1. Introduction

Natural Herbal Wellness Co ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, in compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. Data Controller

Natural Herbal Wellness Co is the data controller responsible for your personal data. For any privacy-related queries, please contact us at: privacy@naturalherbalwellness.co

3. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, login provider, and account preferences
• Wellness Assessment Data: Questionnaire responses, uploaded photos where you choose to provide them, and saved wellness goals
• Invite and Contact Data: Topic interests, invite requests, newsletter preferences, and support messages you submit
• Payment Information: Billing details processed securely through third-party payment processors if you choose a paid feature
• Usage Data: IP address, browser type, pages visited, time spent on pages
• Cookies: Session cookies, preference cookies, analytics cookies (with consent)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: For optional wellness assessment inputs, marketing communications, and optional cookies
• Contract Performance: To provide account features or paid services you choose
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Legal Obligation: To comply with UK tax and regulatory requirements

5. How We Use Your Information

• To provide personalised Ayurvedic wellness education, assessments, and saved account features
• To process payments where you choose a paid plan, guide, consultation, or other paid feature
• To send account/service updates and, only where consent is valid, educational newsletters or promotional materials
• To analyse usage patterns and improve our platform
• To comply with legal obligations and protect our rights

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• Service Providers: Authentication, hosting, analytics, email, and payment providers under appropriate data protection terms
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In the event of a merger or acquisition (with notice to you)

7. International Data Transfers

Your data may be transferred to and stored on servers outside the UK/EEA. We ensure adequate safeguards through Standard Contractual Clauses and ensure all processors are GDPR-compliant.

8. Data Retention

We retain personal data for as long as necessary to provide services and comply with legal obligations. Assessment data is retained for 7 years unless you request deletion. Inactive accounts are deleted after 3 years of inactivity.

9. Your Rights Under UK GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Data Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (without affecting lawful processing prior)

To exercise these rights, contact us at privacy@naturalherbalwellness.co. We will respond within 30 days.

10. Cookies

We use essential cookies for site functionality and optional cookies (with your consent) for analytics and marketing. You can manage cookie preferences through our cookie banner or browser settings. Essential cookies cannot be disabled as they are necessary for the site to function.

11. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately.

12. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email where appropriate or by prominent notice on our website. Continued use after changes constitutes acceptance.

14. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): www.ico.org.uk

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact:
Email: privacy@naturalherbalwellness.co
Address: Natural Herbal Wellness Co, England & Wales