Privacy Policy

Foxglen Nutrition Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what personal information we collect when you visit our website or place an order for Wellaray Coffee, why we collect it, how we use it, and what rights you have under UK data protection law.

We are a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Foxglen Nutrition Ltd
14 Cavendish Court, London W1G 0PQ, United Kingdom
Company No. / VAT: 11284736 / GB392847561
Email: hello@cleanwipe.world
Tel: +44 20 7123 8894

For all data protection enquiries, contact us at the email above with the subject line "Data Protection Enquiry".

2. What personal data we collect

Category	Examples	How collected
Identity data	Full name	Order form, contact form
Contact data	Phone number, email address, postal address	Order form, contact form
Transaction data	Product ordered, quantity, SKU, price	Order form (hidden fields)
Marketing data	UTM parameters, GCLID (advertising click ID)	URL parameters on order form
Technical data	IP address, browser type, device type, pages visited, time on site	Google Analytics (if consent given)
Cookie data	Cookie consent preferences	localStorage on your device
Communications data	Content of enquiries submitted via the contact form	Contact form

We do not collect or process special category data (health data, biometric data, etc.) through this website.

3. How we use your personal data

Purpose	Legal basis (UK GDPR Art. 6)
Processing your order for Wellaray Coffee and arranging delivery	Art. 6(1)(b) - performance of a contract
Responding to your enquiries submitted via the contact form	Art. 6(1)(b) - pre-contractual steps / Art. 6(1)(f) - legitimate interests
Keeping records of transactions for legal and accounting purposes	Art. 6(1)(c) - legal obligation
Measuring website traffic and user behaviour via Google Analytics	Art. 6(1)(a) - consent (via cookie banner)
Showing targeted advertising via Google Ads and remarketing	Art. 6(1)(a) - consent (via cookie banner)
Preventing fraud (honeypot field in order/contact forms)	Art. 6(1)(f) - legitimate interests

4. Cookies and tracking technologies

We use cookies and similar technologies on this website. For full details of each cookie, its purpose, and its retention period, please see our Cookie Policy. You can manage your cookie preferences at any time using the cookie settings banner or the link in the footer.

We implement Google Consent Mode v2. By default, all non-essential cookies are denied until you give consent. Analytics and advertising tags only fire after you click "Accept all" or enable the relevant toggles in the Cookie Settings panel.

5. Data sharing and third parties

We do not sell your personal data. We may share data with the following categories of third parties where necessary:

• Fulfilment and delivery partners - to despatch your order (name, delivery address, phone number)
• Google LLC - Google Analytics (if analytics consent given) and Google Ads (if marketing consent given). Google is certified under the EU-US Data Privacy Framework and processes data in accordance with its data processing terms. See Google's Privacy Policy.
• IT and hosting providers - web hosting and email services used to operate this website and handle communications
• Legal and regulatory authorities - where required by law (e.g. HMRC, ICO)

Any third parties acting as data processors are bound by written data processing agreements requiring them to handle your data securely and in accordance with UK GDPR.

6. International data transfers

Some of our third-party processors (including Google) operate outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or equivalent adequacy measures.

7. Data retention

Data type	Retention period
Order records (name, phone, product, transaction)	7 years (UK tax and accounting law requirement)
Contact form submissions	2 years from last contact, or until resolved
Analytics data (Google Analytics)	14 months (default GA4 retention setting)
Cookie consent preferences	Until cleared by the user (localStorage)
Marketing / UTM data associated with an order	Retained with the order record (7 years)

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access - you can request a copy of the personal data we hold about you (Subject Access Request).
• Right to rectification - you can ask us to correct inaccurate or incomplete data.
• Right to erasure - you can request deletion of your personal data where there is no overriding legal basis for us to retain it.
• Right to restriction - you can ask us to restrict processing of your data in certain circumstances.
• Right to data portability - where processing is based on consent or contract and carried out by automated means, you can request a structured, machine-readable copy of your data.
• Right to object - you can object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To withdraw cookie consent, use the Cookie Settings panel on the website.

To exercise any of these rights, contact us at hello@cleanwipe.world. We will respond within one calendar month. We may need to verify your identity before processing your request.

9. Right to complain to the ICO

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us in the first instance.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include HTTPS encryption, access controls, and regular review of our data practices. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we take our obligations seriously.

11. Children

Our website and products are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

12. Links to other websites

Our website may contain links to third-party websites (e.g. Google Privacy Policy). We are not responsible for the privacy practices of those websites and encourage you to read their privacy notices.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.