Privacy policy
Last updated: 15 October 2026
This Privacy Policy explains how Wot Natural (“we”, “us” or “our”) collects, uses and shares your personal information when you visit, use our services or make a purchase from wotnatural.com (the “Site”), or otherwise contact us about the Site (together, the “Services”). In this Privacy Policy, “you” and “your” mean you as a user of the Services, whether you are a customer, a website visitor or another person whose information we have collected under this Privacy Policy.
We are the data controller of your personal information for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. Please read this Privacy Policy carefully.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. When we do, we will post the revised version on the Site, update the “Last updated” date above, and take any other steps that the law requires.
How We Collect and Use Your Personal Information
To provide the Services, we collect personal information about you from a number of sources, as set out below. What we collect and how we use it depends on how you interact with us.
In addition to the specific uses below, we may use your information to communicate with you, to provide and improve the Services, to comply with our legal obligations, to enforce our terms of service, and to protect the Services, our rights and the rights of our customers and others.
What Personal Information We Collect
“Personal information” means any information that identifies you, relates to you, describes you or can reasonably be linked to you. The sections below describe the categories of personal information we collect.
Information You Give Us Directly
Information you give us through the Services may include:
- Contact details, including your name, address, phone number and email address.
- Order information, including your name, billing address, delivery address, payment confirmation, email address and phone number.
- Account information, including your username, password and any other information used to keep your account secure.
- Customer support information, including anything you choose to include when you contact us, for example when you send us a message through the Services.
Some features of the Services need you to give us certain information. You can choose not to, but you may then be unable to use those features.
Information We Collect About Your Usage
We may automatically collect information about how you interact with the Services (“Usage Data“). To do this, we may use cookies, pixels and similar technologies (“Cookies“). Usage Data may include information about how you access and use the Site and your account, such as device information, browser information, network connection details, your IP address and other information about your interaction with the Services.
Information We Get from Third Parties
We may also receive information about you from third parties, including vendors and service providers that collect information on our behalf, such as:
- Companies that host and support our Site and Services.
- Our payment providers, including Stripe and PayPal, which collect payment information (for example card details, bank details and billing address) to process your payment, fulfil your order and perform our contract with you. We do not store your full card details.
- Analytics and advertising providers. When you visit our Site, open or click on our emails, or interact with our Services or adverts, we or third parties we work with may automatically collect information using tracking technologies such as pixels, web beacons, software development kits, third-party libraries and Cookies.
We treat any information we get from third parties in line with this Privacy Policy. See also the section Third-Party Websites and Links below.
How We Use Your Personal Information and Our Lawful Basis
Under UK data protection law we must have a lawful basis for using your personal information. We use it as follows:
- Providing products and services. We use your personal information to process payments, fulfil and deliver orders, send you notifications about your account, purchases, returns or exchanges, create and manage your account, and handle returns and exchanges. Lawful basis: performance of our contract with you (Art. 6(1)(b) UK GDPR).
- Marketing and advertising. We may use your personal information to send you marketing emails or text messages and to show you adverts for our products, including tailoring the Services and adverts on our Site and other websites. Lawful basis: your consent where the Privacy and Electronic Communications Regulations (PECR) require it, and otherwise our legitimate interest in promoting our products (Art. 6(1)(a) and (f) UK GDPR). You can opt out at any time.
- Security and fraud prevention. We use your personal information to detect, investigate and act on possible fraudulent, illegal or malicious activity. If you register an account, you are responsible for keeping your login details safe. Please do not share your username, password or other access details with anyone, and contact us immediately if you think your account has been compromised. Lawful basis: our legitimate interest in keeping the Site secure for you and other customers (Art. 6(1)(f) UK GDPR).
- Customer support and service improvement. We use your personal information to provide customer support and to improve our Services. Lawful basis: our legitimate interest in responding to you, providing an effective service and maintaining our relationship with you (Art. 6(1)(f) UK GDPR).
- Legal obligations. We keep certain records, such as order and transaction records, to meet our tax, accounting and other legal obligations. Lawful basis: compliance with a legal obligation (Art. 6(1)(c) UK GDPR).
Cookies
Like most websites, our Site uses Cookies. Strictly necessary Cookies keep the Site working, for example to keep your basket and session active and to remember your preferences. With your consent, we also use analytics and advertising Cookies to understand how visitors use the Services and to tailor the products and adverts shown on our Site and other websites. As PECR requires, we only set non-essential Cookies once you have agreed to them, and you can change your choices at any time.
You can also set your browser to remove or reject Cookies. Please note that blocking Cookies may affect your experience and may cause some features of the Services to stop working properly or become unavailable.
Your browser may let you send a “Do Not Track” signal. Our Site is not currently designed to respond to these signals. To find out more, visit allaboutdnt.com.
How We Share Personal Information
We do not sell your personal information. We may share it with third parties in the following circumstances:
- With vendors and service providers who act on our behalf, such as website hosting, IT management, payment processing, data analytics, customer support, cloud storage, and fulfilment and delivery. They may only use your information on our instructions.
- With marketing and advertising partners, where you have given your consent. These partners will use your information in line with their own privacy notices.
- When you ask us to, or agree to it, for example to deliver products to you or when you use social media features or login integrations.
- In connection with a business transaction such as a merger, acquisition or insolvency.
- To comply with the law (including court orders and requests from law enforcement or regulators), to enforce our terms of service, and to protect the Services, our rights and the rights of our customers and others.
| Category of information | Categories of recipients |
|---|---|
| Contact, order and account information | Payment providers, fulfilment and delivery partners, customer support providers, hosting providers |
| Customer support information | Customer support and IT service providers |
| Usage Data, including IP address and approximate location | Hosting, analytics and (with your consent) advertising providers |
We do not collect or use special category (sensitive) personal information.
User-Generated Content
The Services may let you post product reviews and other content. If you post content in a public area of the Services, anyone will be able to see it.
We cannot control who sees information you choose to make public, and we cannot ensure that those people will respect your privacy or keep it secure. We are not responsible for the privacy or security of information you make public, or for the accuracy, use or misuse of information you disclose to or receive from third parties.
Third-Party Websites and Links
Our Site may link to websites or other online platforms run by third parties. If you follow a link to a site we do not control, please review its privacy and security policies and other terms. We are not responsible for the privacy or security of those sites, or for the accuracy, completeness or reliability of their content. Information you share on public or semi-public platforms, including third-party social networks, may be visible to other users of the Services or of those platforms. Including a link does not mean we endorse the platform, its content or its owners.
Children’s Data
The Services are not intended for children under 13, and we do not knowingly collect personal information about children. If you are the parent or guardian of a child who has given us their personal information, please contact us using the details below and we will delete it.
Security and Retention of Your Information
We use appropriate technical and organisational measures to protect your personal information. However, no security measures are perfect or impenetrable, and we cannot guarantee complete security. Information you send to us may not be secure in transit, so please do not use insecure channels to send us sensitive or confidential information.
We keep your personal information only for as long as we need it. How long depends on factors such as whether we need it to maintain your account, provide the Services, meet legal obligations (for example, HMRC generally requires transaction records to be kept for six years), resolve disputes or enforce our agreements.
Your Rights
Under UK data protection law you have the following rights over your personal information. Some of these rights apply only in certain circumstances, and we may decline a request where the law allows.
- Right of access: you can ask for a copy of the personal information we hold about you and for details of how we use and share it.
- Right to rectification: you can ask us to correct inaccurate or incomplete personal information.
- Right to erasure: you can ask us to delete your personal information.
- Right to restrict processing: you can ask us to limit how we use your personal information.
- Right to data portability: you can ask to receive your personal information in a commonly used format, or ask us to transfer it to another organisation.
- Right to object: you can object to processing based on our legitimate interests, and you can object to direct marketing at any time.
- Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect processing that took place before you withdrew it.
- Managing communication preferences: you can opt out of marketing emails at any time using the unsubscribe link in any of our emails. We may still send you service emails, for example about your account or orders.
To exercise any of these rights, please contact us using the details below. Exercising your rights is free, and we will not treat you differently for doing so. We may need to verify your identity, for example by confirming your email address or account details, before we respond. You may also ask someone else to make a request on your behalf, in which case we will need proof that you have authorised them. We will respond within one month, as UK law requires, or tell you if we need more time.
Complaints
If you have a complaint about how we handle your personal information, please contact us first using the details below and we will try to resolve it. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
International Transfers
Some of our service providers may store or process your personal information outside the UK. When this happens, we make sure appropriate safeguards are in place. These include transferring data only to countries the UK government has found to provide adequate protection, or using the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
To show prices in your local currency, we may use your IP address to estimate your location, and we store your selected currency in a session cookie, which is deleted when you close your browser. This keeps your currency choice consistent while you browse.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, or would like to exercise any of your rights, please email us at support@wotnatural.com.