1. Who We Are
Bramble Gate Wellness Ltd ("we", "us", "our") is the data controller responsible for your personal data. Our registered address is 27 Whitfield Street, London W1T 4AZ, United Kingdom. Company No. / VAT 12847391 · GB284739156.
You can contact us regarding data protection matters at: hello@sievezycartilage.world
2. Data We Collect
We may collect and process the following categories of personal data:
- Identity data: full name provided when placing an order or submitting a contact enquiry.
- Contact data: telephone number, email address.
- Order data: product selected, quantity, order reference.
- Technical data: IP address, browser type and version, time zone, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Usage data: information about how you use our website, including pages visited and referring URLs.
- Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.
- UTM / tracking parameters: source, medium, campaign, content, and term values passed in URLs for analytical purposes, subject to your cookie consent.
We do not collect any special category data (such as health data, biometric data, or data about criminal convictions).
3. How We Collect Your Data
- Direct interactions: when you complete our order form, contact form, or otherwise communicate with us.
- Automated technologies: as you interact with our website, we may automatically collect technical and usage data via cookies and similar technologies, subject to your consent. See our Cookie Policy for details.
- Third parties: analytics providers and advertising networks (where you have consented).
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR (retained in UK law via the Data Protection Act 2018):
- Contract (Article 6(1)(b)): where processing is necessary to perform a contract with you or take pre-contractual steps at your request - principally to process and fulfil orders.
- Legitimate interests (Article 6(1)(f)): where processing is necessary for our legitimate business interests, such as fraud prevention, network security, and improving our products and services, provided those interests are not overridden by your rights.
- Consent (Article 6(1)(a)): where you have given explicit consent - in particular for analytics and marketing cookies via our cookie consent mechanism, and for direct marketing communications.
- Legal obligation (Article 6(1)(c)): where processing is required to comply with a legal obligation, such as tax and accounting obligations.
5. How We Use Your Data
- To process and fulfil your order for Wellaray Coffee, including delivery confirmation by telephone.
- To respond to your contact enquiries.
- To manage our relationship with you, including notifying you about changes to our terms or policies.
- To administer and protect our business and website (including troubleshooting, data analysis, testing, and system maintenance).
- To deliver relevant website content and measure the effectiveness of our communications (subject to consent).
- To comply with our legal and regulatory obligations.
We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on this website. Full details of the cookies we use, their purposes, and how to manage your preferences are set out in our Cookie Policy.
We operate Google Consent Mode v2. By default, all non-essential cookies are denied until you provide explicit consent via our cookie banner. You may withdraw or modify your consent at any time by clicking "Manage" in the cookie banner.
7. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We may share it with:
- Service providers who assist us in operating our website and business (hosting, analytics, email delivery), acting as data processors under written agreements that bind them to process data only on our instructions and in accordance with UK GDPR.
- Delivery and logistics partners to the extent necessary to fulfil your order.
- Professional advisers including lawyers, bankers, auditors, and insurers, who are subject to confidentiality obligations.
- Regulators and public authorities where required by law.
Where we engage third-party processors based outside the UK or EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or an equivalent adequacy mechanism).
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, and in accordance with our legal obligations:
- Order and transaction records: 7 years (UK tax and accounting obligations).
- Customer service and contact enquiries: 2 years from the date of last contact.
- Marketing consents: until you withdraw consent or 3 years from last engagement, whichever is earlier.
- Website technical logs: up to 13 months.
9. Your Rights Under UK GDPR
You have the following rights in relation to your personal data, subject to applicable exemptions:
- Right of access: to receive a copy of the personal data we hold about you.
- Right to rectification: to have inaccurate data corrected without undue delay.
- Right to erasure ("right to be forgotten"): to have your data deleted in certain circumstances.
- Right to restriction of processing: to limit how we use your data in certain circumstances.
- Right to data portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract and carried out by automated means.
- Right to object: to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at hello@sievezycartilage.world. We will respond within one calendar month. We may need to verify your identity before processing your request.
10. Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
11. Security
We have implemented appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Access to your personal data is limited to those employees, contractors, and third parties who have a legitimate business need to access it.
12. Third-Party Links
Our website may include links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy notices.
13. Children
Our website and products are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Where changes are material, we will notify you by a prominent notice on our website.
15. Contact
For any questions, requests, or concerns regarding this Privacy Policy or our data handling practices, please contact us at:
Bramble Gate Wellness Ltd
27 Whitfield Street, London W1T 4AZ, United Kingdom
Email: hello@sievezycartilage.world
Tel: +44 20 7946 0391