GDPR Policy

Last Updated: 15 September 2026

At Naturvale Supplements UK, we respect your privacy and are committed to protecting your personal information. This GDPR Policy explains how we collect, use, store and protect personal data when you visit our website, place an order or contact us.

This policy should be read together with our Privacy Policy.

1. Who We Are

Data Controller: [Business Legal Name]
Trading Name: Naturvale Supplements UK
Website: https://naturvalesupplements.co.uk/
Email: info@naturvalesupplements.co.uk
Address: [Registered Business Address]

For the purposes of applicable data protection law, we are responsible for deciding how and why your personal information is processed.

2. What Personal Data We Collect

Depending on how you interact with our website, we may collect:

  • Full name
  • Billing and delivery address
  • Email address
  • Telephone number
  • Order details and purchase history
  • Payment and transaction information
  • Account login details, where applicable
  • Customer service messages and enquiries
  • Website usage, device and technical information
  • Marketing preferences
  • Information you voluntarily provide when contacting us

We do not intentionally collect sensitive health information unless it is necessary for a specific service and you voluntarily provide it.

3. How We Use Your Personal Data

We may use your information to:

  • Process and deliver orders
  • Take payments and prevent fraudulent transactions
  • Provide customer support
  • Respond to enquiries and complaints
  • Manage returns, refunds and replacements
  • Maintain customer accounts
  • Improve our website, products and services
  • Send marketing communications where legally permitted
  • Meet legal, accounting and regulatory obligations
  • Protect our business, website and customers

4. Our Lawful Bases for Processing

We process personal data using one or more of the following lawful bases:

Contract: To process orders and provide services you request.

Legal Obligation: To comply with tax, accounting, consumer protection and other legal requirements.

Legitimate Interests: To operate, secure and improve our business, prevent fraud and respond to customer enquiries, where our interests do not override your rights.

Consent: Where you have voluntarily agreed to receive marketing communications or where consent is otherwise required.

You may withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully before consent was withdrawn.

5. Sharing Your Personal Data

We may share relevant information with trusted service providers who help us operate our business, including:

  • Payment processors
  • Website hosting and technology providers
  • Order fulfilment and delivery companies
  • Email and customer support platforms
  • Fraud prevention and security providers
  • Professional advisers, where necessary
  • Government, regulatory or law enforcement authorities where legally required

We do not sell your personal information.

Where third parties process data on our behalf, we take reasonable steps to ensure appropriate confidentiality and data protection arrangements are in place.

6. International Transfers

Some service providers may process personal data outside the UK. Where this occurs, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place, where required by applicable data protection law.

7. How We Protect Your Data

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

8. How Long We Keep Your Data

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, resolving disputes, meeting legal obligations and maintaining business records.

Retention periods may vary depending on the type of information and the reason it was collected.

9. Your Data Protection Rights

Subject to applicable law, you may have the right to:

  • Request access to your personal data
  • Ask us to correct inaccurate or incomplete information
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain processing
  • Request data portability
  • Withdraw consent where processing is based on consent
  • Complain to the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at:

Email: info@naturvalesupplements.co.uk

We may need to verify your identity before responding to certain requests.

10. Complaints

If you have concerns about how we use your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office:

Website: https://ico.org.uk/
Helpline: 0303 123 1113

11. Changes to This Policy

We may update this GDPR Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.