Privacy Policy
Your privacy is important to us
Last updated: 20 March 2026
NATUROMY ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website naturomy.uk, use our services, or make a purchase from us. Please read this privacy policy carefully.
Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you:
- Place an order or make a purchase
- Create an account
- Sign up for our newsletter
- Contact our customer service
- Participate in surveys or promotions
This information may include: name, email address, postal address, phone number, payment information, and order history.
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device, including:
- IP address and location data
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website addresses
- Clickstream data
Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.
How We Use Your Information
We use the information we collect for the following purposes:
- Process and fulfill your orders
- Communicate with you about your orders and account
- Send you marketing communications (with your consent)
- Improve our website and customer experience
- Detect and prevent fraud and security threats
- Comply with legal obligations
- Analyze website usage and trends
- Provide customer support
- Personalize your shopping experience
Legal Basis for Processing
Under the UK General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
Contract Performance
Processing is necessary to fulfill our contract with you (e.g., processing orders)
Consent
You have given explicit consent for marketing communications
Legitimate Interests
Processing is necessary for our legitimate business interests (e.g., fraud prevention, website improvement)
Legal Obligation
Processing is required to comply with UK law (e.g., tax and accounting requirements)
How We Share Your Information
We may share your information with trusted third parties who assist us in operating our website and conducting our business:
Payment Processors
We use Stripe to process payments securely. Your payment information is transmitted directly to Stripe and is not stored on our servers.
Shipping Partners
We share delivery information with courier services to fulfill your orders.
Analytics Providers
We use Google Analytics to understand how visitors use our website.
Email Service Providers
We use email marketing services to send newsletters and promotional communications.
We do not sell, trade, or rent your personal information to third parties for their marketing purposes. All third-party service providers are required to maintain the confidentiality of your information.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data transmission
- Secure payment processing through PCI-DSS compliant providers
- Regular security audits and updates
- Access controls and authentication
- Employee training on data protection
However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
- Order information: 7 years (for tax and accounting purposes)
- Account information: Until account deletion or 3 years of inactivity
- Marketing communications: Until you unsubscribe
- Website analytics: 26 months
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right to Access
You can request a copy of the personal data we hold about you
Right to Rectification
You can request that we correct any inaccurate or incomplete data
Right to Erasure
You can request that we delete your personal data (subject to legal obligations)
Right to Restriction
You can request that we restrict the processing of your data
Right to Data Portability
You can request a copy of your data in a machine-readable format
Right to Object
You can object to our processing of your data for certain purposes
Right to Withdraw Consent
You can withdraw your consent for marketing communications at any time
To exercise any of these rights, please contact us at privacy@naturomy.uk
Children's Privacy
Our website and services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
International Data Transfers
Your information may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the UK Information Commissioner
- Transfers to countries with adequate data protection laws
- Other appropriate safeguards as required by UK GDPR
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@naturomy.uk
General Inquiries: hello@naturomy.uk
Data Protection Officer: dpo@naturomy.uk
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately. Visit ico.org.uk for more information.