Privacy Policy and Cookie Policy

WEBSITE PRIVACY NOTICE

We provide you with this privacy notice ("Privacy Notice"), as a user of our website (https://naturespell.co.uk/) ("Our Website"). Our Website is operated and provided by Gold 22 UK Limited, trading as Nature Spell, having its registered office at 15a Alperton Lane, Perivale, Greenford, Middlesex, UB6 8DH (the "Company", "we", "us", "our"). Any references to "you" and "your" are references to a user of Our Website.

What do we do with your information?
- This Privacy Notice explains what personal data the Company collects from you, or that you provide to us, what we will use it for and with whom we share that information. The Privacy Notice also sets out your rights and who you can contact for more information. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
- The Company is a controller of your personal data, which means we decide how to process your personal data and have certain responsibilities in relation to your personal data. Personal data means any information that can be directly or indirectly related to you.
- Our processing of your personal data will be carried out in compliance with all applicable legislation relating to privacy or data protection in force from time to time, and in particular to the extent applicable and without limitation the General Data Protection Regulation 2016/679 as it forms part of the domestic law of the United Kingdom by virtue of the European Union (Withdrawal) Act 2018 ("UK GDPR") and the Data Protection Act 2018 (together "Data Protection Legislation"). Personal data is widely defined under Data Protection Legislation, and means data relating to a living individual who can be identified, directly from that data (or indirectly from that data and other information in our possession). Personal data can be factual (such as a name, address or date of birth) or it can be an opinion about the individual.
How we collect your personal data
- Information you give to us: when you purchase something from Our Website, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
- Information we automatically collect: when you browse Our Website, we also automatically receive your computer’s internet protocol address in order to provide us with information that helps us learn about your browser and operating system.
- We also may automatically collect certain types of personal data by using cookies and other similar technologies. For more information, please see our Cookies Policy.
Personal data we collect

The personal data we process may include:

Communication Data	Personal data that you provide to us when you contact us, for example your name, contact details (home address, email address and telephone number), details of your query and any extra information that you choose to tell or provide to us.
Transaction Data	Personal data that you provide to us when you purchase a product on Our Website, for example your name, contact details (home address, email address and telephone number), financial details (credit card details, billing address).
Device and Web Data	Online identifiers (including IP address), device information and information about your visit to Our Website (including the full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time), length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page).

How we use your personal data

Data Protection Legislation requires that we process your personal data for purposes that we tell you about and only where we have a lawful basis to do so. The below table sets out our purposes of processing, the lawful basis of processing we rely on, and the personal data processed for that purpose.

Purpose of processing	Lawful basis of processing	Personal Data
To complete a transaction, process an order, arrange for a delivery or return a purchase on Our Website	Our legitimate interests (to provide, run and administer Our Website for you to purchase our products) Performance of contract (to allow us to complete a transaction with you) Consent (by providing us with your Transaction Data, you consent to us processing it for the purposes of that transaction)	Transaction Data
We may communicate with you to process and answer your enquiries or to contact you to answer your questions and/or requests	Our legitimate interests (managing consumer and business enquiries) Performance of contract (sending transactional information about your account and purchases or engaging with your business)	Communication Data
Sending marketing communications to provide you with further and more detailed information about our store, new products and other updates in line with your specified preferences	Consent (to provide you marketing email and text communications)	Communication Data
To provide personalised products, communications and targeted advertising to you	Consent (for the deployment of tracking technologies on Our Website) Legitimate interest (to serve you relevant advertising and suggested products across different media channels, including on social media platforms)	Communication Data, Device and Web Data
Recordkeeping and Auditing	Legal obligation (for certain recordkeeping activities)	Transaction Data
To provide you with a safe, smooth, efficient, and customised experience on Our Website	Our legitimate interests (to provide, run and administer Our Website)	Communication Data, Device and Web Data
To ensure that the content on Our Website is presented in the most effective manner for you and your device	Our legitimate interests (to provide you with content relevant to you in the most optimum format)	Device and Web Data
To administer Our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes	Our legitimate interests (to run and administer our website and to evaluate, develop and improve our services) Consent (where applicable, where we have obtained consent from you to use your personal data for these purposes)	Device and Web Data
As part of our efforts to keep Our Website safe and secure	Our legitimate interests (to maintain the security of Our Website)	Device and Web Data

Third-party services
- In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
- The Company may disclose your personal data to the following categories of third-party recipients where we consider it necessary for the purposes set out in this Privacy Notice:
  - Google Analytics: to help us learn about who visits Our Website and what pages are being looked at;
  - Third party service providers: this includes third parties which host Our Website, process payments, analyse data, provide customer service and postal or delivery services; and
  - Legal, tax and accounting advisors.
- Where required by law, we may disclose your personal information to third-party providers.
- We will ensure that if we share information with, or provide access to, third party service providers, any such disclosure or access is at all times in compliance with Data Protection Legislation.
- Certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
- In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
- Once you leave Our Website or are redirected to a third-party website or application, you are no longer governed by this Privacy Notice or Our Website’s Terms and Conditions.
- When you click on links on our online store, they may direct you away from Our Website. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
- This Privacy Notice relates only to personal data contained on, or gathered via, Our Website.
Security
- We take your online security seriously and maintain appropriate physical, organisational and technical measures so as to prevent any loss, misuse, unauthorised access, disclosure or modification of your personal data.
- Although no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee the security of your personal data transmitted to us through Our Website, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
How long we keep your personal data

We will only keep your personal data for as long as it is required for the purposes for which it was collected as set out in this Privacy Policy, or as required to comply with applicable law or to defend or enforce our legal rights. It will vary depending upon the personal data.

Overseas transfers of personal data
- We may transfer your personal data to a recipient based in a country outside of the UK and/or European Economic Area ("EEA"). Where we do so, we will ensure that such transfer is in accordance with our obligations under Data Protection Legislation.
- For example, this may involve transferring your personal data to a jurisdiction deemed to provide an adequate level of protection of your personal data by the UK and/or European Commission. Other times, the recipient may be in a jurisdiction which has less stringent laws relating to personal data. In these circumstances, the Company will put in place appropriate safeguards to ensure that your personal data remains adequately protected, which may include entering into appropriate standard contractual clauses with the recipient of the data such as the International Data Transfer Agreement or the EU Standard Contractual Clauses alongside, where applicable, the UK Addendum to the EU Standard Contractual Clauses.
- If you would like more details about the safeguards we rely on, please contact us using the contact details set out below.
Your rights in relation to your personal data
- You have various rights in relation to the personal data we hold about you. You have the right to:
  - request access to or a copy of any personal data which we hold about you;
  - rectification of your personal data, if you consider that it is inaccurate or incomplete;
  - to erasure of your personal data, if you consider that we do not have the right to hold it;
  - restrict processing of your personal data;
  - data portability (moving some of your personal data elsewhere); and
  - object to your personal data being processed in a particular situation, which you may exercise if we rely on the fact that the processing is necessary for the purpose of legitimate interests pursued by the Company in order to carry out that processing.
- Where we rely on consent to process your personal data, you also have the right at any time to withdraw any consent you give to our processing of your personal data.
- Any request for access to or a copy of your personal data must be in writing and we will respond within any time limits provided for in Data Protection Legislation.
- However, please note that some of these rights may not always apply, as there are sometimes requirements and exemptions which may mean we need to keep processing the personal data or not disclose it, or other times when the rights may not apply at all. We will always tell you if we think we do not have to comply.
- To exercise any of your rights, please contact us at any time using the contact details below.
Automated processing

We do not carry out automated decision-making, including profiling in relation to your personal information.

Changes to this Privacy Notice

We reserve the right to modify this Privacy Notice at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on Our Website.

Contact information and right to complain
- If you would like to exercise any of your rights, register a complaint, or simply want more information, please contact us at data@naturespell.co.uk.
- You also have the right to complain to the regulator about the Company's information rights procedures. In the UK, the relevant regulator is the ICO and their contact details are available here: https://ico.org.uk/make-a-complaint/.

Date last updated: March 2024

Gold 22 UK Limited

COOKIE POLICY

We provide you with this cookie policy ("Cookie Policy") as a user of our website (https://naturespell.co.uk/) ("Our Website"). Our Website is operated and provided by Gold 22 UK Limited, the owners of Nature Spell, having its registered office at 15a Alperton Lane, Perivale, Greenford, Middlesex, UB6 8DH (the "Company", "we", "us", "our"). Any references to "you" and "your" are references to a user of Our Website.

Introduction
- We set and use cookies on your device to enhance your browsing experience by obtaining information on how you access and use Our Website.
- We use the word "cookie" in this Cookie Policy to refer to all technologies that collect information in this way. This Cookie Policy explains what cookies are, what cookies we use, how we use them on Our Website, and your choices regarding their use.
What are Cookies?

Cookies are small text files that are placed on your device by websites that you visit. Cookies are then sent back to the originating website during your browsing session or on each subsequent visit, or to another website that recognises that cookie. They are widely used to make websites work, or work more efficiently, as well as to provide information to the site owners. There are two main kinds of cookies: "session" cookies and "persistent" cookies. Session cookies are deleted from your device when you close your browser, while persistent cookies remain on your device until they expire, or you delete them.

Types of Cookies We Use
- Our Website uses the following types of cookies:
  - Essential Cookies: These cookies are necessary for Our Website to function such as security, network management, and accessibility and cannot be switched off in our systems.
  - Analytical/Performance Cookies: These allow us to recognize and count the number of visitors to Our Website and to see how visitors move around Our Website. This helps us to improve the way Our Website works, for example, by ensuring that users are finding what they are looking for easily.
  - Functionality Cookies: These are used to recognize you when you return to Our Website. This enables us to personalise our content for you and remember your preferences.
  - Marketing Cookies: These cookies record your visit to Our Website, the pages you have visited, and the links you have followed. These cookies can be used to learn about what interests you generally might have. That data allows us to send you ads for products that better fit the things you like. It also allows us to limit the number of times you see the same advertisement.
  - Third Party Cookies: In addition to our own cookies, we may also use various third-parties’ cookies to report usage statistics of the service and deliver advertisements on and through the service.
- Specifically, we use and set the following cookies when you visit Our Website:

Cookie Name	Purpose	Provider
keep_alive	Used in connection with buyer localization.	Shopify
secure_customer_sig	Used in connection with customer login.	Shopify
localization	Shopify store localization	Shopify
cart_currency	The cookie is necessary for the secure checkout and payment function on the website. This function is provided by shopify.com.	Shopify
_cmp_a	Used for managing customer privacy settings.	Shopify
shopify_pay_redirect	The cookie is necessary for the secure checkout and payment function on the website. This function is provided by shopify.com.	Shopify
_tracking_consent	Tracking preferences.	Shopify
_secure_session_id	Used in connection with navigation through a storefront.	Shopify
locale_bar_accepted	This cookie is provided by the app (BEST Currency Converter) and is used to secure the currency chosen by the customer.	GrizzlyAppsSRL
wpm-domain-test	Used to test the storage of parameters about products added to the cart or payment currency.	Shopify
_shopify_y	Shopify analytics.	Shopify
_orig_referrer	Tracks landing pages.	Shopify
_shopify_s	Shopify analytics.	Shopify
_shopify_sa_t	Shopify analytics relating to marketing & referrals.	Shopify
_shopify_sa_p	Shopify analytics relating to marketing & referrals.	Shopify
_gid	Cookie is placed by Google Analytics to count and track pageviews.	Google
_landing_page	Tracks landing pages.	Shopify
_ga	Cookie is set by Google Analytics with unknown functionality.	Google
_gat	Cookie is placed by Google Analytics to filter requests from bots.	Google
_boomr_clss	Used to monitor and optimize the performance of Shopify stores.	Shopify
_ga_36XE111S1W		Google
_ga_N4V1W65YEC		Google
_ttp	To measure and improve the performance of your advertising campaigns and to personalize the user's experience (including ads) on TikTok.	TikTok
__kla_id	Tracks when someone clicks through a Klaviyo email to your website.	Klaviyo
_tt_enable_cookie	Used to identify a visitor.	TikTok
_fbp	Cookie is placed by Facebook to track visits across websites.	Facebook
_scid	Used by Snapchat to help identify a visitor.	Snapchat
IDE	To measure the visitors’ actions after they click through from an advert. Expires after 1 year.	Google
lastExternalReferrerTime	Contains the timestamp of the last update of the lastExternalReferrer cookie.	Facebook
_gcl_au	Cookie is placed by Google Tag Manager to track conversions.	Google
test_cookie	To measure the visitors’ actions after they click through from an advert. Expires after each visit.	Google
lastExternalReferrer	Detects how the user reached the website by registering their last URL-address.	Facebook
tt_sessionId	Used by the social networking service, TikTok, for tracking the use of embedded services.	TikTok
tt_pixel_session_index	Used by the social networking service, TikTok, for tracking the use of embedded services.	TikTok
tt_appInfo	Used by the social networking service, TikTok, for tracking the use of embedded services.	TikTok

Consent, Controlling and Deleting Cookies
- We will ask for your consent to our use of cookies listed above when you first visit Our Website. By consenting and continuing to use Our Website, you agree to the placement of these types of cookies on your device.
- You may refuse to accept, or withdraw your previous consent to, cookies at any time on Our Website by clicking the cookie banner button at the bottom of this page. If you would like to disable cookies, you can set your web browser to reject cookies. The "Help" or "Internet Settings" functions within your browser should tell you how to remove cookies from your web browser on your device. For information on how to manage cookies on popular browsers please see the following links:
  - Google Chrome;
  - Microsoft Edge;
  - Mozilla Firefox;
  - Microsoft Internet Explorer;
  - Opera; and
  - Apple Safari.
- Alternatively, you may wish to visit http://www.allaboutcookies.org/ which contains detailed information on cookies and how to delete, restrict or block them on a wide variety of browsers. For information on how to do this on the browser of your mobile phone you will need to refer to your handset manual.
- To opt out of being tracked by Google Analytics across all websites, you may be able to use the tool provided by Google available at: http://tools.google.com/dlpage/gaoptout.
- If you do this, however, you may have to manually adjust some preferences every time you visit a site. Please be aware that if you select to refuse or restrict cookies, the full functionality of Our Website may no longer be available.
Changes to Our Cookie Policy

We may update this Cookie Policy from time to time. We will notify you of any changes by posting the new Cookie Policy on this page.

Contact Us

If you have any questions about our use of cookies, this Cookie Policy, to exercise any of your rights or to make a complaint to us, please contact us at data@naturespell.co.uk.

Date last updated: March 2024

Gold 22 UK Limited

Return to shop