Privacy Policy

Who we are

This website is operated by S Myers Limited, trading as Natrul. Registered in England and Wales, company number 11979212. Our registered address is 66 Sandpiper Road, Southampton, SO16 8FF.

For any privacy-related questions, contact us at hello@natrul.co.uk.

We are the data controller for personal information collected through natrul.co.uk.

What information we collect

We collect personal information in the following ways:

• When you place an order — name, billing and delivery address, email address, phone number, and payment details. Payment card data is processed securely by our payment provider and is never stored on our servers.
• When you create an account — name, email address, and password (stored in encrypted form).
• When you contact us — your name, email address, and the contents of your message.
• When you request a sample — name and delivery address.
• When you subscribe to our newsletter — your email address, and optionally your name.
• When you browse the site — with your consent, we collect analytics data via Google Analytics (see Cookies section below).

How we use your information

We use your personal information to:

• Process and fulfil your orders, including delivery and returns.
• Communicate with you about your order or enquiry.
• Send you email updates and promotions, where you have opted in. You can unsubscribe at any time using the link in any email.
• Understand how visitors use our website so we can improve it (analytics, with consent only).
• Meet our legal obligations, including financial record-keeping.

Lawful basis for processing

We process your data under the following legal bases:

• Contract — processing necessary to fulfil an order you have placed.
• Legitimate interest — responding to your enquiries, preventing fraud, improving our service.
• Consent — email marketing and analytics cookies. You may withdraw consent at any time.
• Legal obligation — retaining financial records as required by law.

Cookies and analytics

We use Google Analytics to understand how visitors use this site. This service sets cookies on your device that collect information about your visit, including pages viewed, time spent, and general location (country level).

Google Analytics cookies are non-essential. We only activate them if you accept cookies via the consent banner when you first visit the site. You can change your preference at any time by clearing your browser's local storage for natrul.co.uk.

We do not use cookies for advertising or to track you across other websites.

Strictly necessary cookies (such as your shopping basket and session data) are always active as they are required for the site to function.

Who we share your data with

We do not sell your personal data. We share it only where necessary:

• Delivery providers — your name and delivery address are passed to the courier fulfilling your order.
• Payment processors — payment data is handled by our payment provider under their own PCI-compliant systems.
• Email marketing (Brevo) — your email address and name are stored with Brevo (formerly Sendinblue) if you have subscribed to our mailing list.
• Google Analytics — anonymised browsing data is shared with Google if you have consented to analytics cookies.
• Legal authorities — where required by law or court order.

All third parties we work with are required to handle your data in accordance with UK GDPR.

How long we keep your data

• Order records are kept for 7 years to satisfy HMRC requirements.
• Account data is kept for as long as your account remains active, then deleted within 12 months of your last login or account deletion request.
• Marketing preferences are kept until you unsubscribe or request deletion.
• Enquiry and contact records are kept for 2 years.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to processing based on legitimate interest.
• Withdraw consent at any time where processing is based on consent.
• Request portability of your data in a machine-readable format.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

Data security

Our website uses HTTPS encryption. Access to customer data is restricted to authorised personnel only. We do not store payment card data on our servers.

While we take reasonable precautions, no method of transmission over the internet is completely secure. In the unlikely event of a data breach that affects your rights, we will notify you and the ICO as required by law.

Children

Our site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Significant changes will be communicated to registered customers by email.

Contact us