Privacy Policy

1. Who We Are

The data controller for this website is:

Brighton Wellness Review Ltd
14 Gardner Street, Brighton, BN1 1UP, United Kingdom
Email: privacy@glowxypurificati.world

References to "we", "us", or "our" in this policy refer to Brighton Wellness Review Ltd. We operate the website at glowxypurificati.world (the "Site").

2. What Data We Collect

We may collect and process the following categories of personal data:

Category	Examples	How Collected
Identity data	First name, last name	Order form, contact form
Contact data	Telephone number, email address	Order form, contact form
Transaction data	Order details, quantity, SKU, price	Order form (hidden fields)
Marketing parameters	UTM source/medium/campaign, Google Click ID (gclid)	URL parameters captured on form submission
Technical data	IP address, browser type, device type, pages visited, referring URL	Server logs, analytics cookies (with consent)
Usage data	How you interact with the Site, pages viewed, time spent	Analytics tools (with consent)
Cookie consent data	Your accept/reject choice and timestamp	Cookie consent module (localStorage)

We do not collect special category data (health data, biometric data, etc.) through this Site. We do not knowingly collect data from persons under the age of 18.

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil orders: We use your name and phone number to confirm your order and arrange delivery of Wellaray Coffee.
• To respond to enquiries: We use contact form submissions to respond to your questions within a reasonable timeframe.
• To operate the Site: Technical and usage data allows us to maintain, secure, and improve the Site.
• To measure advertising effectiveness: Where you have consented to analytics and advertising cookies, we use marketing parameters (UTM, gclid) to understand which channels bring visitors to the Site.
• To comply with legal obligations: We may retain certain data to comply with UK tax, consumer protection, and financial record-keeping requirements.

4. Legal Bases for Processing

Purpose	Legal Basis (UK GDPR Article 6)
Processing and fulfilling your order	Article 6(1)(b) - performance of a contract
Responding to your contact form enquiry	Article 6(1)(b) - steps taken at your request prior to a contract; or Article 6(1)(f) - legitimate interest
Analytics and advertising tracking	Article 6(1)(a) - your consent (via cookie banner)
Security, fraud prevention, server logs	Article 6(1)(f) - legitimate interest
Legal and tax compliance	Article 6(1)(c) - legal obligation

Where we rely on legitimate interest, we have assessed that our interests are not overridden by your fundamental rights and freedoms.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on this Site. Our Cookie Consent banner (displayed on your first visit) enables you to accept or reject non-essential cookies. Please see our Cookie Policy for full details of the cookies we use, their purposes, and their retention periods.

Google Consent Mode v2 is implemented on this Site. By default, all consent signals are set to "denied". Advertising and analytics cookies are only activated upon your explicit acceptance through the cookie banner.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of third parties, only to the extent necessary for the purposes described in this policy:

• Order fulfilment partners: To arrange delivery of your order (name, address, contact number).
• Payment processors: If applicable, to process any payment associated with your order.
• Analytics providers: Where you have consented, data is shared with analytics platforms (e.g. Google Analytics) to help us understand Site usage.
• Advertising platforms: Where you have consented, marketing parameters may be shared with advertising platforms (e.g. Google Ads) to measure campaign performance.
• IT and hosting providers: Companies who provide website hosting, email, and data storage services, bound by data processing agreements.
• Legal and regulatory bodies: Where we are required to disclose data by law, court order, or regulatory authority.

All third-party processors we engage are required to process your data in accordance with applicable data protection law and our instructions.

7. International Transfers

Some of our third-party service providers (including analytics and advertising platforms) may process your data outside the United Kingdom or European Economic Area. Where this occurs, we ensure that appropriate safeguards are in place - including reliance on the UK's International Data Transfer Agreements (IDTAs) or the UK adequacy regulations - to protect your data to a standard equivalent to that required under UK GDPR.

8. How Long We Keep Your Data

Data Type	Retention Period
Order data (name, phone, order details)	6 years from the date of the transaction (UK tax and consumer law requirements)
Contact form submissions	2 years from the date of the enquiry, unless a contractual relationship arises
Analytics data	As set by the relevant platform (typically 14 months for Google Analytics); subject to consent withdrawal
Server log data (IP, access logs)	90 days
Cookie consent records	12 months (stored in localStorage on your device)

After the applicable retention period, data is securely deleted or anonymised.

9. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): You may ask us to delete your data in certain circumstances.
• Right to restriction of processing: You may ask us to restrict how we process your data in certain circumstances.
• Right to data portability: Where processing is based on consent or a contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes.
• Rights related to automated decision-making: We do not make solely automated decisions that produce significant legal or similarly significant effects on you.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw cookie consent, use the "Reject Non-Essential" button in the cookie banner, or clear your browser cookies.

To exercise any of these rights, please contact us at privacy@glowxypurificati.world. We will respond within one calendar month. We may need to verify your identity before fulfilling your request.

10. How to Complain

If you have a concern about how we handle your personal data, we encourage you to contact us first so we can try to resolve it.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Where changes are material, we will take reasonable steps to notify you (for example, by displaying a notice on the Site). Continued use of the Site following such changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related queries, requests, or concerns:

Brighton Wellness Review Ltd
14 Gardner Street, Brighton, BN1 1UP, United Kingdom
Email: privacy@glowxypurificati.world