Privacy Policy

Last Updated: April 5, 2026

This Privacy Policy describes how Happy Cart Limited, trading as WellNatura ("we," "us," or "our"), collects, uses, discloses, and protects your personal information when you visit or make a purchase from wellnatura.co.uk (the "Site"). By accessing or using our Site, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your privacy and handling your personal information with transparency and care. Please read this Privacy Policy carefully to understand our practices regarding your personal information.

1. Information We Collect

We collect personal information that you voluntarily provide to us, as well as information that is automatically collected when you visit our Site.

1.1 Information You Provide Directly

When you place an order, create an account, subscribe to our newsletter, contact our customer service team, or otherwise interact with our Site, we may collect the following categories of personal information:

Identifiers — your name, email address, phone number, shipping address, and billing address.

Commercial Information — details about the products you purchase, order history, and transaction records.

Payment Information — credit or debit card number, expiration date, and billing details. Please note that payment processing is handled by our third-party payment processors (Stripe and PayPal). We do not store your full payment card details on our servers.

Communications — any messages, reviews, feedback, or correspondence you send to us through email, our contact form, or customer service channels.

1.2 Information Collected Automatically

When you visit our Site, we and our third-party service providers automatically collect certain information about your device and browsing activity, including:

Device and Usage Information — your IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, time spent on pages, and other browsing activity on our Site.

Location Information — approximate geographic location based on your IP address.

Cookies and Tracking Technologies — we use cookies, pixels, web beacons, and similar technologies to collect information about how you interact with our Site. For more details, please see Section 7 (Cookies and Tracking Technologies) below.

2. How We Use Your Information

Order Fulfilment — to process and fulfil your orders, arrange shipping and delivery, process payments and refunds, and communicate with you about your order status.

Customer Service — to respond to your enquiries, resolve complaints, and provide customer support.

Marketing and Communications — to send you promotional emails, newsletters, and product recommendations via our email marketing platform (Klaviyo). You can opt out of marketing emails at any time by clicking the "unsubscribe" link at the bottom of any email or by contacting us directly.

Site Improvement — to analyse how visitors use our Site, identify trends, and improve our website functionality, content, and user experience.

Advertising — to deliver relevant advertisements to you on third-party platforms (such as Meta/Facebook and Google) based on your browsing activity and interests. This may involve sharing certain information with advertising partners.

Fraud Prevention and Security — to detect, prevent, and investigate fraud, unauthorised transactions, and other illegal activities, and to protect the security of our Site and our customers.

Legal Compliance — to comply with applicable laws, regulations, legal processes, or governmental requests.

3. Lawful Basis for Processing

Under UK data protection law, we must have a lawful basis for processing your personal information. The bases we rely on are:

Performance of a Contract — processing your information is necessary to fulfil your order, process payments, arrange delivery, and handle returns.

Legitimate Interests — we process certain information to improve our Site, understand how visitors use our store, and protect our business from fraud. We ensure our interests do not override your rights and freedoms.

Consent — where you have given us explicit consent, such as opting in to receive marketing emails. You can withdraw your consent at any time by contacting us at info@wellnatura.co.uk or using the unsubscribe link in any marketing email.

Legal Obligation — we may process your information where it is necessary to comply with a legal obligation, such as tax and accounting requirements.

4. How We Share Your Information

We do not sell your personal information. However, we may share your personal information with the following categories of third parties for the business purposes described in this policy:

Service Providers — we share information with companies that help us operate our business and provide services to you, including Shopify (e-commerce platform and hosting), Stripe and PayPal (payment processing), our fulfilment and shipping partners (to ship your orders), Klaviyo (email marketing), Judge.me (product reviews), Google (analytics, advertising, and tag management), Meta/Facebook (advertising and analytics), and customer service tools and platforms.

These service providers are contractually obligated to use your information only as necessary to perform services on our behalf and in accordance with this Privacy Policy.

Advertising Partners — we may share certain information (such as hashed email addresses, browsing activity, and purchase data) with advertising platforms including Google Ads and Meta/Facebook Ads to deliver targeted advertisements and measure ad performance.

Legal and Safety — we may disclose your information if required to do so by law, in response to a valid legal process (such as a court order), or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Business Transfers — if we are involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction.

Some of these providers may be located outside the United Kingdom. Where your data is transferred internationally, we ensure appropriate safeguards are in place to protect it.

5. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically, order and transaction data is retained for a minimum of six years to comply with tax and accounting obligations. Marketing data (such as email addresses for newsletters) is retained until you unsubscribe or request deletion. Website analytics data is retained in accordance with the retention settings of our analytics providers.

When your personal information is no longer needed, we will securely delete or anonymise it.

6. Your Rights

Under UK data protection law, you have the following rights with respect to your personal information:

Right to Access — you have the right to request a copy of the personal information we hold about you.

Right to Rectification — you have the right to request that we correct any inaccurate or incomplete personal information.

Right to Erasure — you have the right to request that we delete your personal information, where we have no ongoing legal reason to retain it.

Right to Restrict Processing — you have the right to request that we restrict the processing of your personal information in certain circumstances.

Right to Data Portability — you have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format.

Right to Object — you have the right to object to our processing of your personal information where we are relying on legitimate interests as our lawful basis.

Right to Withdraw Consent — where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at info@wellnatura.co.uk. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Cookies and Tracking Technologies

Our Site uses cookies, pixels, web beacons, and similar tracking technologies. These technologies serve the following purposes:

Essential Cookies — necessary for the Site to function properly, including shopping cart functionality, authentication, and security features. These are set by Shopify.

Analytics Cookies — help us understand how visitors interact with our Site. We use Google Analytics and Google Tag Manager to collect and analyse usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On.

Marketing and Advertising Cookies — used to deliver relevant advertisements and measure the effectiveness of our advertising campaigns. These include cookies set by Google Ads and Meta/Facebook Pixel. These cookies may track your browsing activity across different websites.

Functionality Cookies — allow us to remember your preferences and provide enhanced features, such as product reviews via Judge.me and email signup forms via Klaviyo.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking certain cookies may affect the functionality of our Site.

8. Third-Party Links and Services

Our Site may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorised access, use, alteration, or destruction. Our Site uses SSL/TLS encryption to protect data transmitted between your browser and our servers. Payment processing is handled by PCI-DSS compliant third-party processors (Stripe and PayPal).

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

10. International Data Transfers

WellNatura is operated by Happy Cart Limited, registered in Hong Kong. Your personal information may be transferred to and processed in countries outside of the United Kingdom, including but not limited to Hong Kong and Canada (where Shopify's servers are located). Where your data is transferred internationally, we ensure appropriate safeguards are in place to protect it in accordance with UK data protection law.

11. Children's Privacy

Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us as soon as possible.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal information, please contact us. For privacy-specific requests, please include "Privacy Request" in the subject line of your email so we can direct your enquiry appropriately. If you prefer to fill out a form to contact us, you can do so by visiting our contact page.

WellNatura
Happy Cart Limited
RM 509 5/F The Cloud, 111 Tung Chau Street, Tai Kok Tsui, Kowloon, 999077, Hong Kong
Business Registration Number: 77321394
Email: info@wellnatura.co.uk
Phone: +44 2037695466
Customer Support Opening Hours: Monday to Friday, 9:00 AM to 5:00 PM (GMT+1)

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our Site with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Related Policies