Privacy Policy
Our Privacy Policy
Your privacy is important to us and we respect the rights of our users. Protecting personal data is equally important to us.
On this page we detail how we use your data, how we safeguard your data when you visit this website and we cover your rights related to data protection and privacy.
1. Introduction and identity
2. Personal data we collect
3. How we collect personal data
4. How we shall use the personal data
5. Parties we may share the personal data with
6. Data transfers
7. Security of personal data
8. Retention of personal data
9. GDPR rights
10. Changes to this privacy policy
11. Contacting Us
1. Introduction and identity
This privacy policy page serves to inform you regarding the collection and processing of your personal data. Such data may be collected through your use of this website and/or when you enter your details as you place an order with us for products.
This website is not for the use of children. We do not intentionally collect data relating to children.
Please read through this privacy policy along with any other additional privacy policies/policy supplements we may have published on other specific occasions where there is collection and/or processing of personal data involved. This is so that you can be made fully aware of exactly why and how we use personal data.
Data Controller identification
C. Duran and S. Khan trading as innovative-naturopathics.co.uk is the 'data controller' in this policy and is the responsible party for your personal data (herein collectively referred to as "innovative-naturopathics.co.uk", "we", "us" or "our").
Data Controller contact details
Innovative Naturopathics
Unit D5 Devon Business Park
Cullompton
Devon
EX15 1BS
United Kingdom
Tel. 01884 33037 / 0044 1884 33 037 (International Dialing)
Email. service [at] i-n.co.uk
Third-party URL links outside of our control
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
We suggest that you should read the privacy policy of every website you visit, especially websites that we have linked to from our website.
2. Personal data we collect
Personal data, or personal information or personally identifiable information, means any information about an individual from which that person can be identified. You can find out more about personal data from the Information Commissioners Office.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together:
Contact Data includes Name, Billing/Delivery Address, Email Address and Telephone Numbers.
We may also collect statistical data related to the use of our website or a specific feature of our website. We may do this in order to improve the layout, design and functionality of the website. We may also use this data to identify problems or diagnose an issue a user may be experiencing.
We do not collect any 'Special Categories' of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health or genetic or biometric data). Nor do we collect any information about criminal convictions and offences.
Failing to provide personal data to us when required
Where we need to collect personal data by law, or to fulfill a contract with you (exchanging funds by whatever method for products and delivery of products) and you do not provide the needed data when requested, we may not be able to perform the contract we have or are trying to enter into with you. If such a situation arises, we will cancel the order and issue a refund.
3. How we collect personal data
When you place an order: as part of the checkout and payment process you would supply your Name, Delivery address, Email address and possibly a phone number in order for us to fulfill your order and deliver it to you.
By correspondence: by post or email or social media or other messaging system we may offer or by phone.
4. How we shall use the personal data
We shall use personal data only when the laws allows us to. There are 4 ways in which we may use personal data:
Replying to correspondence
A - Where you have contacted us directly, or as a result of marketing material with a view to enter into a contract with us (to supply goods or services to you).
Performance of a contract
B - This is where we fulfill your order - where you have paid for goods or services from us and we use your personal data to deliver those goods or services to you.
Marketing
C - This is where you have supplied us with contact information with a positive 'opt-in' indication. For example, where you have entered your email address into a newsletter field on our website to receive that newsletter or where you have signalled during the checkout process that you willing to receive marketing contact and/or materials in future as you are placing your order.
Comply with a legal or regulatory obligation
D - This is where it is required of us to process personal data in order to comply with a legal or regulatory obligation. For example, keeping accounting records for financial reporting to tax authorities.
GDPR Legal bases
The legal basis for a particular processing of data is different depending on a number of factors. Here we detail each of the items above (A to D) and the GDPR legal basis for each
A - Basis: 'Consent' or 'Contract'. Type(s) of data: (a) Identity, (b) Contact
B - Basis: 'Contract'. Type(s) of data: (a) Identity, (b) Contact
C - Basis: 'Consent'. Type(s) of data: (a) Identity, (b) Contact
D - Basis: 'Legal Obligation'. Type(s) of data: (a) Identity, (b) Contact
Marketing (third parties)
If we wish to share personal data with another company for the purpose of their marketing, we will seek your express positive consent before any sharing takes place.
Withdrawing consent ('Opting-out')
You may decide at any time that you wish to withdraw your consent to receiving marketing materials or communications either by using links supplied in emails, social media systems or by contacting us directly.
Change of purpose
Your personal data can only be used for the purpose(s) as stated above. If for some reason we decide that we need to use the data for another purpose, that purpose must be still be compatible with the original purpose.
We may need to use personal data for a new purpose not already detailed in this policy. If that happens we will contact you and detail the legal basis of the new purpose which allows us to use the data.
In certain circumstances, we can might process personal data without consent or knowledge, but still remaining within the policy above and where it is lawful.
5. Parties we may share the personal data with
We may need to share your personal data with other parties so as to delivery an order to you or comply with a legal requirement or request. Parties we may share your data with:
1. Delivery Couriers (eg Royal Mail, DPD, DHL or any other delivery company we choose to use)
2. Payment Processors (eg Paypal, Shopify or other payment processor we choose to use)
3. HMRC (and/or customs/tax authorities in other countries as may be necessary). Other official authorities or regulators or law enforcement where there is a legal obligation for reporting of transactional data or where it is reasonable and necessary to report data for reasons of safety and/or to prevent crime.
4. Our professional agents - such as company accountants, company auditors or other professional.
Other parties use of personal data
Any third party as detailed above who receives your personal data is required to treat it lawfully. Third parties are not permitted to use your personal data for their own purposes (eg marketing) and they may only process your personal data for the reasons we supply it (eg delivering an order).
Changes to our business
In the future our business may undergo a change if we were to sell, or transfer or partially merge our business or assets of it. We may also aquire another business or multiple businesses and/or merge. In any case, any such change means that personal data must still be processed as stated in this privacy policy and any new owners shall be required to be bound by this policy.
6. Data transfers
Personal data is not transferred outside of our safe-keeping beyond the use cases detailed above.
7. Security of personal data
Keeping personal data safe from unauthorised access is just as important as the collection and processing of it. We utilise appropriate means of securing your personal data from unauthorised access, use or disclosure, loss or alteration. Access to personal data is limited to employees, agents, contractors or other parties on a need to know basis and all have a duty of confidentiality.
Data breaches
In the event of a security incident involving your personal data, we will inform you and any required regulator of the breach where we have a legal duty to do so.
8. Retention of personal data
Personal data is retained only for that time period for which it was collected for and for any legal reasons required of us, such as financial reporting. We are lawfully required to retain basic information about our customers including contact data, identity, financial and transactional data for 7 years. This is simply for financial and tax reporting.
9. GDPR rights
Under the 'General Data Protection Regulations' the person to whom personal data relates, is given certain rights regarding their personal data. The rights do not apply if there is a legal exemption. Your rights are set out below.
a. To request a copy of your personal data.
b. To make corrections to your personal data.
c. To request your personal data is deleted once there is no longer good cause to retain it.
d. To cancel your consent to processing your data if the original legal basis used was 'Consent'.
e. To request restriction on processing your data if there is a dispute regarding its accuracy.
f. To request that we provide you with your personal data and send the data to a data 'Controller' of your choice if possible and needed. This is if the processing if based on the legal basis of 'Consent', or 'Contract' or where the data processing happens automatically.
g. To object to processing your personal data when that processing uses the legal basis 'Legitimate interests', or where the processing is for 'Direct marketing', or where the processing is in the public interest or it is done for an official authority, or where the processing is for historic/scientific statistical research.
If you wish to exercise any of the rights set out above, please contact us.
When making a request under GDPR rights
Before you can exercise any of your rights we may need to request an identity document from you before proceeding to confirm your right(s) in accessing your personal data. This is to ensure that no other person can access your personal data. We may also need to request more information from you to make our response quicker.
Fees
Under normal circumstances there is no fee to pay for exercising any of the rights above and having access to personal data.
If a request is excessive, repeated or clearly unfounded we charge an admin fee or we can refuse the request.
Request response period
Generally we deal with all legitimate requests within 30 days. The process can be longer if there are multiple requests and/or there is extra complexity, in which case we will keep you updated with our progress.
10. Changes to this privacy policy
We may need to make changes and update this policy. We may do so at any time.
11. Contacting Us
In order to make a complaint, or if you have a query, or if you wish to exercise a right please contact us here or write to us at the address detailed at the top of this policy.
If you feel your issue is not resolved you can contact the Information Commissioners Office at https://ico.org.uk/
Cookie Policy
We use cookies purely for the functionality of our website and understanding how our users are using it to improve your experience.
