Privacy and Cookie Notice

 Privacy Notice for Pure Health UK Customers accessing our Stores, Services and Apps

This Privacy Notice was last updated on 02nd December 2022

We understand how important your personal information is. This privacy notice will inform you how Pure Health uses and looks after your personal information when you visit and shop with us or use any of our services, use our website, buy products from us, or download and interact with our apps.

Our website and apps are not intended for children under the age of 18, and we do not knowingly collect personal information relating to children.

Please be aware that this privacy notice may be updated from time to time.

General Information

What is Personal and Sensitive Data?

Personal data means any information that may be used to identify you on its own or, when combined with other information, will enable identification. Sensitive data may include data revealing racial or ethnic origin, or data concerning your health.

We may collect, use, store and transfer different kinds of personal and sensitive data about you including the following:

• Identity Data including first name, last name, username or similar identifier, date of birth and gender.
• Contact Data including your address, phone number and email address.
• Health Data including any information about your physical or mental health from how you shop with us or use our services.
• Technical Data including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website, apps, and services.
• Profile Data including your username and password.
• Usage Data including information about how you use our website, apps, and services.

Security – Keeping your Data Safe

Data security is never taken for granted and  invest significantly in security to constantly update our systems and procedures. Our security team works with a dedicated independent Data Protection Officer to ensure your personal data remains a top priority.
If you want more details about what we do to keep your data secure, please contact the GDPR team on [email protected]

Sharing Data within the Group

The P&H group comprises a number of separate legal entities. We will responsibly share data between the group where the reason for doing so is defined and aligned to the original purpose for which we collected your data, and for their digital services and for analysis purposes.

Data retention – How Long do you Keep my Data?

Your personal information will only be retained for as long as necessary to fulfil the purposes for which it was collected, including for purposes of satisfying any legal, accounting, or reporting requirements. Sometimes we might have a Legitimate Interest to hold your data for longer than normal, such as in the case of a dispute or where it is necessary to retain account and order information for any periods required by law (including local tax requirements).

To determine the appropriate retention period for personal data, we follow the guidelines where they are available, including from the supervisory authorities in the relevant country. We take into consideration additional factors such as legal requirements, exceptions, and the potential risk of retaining your personal data.

Anonymous data is not personal data. Our anonymisation process follows guidance and best practice methods to ensure that the data is truly anonymous.

Who we are and how to contact us

Zacanna product ltd – Trading as Pure Health UK

Unit 17 , Upton road Upton , Fleetsbridge Business Park BH17 &AF

Your rights

You have several rights in relation to your personal and sensitive data as provided by the UKGDPR, the Data Protection Act 2018 and the General Data Protection Regulation 2016 (GDPR).

• The right to be informed: This relates to what information we are required to provide you about data processing. This Privacy Notice provides this information.
• The right of access: You have the right to access personal and sensitive information that we hold about you. This is known as a Subject Access Request. if you want to make a Subject Access Request.
• The right to rectification: You have the right to obtain from us, without undue delay, the rectification of inaccurate or incomplete personal data that we hold concerning you.
• The right to erasure: You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing. We have the right to refuse to comply with a request for erasure and if this applies, we will tell you the reason why. You can do this by emailing your name, address, email address,  to the [email protected]
• The right to restrict processing: Subject to exemptions, you shall have the right to restrict processing in various areas.
• The right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
• The right to Object: You have the right to object to processing on grounds relating to your personal circumstances. In such cases we will stop processing unless we can demonstrate (a) compelling legitimate grounds which override your interests, rights, and freedoms and (b) the processing is for the establishment, exercise, or defence of legal claims. This right extends to processing for the purposes of direct marketing (including profiling) which must be stopped outright.
• The right to Withdraw your Consent for Data Processing
• The right to make a complaint: You can make a complaint at any time to the supervising authorities below. We would, however, appreciate the opportunity to deal with your concerns directly before you approach them, so please contact us in the first instance.

United Kingdom	Ireland
Email: [email protected] Phone: 0303 123 1113 Post: Information Commissioner’s Office, Wycliffe House Water Land, Wilmslow Cheshire, SK9 5AF Website: ico.org.uk	Email: [email protected] Phone: +353 (0)761 104 800 or +353 (0)57 868 4800 Post: Data Protection Commission 21 Fitzwilliam Square South Dublin 2, D02 RD28 Ireland Website:dataprotection.ie
Belgium	Holland
Email: [email protected] Phone: +32(0)2 274 48 00 or +32(0)2 274 48 35 Post: Data Protection Authority Drukpersstraat 35 1000 Brussels Website: dataprotectionauthority.be/citizen	Phone: +31 (0)70 888 85 00 Post: Autoriteit Persoonsgegevens PO Box 93374 2509 AJ DEN HAAG Website: autoriteitpersoonsgegevens.nl/en

Shopping with us

We have several stores, online shopping websites and apps which you may use to buy products or services from us, or simply browse for information.

When you purchase from us, we need to collect information about you to process the order. We may also use that information to learn more about your browsing and buying habits so that we create tailored products and services we think you’ll be interested in.

We want to make this as clear as possible, so we’ve made a brief list below that summarises the personal data we collect. We also set out the “legal basis for processing”, i.e., to tell you on what grounds we are allowed to use your information. The legal basis for each purpose is that (a) we have your consent for the use of your personal information, or (b) that we need to use your personal information to perform a contract with you, or (c) that the use of your personal information is necessary for our legitimate interests (in which case we will explain what those interests are).

Personal data collected	Legal Basis for processing
When you shop with us, communicate with our contact centre, browse our websites or other organisations’ websites where our adverts are shown, or use our digital services, we will collect: information about any devices you have used (including the manufacturer, model and operating system, IP address, browser type and mobile device identifiers); cookies and information about your online browsing and purchasing behaviour and history on our Digital Services, your location, your product selection, and information about when you click on one of our adverts (including those shown on other organisations’ websites). information when you write a review. details of your purchases with or through us. photos and videos you have uploaded using our digital services. information about your preferences in connection with our website and apps, for the purposes of enhancing and personalising your experience. If you have given your consent for this, then we may share your data with third party networks such as Facebook and Google to place appropriate advertising. If you are not a registered user with us, then we don’t share your data with any third parties. If you register an account with us, we may be able to link the information collected from you before registration and apply it to either your registered account or to future information that we collect after you have registered.	Legitimate interests – we use your personal information to help us deliver the best quality of service to you and our other customers. Consent
When you register an account with us, we will capture your personal contact information, including name, telephone number, email address and postal address. We will also collect your order history and may contact you with information related to your order via email, SMS text, post, or telephone. If you are placing an order, we will also ask for your payment card number, expiry date and CVV number.	Performance of a contract – we use your personal information to meet our obligations under our contract with you (for example, to deliver a product you have ordered). Legitimate Interest Legal Obligation
When calling our customer services team, you may talk to one of our agents based in South Africa. The agent has access to your registered account to assist with your enquiry. Personal data transferred in this case, is carried out lawfully based on the measures taken to allow transfer of data to international third countries.	Performance of a contract – we use your personal information to meet our obligations under our contract with you (for example, to deliver a product you have ordered). Legitimate Interest
Contact Details for keeping in touch with you to market related products and services, including exclusive offers, vouchers, free gifts, deals, and information about events.	Consent – you can choose whether you would like that or not.
A record of your correspondence and/or conversations with our customer contact centre.	Performance of a contract Legitimate Interest
Address any claims made against us.	Legitimate interests – we use your personal information to address any claims you make against us. In some cases, we may also be under a legal obligation to disclose your personal information (for example, in connection with legal proceedings).
When a request for a return of a product is made in store we will capture your name, email address, telephone number and RFL number.	Performance of a contract
When a report of an adverse reaction is made in store, we will capture your name, email address, telephone number and RFL number. We may also ask for information of any allergies or details of the reaction i.e rash, headaches this may include life threatening side effects such as seizures. You will be asked if you if you would like a response from the customer services team.	Legitimate interests – we use your personal data to contact you if you have asked for a response from the customer services team. Vital Interest – We may also be under a legal obligation to disclose your personal information, for example if medical assistance is needed.
Contact you about leaving a review on a product or service or providing feedback once your order has been completed or the service has been provided	Legitimate interests – we use your personal information to contact you so that we can ask you to provide feedback on the product or service you have ordered.
Contact Details for completing a market research related questionnaire to give feed back to us about your experience using the App, the website or visiting our stores and what we can do better.	Legitimate interests – we use your personal information to contact you so that we can ask for your feedback on the service’s P&Hprovide.
Notify you about changes to our services and to otherwise communicate with you. For example, we will use your contact details to respond to any queries that you submit to us.	Legitimate interests – we use your personal information to keep you up to date with information about our services, and to respond to your queries.
Review your past purchases and viewing history on our Digital Services to provide you with special offers or to tailor your experience online.	Legitimate interests – we use your personal information to provide you with these offers and to tailor your experience when using our online services.
Help us review, develop and improve the products and services we offer. For example, calls to our contact centres are monitored and recorded for quality control and training purposes. We may also send you market research requests via email (which you can opt out of via that email). If you raise a query (for example about a product or about our service) while we still hold a recording of your telephone call, and we can investigate or answer your query by referring to this call, we may do so. This may mean that your call recording will be held until your query has been resolved.	Legitimate interests – we use your personal information to help us deliver the best quality of service to you and our other customers.
Improve and measure the effectiveness of our marketing communications, including online advertising. We sometimes compare limited information that we hold about you (for example, your email address or mobile phone number) with third parties that also hold your information or have an existing online relationship with you to identify you as our customer and to enable us (or third parties on our behalf) to provide you with relevant marketing online. For example, we may compare your information with the information that social networking sites such as Twitter, Instagram, LinkedIn, Pinterest, Reddit and Facebook hold on you, so that they can identify you as a P&Hcustomer and hence tailor the P&Hmarketing you receive via their sites and products. We also share cookie and other data (including online and offline purchase data) with entities such as Google, YouTube, Twitter, Instagram, LinkedIn, Pinterest, Reddit and Facebook in order to make our advertising more relevant to you. We require any such third parties to treat your personal information as fully confidential and to fully comply with all applicable data protection legislation.	Consent
Carry out security checks to protect against fraudulent transactions and to prevent and detect criminal activity.	Legitimate interests – we use your personal information to protect against unlawful activities. In some cases, we may also be under a legal obligation to disclose your personal information (for example, to law enforcement agencies).
Provide, enhance, and personalise your experience on our Digital Services. This may include a mini questionnaire of likes and dislikes that customers, who accept the tracking cookie banner.	Legitimate interests – we use your personal information to deliver you a tailored experience when using our Digital Services.
When you accept the tracking cookie, which is within the cookie banner on the website, you will be asked to complete a short questionnaire to determine some of your likes and dislikes this will help us provide, enhance, and personalise your experience on our Digital Services.	Legitimate interests – we use your personal information to deliver you a tailored experience when using our Digital Services. Acceptance of the tracking cookie within the cookie banner.
We would store your contact details to keep you up to date on product launches this will include any seasonal launches.	Consent – you can choose whether you would like to or not.

Sharing personal data of Pure Health Suppliers

Cookies on our website and apps

When you visit our website or apps, we’ll ask you what data we can collect about you. We use five principal types of cookies:

Strictly Necessary

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Performance

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site and will not be able to monitor its performance.

Functional

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then some or all these services may not function properly.

Targeting

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.