Privacy policy

This policy explains what we do with your personal information when you visit this website, place an order, sign up to our newsletter or contact us. We are committed to handling your information carefully and only using it for the reasons set out below.

1. Who is responsible for your data

NATURE-AL'S SELECTIONS is the data controller for the personal information described in this policy.

• Email: hello@nature-als-selections.co.uk
• Address: 4 Heather Way, Romford, England, RM1 4TA

2. What we collect and why

When you place an order

We collect and keep:

• your name, email address and telephone number;
• your billing and delivery address;
• details of what you ordered and the amount paid;
• your order reference and the reference Stripe gives the payment.

Why: to take payment, send your order, keep you updated and deal with any returns or queries. Lawful basis: performance of our contract with you.

Stripe Checkout also asks whether you would like one email reminder if you leave before completing payment. We send it only when you actively choose “Yes”. It contains a secure link back to your Checkout and a simple way to stop future checkout reminders. Lawful basis: your consent, which you can withdraw at any time.

We never see or store your card details. Card payments are handled entirely by Stripe on their own secure checkout pages.

When you join our newsletter or waitlist

We store your email address and the date you signed up.

Why: to send you product news and offers. Lawful basis: your consent, which you can withdraw at any time.

When you contact us

We keep your name, email address and the content of your message.

Why: to answer you and keep a record of the conversation. Lawful basis: our legitimate interest in responding to enquiries.

When you browse the site

Our server keeps standard access logs (IP address, browser type, pages requested) and we set a session cookie so your basket works. See our cookie policy.

Lawful basis: our legitimate interest in keeping the site secure and working properly.

3. Who we share it with

We share your information only with the businesses that help us run the shop:

• Stripe — payment processing. Stripe acts as its own data controller for payment data. See the Stripe privacy policy.
• Our delivery carrier (such as Royal Mail) — your name and delivery address, so your parcel can be delivered.
• Our email and hosting providers — who store the data on our behalf under contract.

We do not sell your personal information, and we do not share it for anyone else's marketing. We may disclose information where we are required to by law.

4. Where your data is held

Your data is stored on servers within the UK or European Economic Area wherever possible. Some of our providers, including Stripe, may process data outside the UK. Where that happens, they do so under safeguards approved for international transfers, such as the UK International Data Transfer Agreement or standard contractual clauses.

5. How long we keep it

• Order records: 6 years after the end of the tax year they relate to, because HMRC requires it.
• Checkout reminder records: retained with the related order; email addresses are represented in the reminder log by a keyed hash. We retain a hashed suppression record where needed to honour an opt-out.
• Newsletter subscriptions: until you unsubscribe, and then we keep a record of the unsubscribe so we do not email you again.
• Contact enquiries: up to 2 years after the enquiry is resolved.
• Server logs: typically a few weeks, then deleted or overwritten.

6. Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal information we hold about you;
• have inaccurate information corrected;
• ask us to delete your information, where we do not have to keep it;
• object to, or ask us to restrict, how we use it;
• ask us to transfer it to another provider;
• withdraw consent for marketing at any time.

To exercise any of these, email hello@nature-als-selections.co.uk. We will respond within one month. There is normally no charge.

7. Marketing emails

You can unsubscribe from our newsletter at any time using the link in any email we send, or by emailing us. We will stop sending marketing straight away.

Abandoned-checkout reminders are separate from the newsletter. We send at most one for an individual checkout, only after an explicit “Yes”, and limit repeat reminders to the same address. Each reminder includes its own preference link.

8. Keeping your data safe

The site runs over an encrypted HTTPS connection, payments are handled by Stripe, and access to our order records is restricted. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

9. Children

Our shop is not intended for under-18s and we do not knowingly collect data about children.

10. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, or by calling 0303 123 1113.

11. Changes to this policy

If we change how we use your information we will update this page and change the date at the top.