Sacred HerbsFrom TheHeart of Wales

Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Heart of Wales Remedies ("we", "us", "our") collects and uses your personal information when you visit heartofwalesremedies.co.uk or contact us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Heart of Wales Remedies is a small handcrafted herbal business based in Powys, Mid-Wales, United Kingdom. For any privacy question, email heartofwalesremedies@gmail.com.

2. What we collect

  • Name, email address, postal address and phone number when you submit an enquiry or order request.
  • The content of your message, including any product interest you share.
  • If you create an account, your login email and encrypted authentication data.
  • Basic technical data (IP address, browser type, pages visited) collected automatically by our hosting provider for security and diagnostics.

3. Why we use it

  • To respond to your enquiry or order (lawful basis: contract or steps prior to a contract).
  • To arrange delivery and payment (lawful basis: contract).
  • To comply with UK tax and consumer-law record-keeping (lawful basis: legal obligation).
  • To keep the site secure and functional (lawful basis: legitimate interest).

We do not sell your data. We do not use it for automated decision-making or profiling. We do not send marketing emails unless you ask us to.

4. Who we share it with

We only share your data with service providers who help us run the site and fulfil orders: our website host and database provider, our email provider, and Royal Mail for delivery. These providers process data on our instructions and under written contracts.

5. How long we keep it

Enquiry and order records are kept for up to six years to comply with HMRC tax record-keeping requirements. You may ask us to delete personal data sooner where we are not required by law to keep it.

6. Your rights under UK GDPR

You have the right to access, correct, delete or restrict processing of your personal data, to object to processing, and to data portability. To exercise any of these rights, email us at the address above. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

See our Cookie Policy for details of the cookies and similar technologies we use.

8. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of the page shows when it was last changed.