free of charge, by using the unsubscribe link in any email we send or by emailing hello@novlenbeauty.com. We will stop emailing you straight away. Withdrawing consent does not affect anything we did before you withdrew it.
5. Who we share it with
We share your data only with the service providers who help us run the waitlist, under contracts that require them to keep it secure and use it only on our instructions:
- Namecheap, which hosts this website and stores the waitlist.
- An email service provider that we may use to send launch emails.
We do not share your data with anyone else unless the law requires it.
6. International transfers
Some of our service providers may store or process data outside the UK, including in the United States. Where they do, we rely on the safeguards permitted under UK law, such as the UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Addendum.
7. How long we keep it
We keep your details until you unsubscribe or ask us to delete them, or for 12 months after Novlen launches, whichever comes first. After that we delete them. If you unsubscribe, we keep only your email address on a suppression list so that we do not contact you again.
8. Cookies and third-party content
This site does not use tracking or advertising cookies. The page loads its typefaces from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when the page loads.
9. Security
The site uses an encrypted connection (HTTPS). Waitlist records are stored outside the public part of our web hosting and are accessible only to us.
10. Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct it;
- ask us to delete it;
- ask us to restrict how we use it, or object to our using it;
- receive it in a portable format;
- withdraw your consent at any time.
To use any of these rights, email hello@novlenbeauty.com. We will reply within one month.
11. Complaints
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
12. Changes to this notice
If we change this notice, we will update the date at the top. If a change is significant, we will tell you by email before it takes effect.