Personal data protection

I. Basic provisions

  1. Personal data controller According to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), NATUREPRODUCTSCLINIC LTD (Company number 11332850), with registered office Unit Q, 35 Astbury Road, London, England, SE15 2NL (hereinafter referred to as the "administrator").
  2. Administrator contact details:
  3. Personal data means any information about an identified or identifiable natural person.


II. Sources and categories of processed personal data

  1. The administrator processes personal data that you have provided to him/her or that the administrator has obtained based on the fulfillment of your order.
  2. Identification and contact data necessary for the performance of the contract are processed.

III. Legal basis and purpose of processing personal data

  1. The lawful reason for processing personal data is:
    • The controller's legitimate interest in providing direct marketing (Article 6(1)(f) GDPR)
    • Your consent to processing for marketing purposes (Article 6(1)(a) GDPR)
  2. Purpose of processing personal data:
    • Order processing and contract fulfillment
    • Sending commercial communications and marketing offers
  3. The administrator does not carry out automated decision-making pursuant to Article 22 of the GDPR.

IV. Retention period of personal data

  1. Personal data is stored:
    • For the duration of the contractual relationship and subsequently 15 years.
    • For the duration of the consent for marketing purposes, no longer than 15 years.
  2. After the retention period has expired, the data will be deleted.

V. Recipients of personal data

  1. Personal data may be disclosed:
    • Persons involved in the delivery of goods/services
    • Marketing service providers
  2. The administrator does not intend to transfer personal data outside the EU.

VI. Your rights

  1. According to GDPR, you have the right to:
    • To access personal data (Article 15 GDPR)
    • To correct personal data (Article 16 GDPR)
    • To delete personal data (Article 17 GDPR)
    • To restrict processing (Article 18 GDPR)
    • On data portability (Article 20 GDPR)
    • Objection to processing (Article 21 GDPR)
    • Withdraw consent to processing
  2. You have the right to file a complaint with Personal Data Protection Authority.

VII. Security of personal data

  1. The administrator has taken technical and organizational measures to secure personal data.
  2. Personal data is protected against unauthorized access.

VIII. Final provisions

  1. You confirm your agreement to the terms and conditions by checking the consent box on the website.
  2. The administrator is authorized to change these terms and conditions; the new version will be published on the website.

These terms and conditions come into effect on November 23, 2023.