Privacy Policy

Herballea Healing from The Meadow Ltd Company Number: 16235571 Registered Address: 7 The Lea, Fleet, Hampshire GU51 5AX, United Kingdom Last Updated: December 2025

1. Data Controller

Herballea Healing from The Meadow Ltd is the data controller responsible for your personal data. All processing is conducted in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information Collected

The following categories of data are collected and processed:

  • Identity Data: Name, title, and date of birth (to verify age restriction).

  • Contact Data: Billing address, delivery address, email address, and telephone numbers.

  • Financial Data: Payment card details (processed securely via Global Payments; full card details are not stored on our servers).

  • Transaction Data: Details about payments to and from you and products purchased.

  • Technical Data: IP address, login data, browser type, and operating system used during website access.

3. Legal Basis for Processing

Data is processed under the following legal frameworks:

  • Contractual Necessity: Processing is required to fulfill orders, manage deliveries, and handle returns.

  • Legal Obligation: Retention of transaction records for UK tax and accounting purposes.

  • Legitimate Interests: Monitoring website usage to improve services and ensuring network security.

  • Consent: Where you have opted-in to receive marketing communications or newsletters.

4. Data Sharing and Third Parties

Personal data is shared only with the following service providers to facilitate business operations:

  • Global Payments: Secure processing of credit and debit card transactions.

  • Royal Mail: Delivery of physical goods to the provided shipping address.

  • IT Service Providers: Website hosting and maintenance services.

  • Professional Advisers: Lawyers, bankers, auditors, and insurers providing consultancy or legal services.

We do not sell personal data to third parties.

5. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.

  • Transaction Records: Retained for 6 years to comply with UK HM Revenue & Customs (HMRC) requirements.

  • Contact Information: Retained for the duration of the customer relationship or until a deletion request is processed.

6. International Transfers

We do not transfer personal data outside the UK. All data is stored on secure servers within the United Kingdom.

7. Data Security

Security measures are implemented to prevent personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to personal data is limited to employees and third-party service providers who have a business need to know and are subject to a duty of confidentiality.

8. Your Legal Rights

Under UK GDPR, you have the following rights:

  • Request Access: Obtain a copy of the personal data held about you.

  • Request Correction: Rectify incomplete or inaccurate data.

  • Request Erasure: Delete personal data where there is no good reason for continued processing.

  • Object to Processing: Oppose processing based on legitimate interests or for direct marketing.

  • Request Restriction: Suspend the processing of your personal data.

  • Withdraw Consent: Retract consent at any time where processing is based on consent.

To exercise these rights, contact mila@herballea.co.uk.

9. Cookies

The website uses cookies to enhance user experience and analyze traffic. You can set your browser to refuse all or some cookies, but this may affect website functionality.

10. Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

Contact Details: Email: mila@herballea.co.uk Phone: 07903733887 Post: 7 The Lea, Fleet, Hampshire GU51 5AX, United Kingdom