Privacy Policy

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with myherbal-shop.co.uk and our online retail activities directed to customers in the United Kingdom.

We handle applicable personal information in accordance with UK data protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations.

This Privacy Policy is intended to explain our processing in a clear and transparent way. It does not use your acceptance of this policy as a general legal basis for processing your personal information.

3. Personal Information We May Collect

The information we collect depends on how you use the website and which services you request.

• Identity information: such as your first name and last name.
• Contact information: such as your email address, telephone number, billing address and delivery address.
• Order information: such as products ordered, quantities, prices, order number, order status, delivery details and return or refund information.
• Payment-related information: such as payment method, transaction status and information required to identify or reconcile a payment.
• Account information: if you create a customer account, information associated with that account and your account preferences.
• Customer service information: messages, enquiries, complaints and other communications you send to us.
• Marketing preferences: information about whether you have consented to, opted out of or objected to marketing communications.
• Technical and usage information: which may include IP address, browser type, device type, operating system, website interactions and other technical information generated when the website is used.
• Cookie and preference information: information stored or accessed through cookies and similar technologies where permitted.

4. Where We Obtain Personal Information

Most personal information is provided directly by you when you place an order, create an account, contact us, request a return or otherwise interact with the website.

We may also receive limited information from organisations involved in completing your transaction, such as payment processors, fulfilment providers and delivery carriers.

Technical information may also be collected automatically when you use the website through cookies, server logs and similar technologies, subject to the applicable cookie and privacy rules.

5. Why We Use Your Information and Our Lawful Bases

UK data protection law requires us to have an appropriate lawful basis for each purpose for which we process personal information.

6. Payment Information

Card payments are processed through the payment provider presented during checkout, including iyzico where that payment option is used.

Payment providers may receive information necessary to authenticate and process the transaction and to carry out security or fraud-prevention checks.

We may receive transaction information such as payment status, transaction reference and other information needed to administer your order.

Customers should never send full payment-card details to us by ordinary email or through general customer-service messages.

More information about the payment options offered on the website is available on our Payment Methods page.

7. Order Fulfilment and Delivery

Information required to fulfil and deliver an order may be shared with organisations involved in the fulfilment and delivery process.

This may include the relevant Herbalife UK fulfilment operation and delivery carriers used for an individual order, such as Yodel or Evri where applicable.

Information shared for delivery is limited to what is reasonably necessary to prepare, dispatch, track and deliver your order, such as your name, delivery address and relevant contact details.

8. Who We May Share Personal Information With

We only disclose personal information where it is reasonably necessary for the purposes described in this Privacy Policy or where disclosure is required by law.

• Payment and transaction processing providers.
• Order fulfilment and warehouse providers.
• Delivery and courier companies.
• Website hosting, technical and security service providers.
• Email and customer communication service providers.
• Professional advisers where reasonably necessary.
• Tax, regulatory, law-enforcement or other public authorities where legally required.
• Parties involved in a genuine business reorganisation or transfer, subject to appropriate safeguards.

Service providers acting on our behalf are expected to process personal information only for the relevant services and subject to appropriate data-protection arrangements.

9. Cookies and Similar Technologies

Our website may use cookies and similar storage or access technologies to operate the online shop, remember preferences, maintain security and understand how the website is used.

Strictly necessary technologies

Some technologies are necessary for functions requested by the user, such as maintaining a shopping basket, maintaining a secure session, processing checkout or remembering certain privacy preferences. Where the relevant legal exemption applies, these technologies may be used without consent.

Statistical analytics

Applicable UK rules may allow certain technologies to be used without prior consent where their sole purpose is to produce aggregate statistical information about use of the website in order to improve it and all conditions of the applicable statistical-purpose exception are satisfied.

Where we rely on this exception, users will be provided with clear information and a simple, free way to object as required.

Advertising and other non-exempt tracking

Technologies used for advertising, cross-site tracking, profiling or other purposes that are not covered by an applicable legal exemption will not be used without the required consent.

Where consent is required, you can refuse or withdraw that consent using the cookie or privacy controls made available on the website.

10. Email and Electronic Marketing

Order confirmations, payment information, delivery messages, return information and other communications necessary to administer your purchase are service communications and are separate from direct marketing.

We send electronic direct marketing only where permitted under applicable UK data-protection and electronic-communications rules.

Where we rely on consent, you can withdraw that consent at any time.

In appropriate circumstances we may rely on the products and services “soft opt-in” for marketing our own similar products or services, but only where all applicable legal conditions have been satisfied.

This includes obtaining your contact details directly in connection with a sale or genuine negotiation for a sale, giving you a clear opportunity to refuse marketing when the details are collected, and giving you a simple opportunity to opt out in every subsequent marketing message.

If these conditions are not satisfied, the existence of a previous purchase by itself does not automatically provide permission to send electronic marketing.

When you unsubscribe or object to direct marketing, we may retain limited information on a suppression list so that your preference can continue to be respected.

11. International Processing and Transfers

The data controller is based in Türkiye and our website, payment, fulfilment, communication or technical providers may operate in more than one country.

As a result, personal information may in some circumstances be processed outside the United Kingdom.

Where the UK GDPR rules on restricted international transfers apply, we take steps to ensure that an appropriate lawful transfer mechanism or safeguard is used as required by applicable UK data-protection law.

We do not treat your use of the website or your acceptance of this Privacy Policy as consent to an otherwise unlawful international transfer.

12. How Long We Keep Personal Information

We do not intend to keep identifiable personal information longer than reasonably necessary for the purpose for which it was collected.

Order, payment, delivery, return and transaction records may be retained for the period necessary to meet applicable accounting, taxation, consumer-protection, dispute-resolution and legal-claims requirements.

Customer-service records are retained for as long as reasonably necessary to deal with the relevant enquiry and any related order or legal issue.

Account information may be retained while the customer account remains active and afterwards where retention is required for another lawful purpose.

Marketing information is retained only for as long as there is an appropriate lawful reason to use it. Limited suppression information may be kept after an unsubscribe request so that we can continue to respect the opt-out.

Technical information and cookie-related information is kept according to the purpose of the relevant technology and the applicable retention settings.

13. Your Data Protection Rights

Depending on the circumstances and the lawful basis used, UK data-protection law may give you a number of rights in relation to your personal information.

To exercise a privacy right, email info@myherbal-shop.co.uk . We may need to request information reasonably necessary to confirm your identity before responding to certain requests.

14. Data Protection Complaints

If you believe that we have handled your personal information incorrectly, please contact us first so that we can review and respond to your concern.

Privacy complaints can be sent to: info@myherbal-shop.co.uk .

You also have the right, where applicable, to raise a data protection complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

ICO website: ico.org.uk
ICO helpline: 0303 123 1113

15. Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No internet transmission or electronic storage system can provide an absolute guarantee of security. We therefore review appropriate safeguards according to the nature of the information and the risks involved.

16. Automated Checks

Payment processors, fraud-prevention providers or financial institutions may use automated systems when assessing or authorising transactions. Their processing may also be governed by their own privacy information.

If we introduce solely automated decision-making that has a legal or similarly significant effect on customers and UK data-protection law requires additional information to be provided, we will update our privacy information accordingly.

17. Children

Our online shop is intended for adults purchasing products for lawful consumer purposes. We do not intentionally request children to provide personal information for the purpose of placing orders.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our processing activities, website technologies, service providers or applicable legal requirements change.

The current version will be published on this page and the review date below will be updated where appropriate.

Where a change materially affects how personal information is used, we will take appropriate steps to provide additional notice where required.

19. Contact Us About Privacy

For questions about this Privacy Policy, your personal information, a privacy-rights request or a data-protection complaint, please contact:

MyHerbal Shop UK
Data Controller: Dogus Dilan
Email: info@myherbal-shop.co.uk
Customer service: +44 7458 164343

Related Customer Information