When you place an order or interact with our website, we may collect the following personal data:

- Name and contact details (email address, phone number)
- Billing and shipping address
- Payment information (processed securely via our payment provider — we do not store full card details)
- Order history and purchase details
- IP address and browser information (collected automatically via cookies)
- Communications you send to us

We use your personal data for the following purposes:

- To process and fulfil your orders
- To send order confirmations, shipping updates, and delivery notifications
- To respond to your enquiries and provide customer support
- To send marketing emails where you have given your consent (you may unsubscribe at any time)
- To comply with our legal and regulatory obligations, including cosmetic product safety monitoring as required under Cosmetic Regulation (EC) No. 1223/2009
- To improve our website and services

We process your personal data on the following legal bases under UK GDPR:

- Contract: to fulfil your order and provide our services
- Legitimate interests: to improve our products and services and prevent fraud
- Legal obligation: where required by law, including product safety regulations
- Consent: for marketing communications (where you have opted in)

We do not sell your personal data to third parties. We may share your data with trusted third-party service providers, including:

- Payment processors (to handle your payment securely)
- Delivery and courier services (to fulfil your order)
- Email marketing platforms (where you have consented to marketing)
- Website and funnel platform providers
- Our cosmetic product safety assessor (Oxford Biosciences Ltd.) where required for ongoing product safety monitoring

All third parties are required to handle your data in compliance with UK GDPR and applicable data protection law.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Order and transaction records are typically retained for 7 years in accordance with HMRC requirements. Where you have consented to marketing, we will retain your contact details until you unsubscribe or request deletion.

You have the following rights in relation to your personal data:

- The right to access the personal data we hold about you
- The right to correct inaccurate or incomplete data
- The right to request deletion of your data
- The right to restrict or object to processing
- The right to data portability
- The right to withdraw consent at any time

To exercise any of these rights, please contact us at support@ashleighsorganics.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website uses cookies to improve your browsing experience and to analyse website traffic. We use essential cookies (required for the website to function), analytics cookies (to understand how visitors use our site), and marketing cookies (where consent is given). You can control cookies through your browser settings.

We take reasonable technical and organisational measures to protect your personal data. All payment transactions are encrypted using SSL technology. While we take every precaution, no method of internet transmission is 100% secure.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of our website constitutes your acceptance of the revised policy.

Email: support@ashleighsorganics.com

Post: AT Wellness & Organics Ltd ta Ashleigh's Organics, 3 Glen Affric Park, Cannich, IV4 7LT