Last updated: March 2026

1. Introduction

Nutriten ("we", "our", or "us") is committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit nutriten.co, purchase our products, or use our services.

We are the Data Controller for the personal data we process. This means we determine the purposes and means by which your personal data is handled.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Nutriten is a nutrition and wellness brand registered in England and Wales.

Company number: 13716659

Registered address: 128 City Road, EC1V 2NX, London, United Kingdom

Contact email: info@nutriten.co

If you have any questions about this policy or how we handle your personal data, please contact us at info@nutriten.co.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information you provide directly

• Name and contact details (email address, postal address, phone number)

• Account login credentials if you create an account

• Payment information (processed securely by our payment provider; we do not store full card details)

• Communications you send to us, including customer support enquiries

• Newsletter subscription preferences

3.2 Information collected automatically

• IP address and device identifiers

• Browser type and version

• Pages visited and time spent on our website

• Referring website or source

• Cookie data (see Section 8)

3.3 Special category data

In some circumstances, for example, if you contact us with a health-related query or purchase products in connection with a specific health goal, you may voluntarily share information relating to your health or dietary needs. This constitutes special category data under UK GDPR. We will process such data only with your explicit consent and handle it with additional care.

4. Lawful Basis for Processing

Under UK GDPR, we are required to have a lawful basis for processing your personal data. We rely on the following:

• Contract performance: To process your orders, manage your account, and provide customer support.

• Legal obligation: To comply with applicable laws, including tax, accounting, and consumer protection requirements.

• Legitimate interests: To improve our website and services, conduct analytics, prevent fraud, and send service-related communications. We have assessed that these interests do not override your rights.

• Consent: To send you marketing emails and newsletters, and to place non-essential cookies. You may withdraw your consent at any time.

5. How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling your orders and purchases

• Managing your account and providing customer service

• Sending transactional emails (order confirmations, shipping updates)

• Sending marketing communications and newsletters, where you have opted in

• Personalising your experience on our website

• Analysing website traffic and usage to improve our services

• Complying with legal and regulatory obligations

• Detecting and preventing fraud or security issues

  
  

6. Who We Share Your Data With

We do not sell your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating our business, including:

• Payment processors (to handle transactions securely)

• Delivery and logistics providers (to fulfil orders)

• Email marketing platforms (to send newsletters and communications)

• Website hosting and analytics providers

• Customer support tools

All third-party processors are required to handle your data securely and in accordance with UK GDPR. We do not permit them to use your data for their own purposes.

We may also disclose your data as required by law, a court order, or a regulatory authority.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Our general retention periods are:

• Customer order data: 7 years (to comply with HMRC tax obligations)

• Account data: For the duration of your account, plus up to 2 years after closure

• Marketing preferences and email lists: Until you unsubscribe or withdraw consent

• Analytics and log data: Up to 26 months

• Customer support communications: Up to 3 years
  

When data is no longer required, we securely delete or anonymise it.

8. Cookies

Our website uses cookies to enhance your browsing experience and to help us understand how our site is used. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies: Required for the website to function (e.g. shopping cart, login sessions). These cannot be disabled.

• Analytics cookies: Help us understand how visitors use our site so we can improve it (e.g. Google Analytics). These are only placed with your consent.

• Marketing cookies: Used to show you relevant adverts or measure the effectiveness of our campaigns. These are only placed with your consent.

You can manage or withdraw your cookie consent at any time by adjusting your browser settings or using the cookie preference tool on our website.

9. Your Rights Under UK GDPR

As a data subject, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you.

• Right to rectification: You can ask us to correct inaccurate or incomplete data.

• Right to erasure: You can ask us to delete your personal data in certain circumstances.

• Right to restrict processing: You can ask us to limit how we use your data.

• Right to data portability: You can request your data in a structured, machine-readable format.

• Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.

• Rights related to automated decision-making: We do not currently make automated decisions about you that have significant legal effects.
  

To exercise any of these rights, please contact us at info@nutriten.co. We will respond within one calendar month. We may need to verify your identity before processing your request.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure HTTPS connections, access controls, and working only with trusted third-party processors.

However, no method of data transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify the ICO and, where required, you directly.

11. International Data Transfers

Some of our third-party service providers may be based outside the UK. Where we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), to ensure your data receives equivalent protection.

12. Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us, and we will delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make significant changes, we will update the date at the top of this page. We encourage you to review this policy periodically.

14. How to Make a Complaint

If you are unhappy with how we have handled your personal data, please contact us at info@nutriten.co in the first instance, and we will do our best to resolve your concern.

You also have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

Helpline: 0303 123 1113