Privacy Policy

Privacy Policy

Last updated: 02/02/2026

At Hale&Well ("we", "us", or "our"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and purchase our health supplements.

1. Information We Collect

We collect the following types of personal information:

  • Contact Information: Name, email address, phone number, billing and delivery addresses
  • Payment Information: Payment card details (processed securely through our payment provider)
  • Order Information: Products purchased, order history, preferences
  • Technical Information: IP address, browser type, device information, cookies
  • Marketing Preferences: Your consent to receive marketing communications

2. How We Use Your Information

We use your personal data to:

  • Process and fulfill your orders
  • Communicate with you about your orders and account
  • Provide customer support
  • Send marketing communications (with your consent)
  • Improve our website and services
  • Comply with legal obligations
  • Prevent fraud and ensure security

3. Legal Basis for Processing

Under GDPR, we process your data based on:

  • Contract: To fulfill our contract with you when you place an order
  • Consent: For marketing communications and non-essential cookies
  • Legitimate Interests: To improve our services and prevent fraud
  • Legal Obligation: To comply with tax and accounting requirements

4. Data Sharing

We may share your information with:

  • Payment Processors: To process your payments securely (e.g., Shopify Payments)
  • Shipping Providers: To deliver your orders
  • Email Service Providers: To send order confirmations and marketing emails
  • Analytics Providers: To understand website usage (e.g., Google Analytics)

We do not sell your personal data to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. All payment information is encrypted and processed through secure payment gateways.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, typically:

  • Order information: 7 years (for tax and accounting purposes)
  • Marketing data: Until you withdraw consent
  • Account information: Until you request deletion

7. Your Rights Under GDPR

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a portable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for marketing at any time

To exercise any of these rights, please contact us at hello@haleandwell.com

8. Cookies

We use cookies to improve your browsing experience, analyze website traffic, and personalize content. You can manage cookie preferences through your browser settings. For more information, see our Cookie Policy.

9. International Transfers

Your data may be transferred to and stored on servers outside the UK/EU. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: haleandwell.com
Address: The Corner House - Moore Road - Bourton on the water GL54 2AZ
Phone: 07816 788224

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.