This Privacy Policy explains how Rapha Organics Limited ("we", "us", "our") collects, uses, and protects your personal information when you visit www.rapha-organics.com (the "Site"), sign up to our mailing list, or place an order. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Rapha Organics Limited is the "data controller" responsible for your personal data.
- Company: Rapha Organics Limited, registered in Northern Ireland (company number NI726888)
- Contact email: hello@rapha-organics.com
2. The information we collect
We may collect and process the following types of personal data:
- Identity and contact data: your name, email address, delivery and billing address.
- Order and transaction data: details of the products you buy, order value, and order history. Payments are processed by Shopify; we do not store your full card details.
- Marketing and communications data: your email address and your preferences for receiving marketing from us, including when you download our free guide or sign up to our list.
- Technical and usage data: your IP address, browser type, device information, and how you use our Site, collected through cookies and similar technologies (see our Cookie Policy).
3. How we collect your data
- Directly from you, when you sign up to our mailing list, download our guide, place an order, or contact us.
- Automatically, through cookies and similar technologies as you use the Site.
- From third parties, such as Shopify (our e-commerce and payment platform) and our email marketing provider.
4. How we use your data and our lawful bases
Under UK GDPR, we must have a lawful basis for using your personal data. We rely on the following:
| What we use your data for | Lawful basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Taking payment via Shopify | Performance of a contract |
| Sending marketing emails and offers | Your consent |
| Sending you the free guide you requested | Your consent |
| Responding to your enquiries | Legitimate interests |
| Improving our Site and products | Legitimate interests |
| Meeting legal and tax obligations | Legal obligation |
You can withdraw your consent to marketing at any time by clicking "unsubscribe" in any email or contacting us.
5. Who we share your data with
We share your data only where necessary, with:
- Shopify, our e-commerce and payment processing platform.
- Klaviyo, our email marketing provider, to send our emails and guide.
- Delivery and courier partners, to deliver your order.
- Google Analytics, to understand how the Site is used.
- Meta Pixel, to measure the effectiveness of our advertising.
- Professional advisers, such as accountants or legal advisers, where needed.
We never sell your personal data.
6. International transfers
Some of our providers (including Shopify) may store or process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Addendum, or transfers to countries with an adequacy decision.
7. How long we keep your data
- Order and transaction data: for 6 years after your order, to meet tax and accounting obligations.
- Marketing data: until you unsubscribe or ask us to delete it.
- Enquiry data: for up to 2 years after your last contact.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict how we use your data.
- Object to processing based on legitimate interests or direct marketing.
- Data portability, receive your data in a portable format.
- Withdraw consent at any time.
To exercise any of these rights, email us at hello@rapha-organics.com. We will respond within one month.
9. Complaints
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
10. Cookies
Our Site uses cookies and similar technologies. Please see our Cookie Policy for full details.
11. Children
Our Site and products are not intended for children. We do not knowingly collect data from anyone under 16.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date at the top shows when it was last revised.
13. Contact us
For any questions about this policy or your data, contact us at hello@rapha-organics.com.