Privacy Policy

Last updated: 29 April 2026

This Privacy Policy explains how Getwellnatura collects, uses, and protects your personal data. It applies when you visit getwellnatura.co.uk, place an order, or contact us.

This policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Getwellnatura ("we", "us", or "our") operates the website getwellnatura.co.uk (the "Site"). Getwellnatura is the data controller responsible for your personal data.

Getwellnatura is established outside the United Kingdom and offers goods to persons in the United Kingdom. A UK representative under Article 27 of the UK GDPR is in the process of being appointed. Once appointed, the representative’s name and UK address will be published in this section.

Privacy enquiries, requests, and complaints may be sent to info@getwellnatura.co.uk.

2. Personal data we collect

We collect two categories of personal data: information you provide directly, and information collected automatically when you use the site.

2.1 Information you provide

  • Order details. Name, delivery address, billing address, email address, and telephone number provided at checkout.
  • Account details. Login email and password where a customer account is created.
  • Communications. Content of emails, contact form submissions, reviews, and any other messages submitted to Getwellnatura.
  • Marketing preferences. Marketing opt-in status and any subsequent unsubscribe choices.

Payment card details are entered directly into our payment processors (Shopify Payments or PayPal) and are not seen, stored, or processed by Getwellnatura. Getwellnatura receives only confirmation that payment has succeeded, together with the last four digits of the card.

2.2 Information collected automatically

  • Device and browser data. IP address, browser type, operating system, screen size, and referring URL.
  • Approximate location. A general location, typically city or region, derived from the IP address. Precise GPS location is not collected.
  • Usage data. Pages viewed, products browsed, time on page, and navigation paths.
  • Cookies and similar technologies. See section 8 below.

3. Purposes and lawful bases

Under Article 6 of the UK GDPR, every processing activity must have a lawful basis. The table below sets out each purpose and the basis relied upon.

Purpose Lawful basis
Processing orders, taking payment, arranging delivery, and handling returns Performance of a contract
Responding to customer support enquiries Performance of a contract, or legitimate interests where no contract has yet been formed
Fraud prevention and site security Legitimate interests in protecting customers and the business
Analytics cookies and advertising cookies Consent. Consent may be withdrawn at any time via the cookie banner.
Marketing emails to new contacts Consent
Marketing emails to existing customers regarding similar goods Soft opt-in under PECR, with a one-click unsubscribe link in every email
Maintaining accounting and tax records Legal obligation under UK tax law

Where we rely on legitimate interests, a balancing assessment has been carried out to ensure the rights and freedoms of data subjects are not overridden.

4. Recipients of personal data

Getwellnatura does not sell personal data. Personal data is shared only with processors that assist in operating the business, and only to the extent required. Each processor is bound by a written contract that meets the requirements of Article 28 of the UK GDPR.

  • Shopify. Hosting, checkout, and order management. Shopify privacy notice.
  • PayPal (UK). Alternative payment processing. PayPal UK privacy notice.
  • Klaviyo. Email marketing and transactional email. Klaviyo privacy notice.
  • Google. Analytics and advertising via Google Analytics and Google Ads. Google privacy policy.
  • Meta. Advertising on Facebook and Instagram via the Meta Pixel and Conversions API. Meta privacy policy.
  • Parcel carriers. Royal Mail, Evri, and DPD receive your name, delivery address, and telephone number for the purpose of delivering your order.

Personal data may also be disclosed where required by law or court order, or in response to a request from a competent regulator such as the ICO or HMRC.

5. International data transfers

Certain processors are located outside the United Kingdom, including in the United States and Germany. Where personal data is transferred to a country not deemed adequate by the United Kingdom, one of the following safeguards is implemented:

  • The UK International Data Transfer Agreement (IDTA), or
  • The UK Addendum to the EU Standard Contractual Clauses,

together with a transfer risk assessment and any further measures identified by that assessment. A copy of the relevant safeguard may be requested by emailing info@getwellnatura.co.uk.

6. Retention periods

Personal data is retained only for as long as required for the purposes set out above, and for any further period required by law.

  • Order and accounting records: 6 years from the end of the relevant tax year, as required by UK accounting and tax legislation.
  • Marketing data: retained until unsubscription, after which the email address is held on a suppression list to prevent further contact.
  • Customer support correspondence: approximately 2 years from the date of the most recent message, after which it is deleted.
  • Analytics data: aggregated or anonymised after 14 months, after which it can no longer be linked to an individual.

7. Your rights

Under the UK GDPR, you have the following rights in relation to your personal data:

  • Access. Request a copy of the personal data held about you.
  • Rectification. Request correction of inaccurate or incomplete data.
  • Erasure. Request deletion of your data, subject to applicable retention obligations.
  • Restriction. Request that processing be paused while a query is resolved.
  • Portability. Receive your data in a structured, machine-readable format.
  • Objection. Object to processing based on legitimate interests, including direct marketing.
  • Withdrawal of consent. Withdraw consent at any time where processing is based on consent, including marketing emails and analytics cookies.
  • Automated decision-making. Getwellnatura does not carry out automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, email info@getwellnatura.co.uk. A response will be provided within one calendar month, in accordance with the UK GDPR.

If you are dissatisfied with how your data has been handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113. We request the opportunity to address any concern in the first instance, and ask that you contact us before referring the matter to the ICO where possible.

8. Cookies and similar technologies

Cookies and similar technologies are used for three purposes: to operate the site, to analyse how the site is used, and to display relevant advertising. You may manage your preferences at any time through the cookie banner or your browser settings.

  • Strictly necessary cookies. Always active. Required for the operation of the site, basket, checkout, and security features.
  • Analytics cookies. Loaded only with consent. Includes Google Analytics and Klaviyo on-site tracking, used to assess site performance.
  • Advertising cookies. Loaded only with consent. Includes the Meta Pixel and Google Ads tags, used to display relevant advertising on Facebook, Instagram, and Google.
  • Shopify cookies. Set by our hosting platform to maintain the basket, session, and fraud-prevention checks. The majority are strictly necessary.

Further information regarding cookies and PECR is published by the ICO at ico.org.uk.

9. Children

The site is intended for adults and is not directed at children under the age of 16. Getwellnatura does not knowingly collect personal data from any individual under that age. If you believe a child has provided personal data, contact info@getwellnatura.co.uk and the data will be deleted.

10. Security

Getwellnatura applies appropriate technical and organisational measures to protect personal data. The site is served over HTTPS with a valid TLS certificate. Card payments are tokenised and processed exclusively within PCI-compliant payment processors, so card numbers are not transmitted to or stored on Getwellnatura systems. Each processor with which data is shared is bound by a written contract meeting the requirements of Article 28 of the UK GDPR.

No system is entirely secure. Getwellnatura therefore also operates access controls, maintains current software, and reviews suppliers on a regular basis.

11. Changes to this policy

This Privacy Policy may be updated from time to time. The date at the top of this page indicates the most recent revision. Where a material change is made, notice will be provided by email where appropriate, or by a prominent notice on the site prior to the change taking effect.

For assistance, email info@getwellnatura.co.uk or use our contact page.


Company details

Getwellnatura
Im Hagelfeld 79
48147 Münster
North Rhine-Westphalia
Germany
E-Mail: info@getwellnatura.co.uk
Contact Form: getwellnatura.co.uk/pages/contact
Phone: +491623432994
Customer Service: Monday to Friday, 9:00 am to 5:00 pm (CET).