Privacy Policy

Who we are

This website is operated by S Myers Limited, trading as Natrul. Registered in England and Wales, company number 11979212. Our registered address is 66 Sandpiper Road, Southampton, SO16 8FF.

For any privacy-related questions, contact us at hello@natrul.co.uk.

We are the data controller for personal information collected through natrul.co.uk. We supply businesses and the trade, so most of the information we hold is business contact information.

What information we collect

We collect personal information in the following ways:

• When you send an enquiry or a sample request — your name, email address and phone number, your company and role, the details of your project, and a delivery address for samples.
• When you place an order — name, billing and delivery address, email address and phone number. If you pay online, card details are processed by our payment provider and never stored on our servers.
• If you have an account with us — name, email address and password (stored in encrypted form).
• When you subscribe to our newsletter — your email address, and optionally your name.
• When you browse the site — if you accept cookies, analytics data through Google Analytics and advertising measurement data through Reddit (see Cookies below).

How we use your information

We use your personal information to:

• Reply to your enquiry and send samples, quotations and technical information.
• Process and fulfil your orders, including delivery and any installation you ask us to arrange.
• Keep in touch with you about your project, order or enquiry.
• Send you email updates, where you have opted in. You can unsubscribe at any time using the link in any email.
• Understand how visitors use our website so we can improve it (with your consent).
• Measure how well our advertising works (with your consent).
• Meet our legal obligations, including financial record-keeping.

Lawful basis for processing

We process your data under the following legal bases:

• Contract — preparing a quotation you ask for, and fulfilling an order you place.
• Legitimate interest — responding to your enquiries, preventing fraud and improving our service.
• Consent — email updates, analytics cookies and advertising measurement. You may withdraw consent at any time.
• Legal obligation — retaining financial records as required by law.

Cookies and similar technologies

Some cookies are strictly necessary for the site to work, such as session and security cookies, and are always active. The finishes you add to a sample request are saved in your own browser so the list is still there when you come back. They are not sent to us until you submit the form.

We would also like to use two kinds of non-essential cookie. We only switch them on if you accept cookies in the banner shown on your first visit:

• Analytics (Google Analytics) — to understand how visitors use this site, including pages viewed, time spent and general location (country level).
• Advertising measurement (Reddit) — the Reddit Pixel and Reddit Conversions API tell us whether people who saw our adverts on Reddit went on to visit the site, and which pages they viewed. Reddit may also use this information under its own privacy policy.

If you decline, no analytics or advertising cookies are set and Reddit’s measurement does not run. You can change your choice at any time by clearing the stored data for natrul.co.uk in your browser, which brings the banner back.

Who we share your data with

We do not sell your personal data. We share it only where necessary:

• Installers — if you ask us to supply and install, the approved installer we appoint for your project receives the site address and the contact details they need.
• Delivery providers — your name and delivery address are passed to the courier delivering your order or samples.
• Payment processors — payment data is handled by our payment provider under their own PCI-compliant systems.
• Email marketing (Brevo) — your email address and name are stored with Brevo (formerly Sendinblue) if you have subscribed to our mailing list.
• Google — browsing data, if you have accepted cookies.
• Reddit — advertising measurement data, if you have accepted cookies.
• Legal authorities — where required by law or court order.

All third parties we work with are required to handle your data in accordance with UK GDPR. Some of them, including Google, Reddit and Brevo, may process data outside the UK. Where they do, they must protect it with safeguards recognised under UK data protection law.

How long we keep your data

• Order records are kept for 7 years to satisfy HMRC requirements.
• Account data is kept for as long as your account remains active, then deleted within 12 months of your last login or account deletion request.
• Marketing preferences are kept until you unsubscribe or request deletion.
• Enquiry and contact records are kept for 2 years.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to processing based on legitimate interest.
• Withdraw consent at any time where processing is based on consent.
• Request portability of your data in a machine-readable format.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

Data security

Our website uses HTTPS encryption. Access to customer data is restricted to authorised personnel only. We do not store payment card data on our servers.

While we take reasonable precautions, no method of transmission over the internet is completely secure. In the unlikely event of a data breach that affects your rights, we will notify you and the ICO as required by law.

Children

Our site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Significant changes will be communicated to registered customers by email.

Contact us