1. Who We Are
The data controller is The Ashford Review Ltd, registered in England and Wales, with its registered office at 12 Ashford Lane, London EC1A 1BB, United Kingdom. Company No. / VAT: GB412876543.
You can contact us regarding data protection matters at: info@freshzoeplant.world
2. What Personal Data We Collect
We collect the following categories of personal data:
- Order data: full name, telephone number, delivery address, order reference, product SKU and price.
- Contact enquiry data: name, email address, subject and message content submitted via our contact form.
- Technical data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and cookie identifiers.
- Marketing and analytics data: UTM parameters, Google Click ID (gclid), and aggregated site-usage statistics - collected only where you have consented via our cookie banner.
We do not collect payment card data. Orders are fulfilled on a payment-on-delivery basis; no financial data passes through our website.
3. How We Collect Your Data
- Directly from you: when you submit an order form, a contact form, or communicate with us by email.
- Automatically: through cookies and similar technologies placed on your device when you visit our website, subject to your consent choices.
- From third parties: analytics and advertising partners (e.g. Google Analytics) may share aggregated data with us where you have consented to their use.
4. Legal Bases for Processing
We process your personal data on the following legal bases under UK GDPR Article 6:
- Contract (Art. 6(1)(b)): processing your order data to fulfil your purchase and deliver your product.
- Legitimate interests (Art. 6(1)(f)): responding to contact enquiries, maintaining website security, and preventing fraud. We have assessed that these interests are not overridden by your rights.
- Consent (Art. 6(1)(a)): placing analytics and advertising cookies on your device, and processing associated data, where you have given explicit consent via our cookie banner. You may withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)): retaining transaction records as required by applicable tax and accounting law.
5. How We Use Your Data
- To process and fulfil your order for Slim Coffee Booster, including contacting you to confirm delivery details.
- To respond to enquiries submitted via our contact form or by email.
- To operate and improve our website using aggregated analytics data (subject to consent).
- To serve relevant advertising and measure its effectiveness (subject to consent).
- To comply with legal, regulatory and accounting obligations.
- To detect and prevent fraud, spam and abuse.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
6. Cookies and Tracking Technologies
We use cookies and similar technologies as described in our Cookie Policy. We implement Google Consent Mode v2, which means that analytics and advertising cookies are set to denied by default. They are only activated if you click "Accept All" on our cookie banner. If you choose "Reject Non-Essential", only strictly necessary cookies are placed.
You can manage or withdraw your cookie consent at any time by visiting our Cookie Policy page.
7. Data Sharing and Third Parties
We share your personal data only where necessary:
- Delivery partners: courier companies receive your name and delivery address solely to fulfil your order.
- Payment on delivery: the courier may collect payment on our behalf; no card data is transmitted to us.
- Analytics and advertising: Google Analytics and Google Ads (subject to your consent) receive anonymised or pseudonymised data under Google's data processing terms.
- IT and hosting providers: our website host and IT service providers process data on our behalf under data processing agreements.
- Legal and regulatory authorities: where required by law, court order or regulatory request.
We do not sell your personal data to third parties. We do not transfer your data outside the UK or EEA without appropriate safeguards (Standard Contractual Clauses or equivalent adequacy decisions).
8. Data Retention
- Order records: retained for 7 years from the date of transaction to comply with UK tax and accounting law (Companies Act 2006 / HMRC requirements).
- Contact enquiry data: retained for 2 years from the date of resolution of your enquiry.
- Analytics data: retained in accordance with Google Analytics data retention settings (default 14 months), subject to your consent.
- Cookie consent records: retained for 13 months from the date of consent.
When data is no longer required for its stated purpose and no legal retention obligation applies, it is securely deleted or anonymised.
9. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access (Art. 15): to request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): to ask us to correct inaccurate or incomplete data.
- Right to erasure (Art. 17): to request deletion of your data where there is no legitimate reason for us to continue processing it.
- Right to restriction of processing (Art. 18): to ask us to suspend processing of your data in certain circumstances.
- Right to data portability (Art. 20): to receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
- Right to object (Art. 21): to object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds.
- Right to withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Rights related to automated decision-making (Art. 22): we do not carry out solely automated decision-making with legal or significant effects.
To exercise any of these rights, please contact us at info@freshzoeplant.world. We will respond within one calendar month. We may need to verify your identity before processing your request.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with the UK supervisory authority for data protection:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concern directly before you contact the ICO. Please contact us first at info@freshzoeplant.world.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure or access. Our website is served over HTTPS. Access to personal data is restricted to personnel who need it to perform their duties, and all third-party processors are bound by contractual data protection obligations.
No method of transmission over the internet is 100% secure. If we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.
12. Children's Privacy
Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when it was last revised. Where changes are material, we will take reasonable steps to notify you, such as displaying a notice on our website.
14. Contact Us
For any questions about this Privacy Policy or about how we handle your personal data, please contact:
The Ashford Review Ltd
12 Ashford Lane, London EC1A 1BB, United Kingdom
Email: info@freshzoeplant.world