1. Introduction

This Privacy Policy explains how Collanature Ltd (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit collanature.co.uk, place an order, subscribe, or interact with us.

We comply with the UK GDPR, the Data Protection Act 2018, and all relevant UK privacy laws.

By using our website, you agree to this Privacy Policy.

2. Who We Are

Collanature Ltd
Company number: 16493174
Registered office: Honingham Thorpe, Norwich Rd, Colton, Norwich NR9 5BZ
Correspondence: 17 Devon Road, Felixstowe, England, IP11 9AF
Email: contact@collanature.co.uk
Phone: +44 (0)20 7870 1605

Data Protection Officer (DPO):
Oana Cotoi — contact@collanature.co.uk

3. Personal Data We Collect

We collect the following types of personal data:

A. Information you provide directly

• Name

• Email address

• Phone number

• Billing address

• Shipping address

• Payment confirmation details

• Subscription preferences

• Account details (if you create an account)

• Customer support messages

B. Automatically collected data (via cookies & tracking)

• IP address

• Browser and device information

• Login timestamps

• Website usage & behaviour

• Referral source

• Session data

• Analytics and performance data

C. Payment processing

We never store full card numbers.
Payments are processed securely through:

• Shopify Payments

• Apple Pay

• Google Pay

D. Server-side tracking (advanced analytics)

We use server-side tracking to improve accuracy and reduce dependence on browser cookies.
This may include:

• Meta Conversion API

• Google Analytics server-side

• TikTok Events API

• Custom server-side events through Shopify

These methods send anonymised or pseudonymised data back to platforms for analytics and conversion measurement.

4. How We Use Your Data

We use your personal data only for legitimate business purposes, including:

To fulfil your orders

• Processing and shipping your order

• Providing delivery updates

• Handling returns and customer support

To manage your account or subscription

• Renewal notifications

• Subscription management

• Payment processing

• Safe and secure login

For communication

• Order confirmations

• Customer service interactions

• Service updates

• Marketing emails/SMS (only if you opted in)

For analytics and improvement

• Website optimisations

• Performance monitoring

• Behavioural analytics

For marketing (if opt-in)

• Email campaigns

• Personalised offers

• Ad personalisation

• Retargeting ads

• Affiliate tracking

For fraud prevention

• Detecting and preventing fraudulent activity

• Ensuring secure transactions

5. Legal Basis for Processing

Under UK GDPR, we process your data under the following legal bases:

• Contractual necessity – to fulfil your order

• Legitimate interest – analytics, fraud prevention, server-side tracking

• Consent – email marketing, cookie-based tracking

• Legal obligation – financial record keeping

6. How We Share Your Data

We only share your data with trusted service providers essential to our operations:

Delivery & logistics

• DPD (shipping and delivery notifications)

Website platform & hosting

• Shopify (ecommerce, hosting, security)

Payments

• Shopify Payments

• Apple Pay

• Google Pay

Marketing & analytics

• Email marketing provider (e.g., Klaviyo/Mailchimp)

• Meta Platforms (via Pixel + CAPI)

• Google Analytics (including server-side)

• TikTok Pixel & API

• SMS tools (if applicable)

Data storage & infrastructure

Some processors may store data outside the UK, but only with adequate safeguards such as Standard Contractual Clauses (SCCs).

We never sell your data.

7. Server-Side Tracking (Advanced Privacy Note)

Collanature uses server-side tracking to improve accuracy and protect user privacy by reducing reliance on browser cookies.

What this means:

• Tracking is more accurate and less affected by browser restrictions

• Data sent to ads platforms is pseudonymised

• Sensitive personal information is not shared

• Only necessary event data is transmitted

Platforms may receive:

• Order events (e.g., “Purchase”)

• Session events

• Anonymised identifiers

• IP and user-agent (hashed where applicable)

This helps maintain accurate analytics while respecting user privacy and consent.

8. Data Retention

We keep your personal data for:

• 6 years — financial and transaction data (legal requirement)

• Until you unsubscribe — marketing data

• As long as necessary — order history, account data

• Immediately deleted upon request — where legally allowed

9. Your Rights Under UK GDPR

You have the right to:

• Access your data

• Correct inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict processing

• Data portability (export your data)

• Withdraw consent (e.g., marketing emails)

• Object to certain processing

To exercise your rights, email us at:
📧 contact@collanature.co.uk

We respond within 30 days.

10. Children’s Privacy

Our products are not intended for children.
We do not knowingly collect data from individuals under 16 years old.

11. Cookies

We use cookies for:

• Essential website functionality

• Analytics

• Performance

• Marketing & advertising

• Server-side event tracking

You can manage cookie preferences through:

• Our cookie banner

• Your browser settings

• Opt-out links (Google, Meta etc.)

A full Cookie Policy can be generated separately.

12. Data Security

We take security seriously and apply:

• SSL encryption

• Shopify’s secure infrastructure

• Firewalls & malware protection

• Encrypted data transfer

• Server-side request verification

• Access restrictions for staff

No method of transmission is 100% secure, but we implement industry-standard protections.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a new “Last Updated” date.

14. Contact Us

For privacy and data protection enquiries:

Collanature Ltd
Email: contact@collanature.co.uk
Phone: +44 (0)20 7870 1605
Response time: within 30 days (48 hours for general enquiries)