NADIOL UK LTD
International House
36–38 Cornhill
London
EC3V 3NG
United Kingdom

Company Number: 11635183
VAT Number: 379950338

If you have any questions about this policy, please contact us at:
📧 support@nadiol.com

We may collect and process the following types of information:

Information you provide directly

• Name, title, and contact details (address, email, telephone).

• Payment information (processed securely via third-party providers).

• Account login details (if you register).

• Date of birth (where relevant).

• Health information if voluntarily provided (e.g. when reporting side effects).

Information we collect automatically

• Technical data: IP address, browser type, device details, operating system, time zone.

• Usage data: website activity, referring sites, pages visited, clicks, scrolls.

• Cookies and similar technologies (see section 9 below).

We process your personal data for the following purposes, in line with the legal bases set out under UK GDPR:

• To process and deliver orders, payments, and refunds – necessary for the performance of a contract.

• To create and manage your account – necessary for the performance of a contract.

• To communicate with you about orders, deliveries, or support queries – based on legitimate interests or contractual necessity.

• To send you marketing communications such as newsletters and special offers – only with your consent.

• To improve our website, services, and products – based on our legitimate interests.

• To detect and prevent fraud, security breaches, or unlawful activity – necessary to comply with legal obligations and our legitimate interests.

• To comply with laws and regulations (such as tax, accounting, and consumer protection law) – necessary for legal obligations.

We will only send you marketing messages where you have given us your consent or where we have a legitimate interest to do so (subject to your rights). You may withdraw your consent or opt-out at any time by clicking “unsubscribe” in our emails or contacting us.

We do not sell your personal data.

We may share information with:

• Service providers (e.g. payment processors, IT hosting, delivery couriers, marketing platforms).

• Professional advisers (e.g. accountants, legal advisers).

• Regulators, law enforcement, or public authorities when required by law.

• Business successors in the event of a merger, acquisition, or sale of assets.

All third parties are contractually required to safeguard your information and use it only for the purposes we specify.

Some of our service providers may be located outside the UK or the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as:

• Adequacy decisions by the UK Government or European Commission, or

• Standard Contractual Clauses approved by the ICO / European Commission.

We retain your personal data only for as long as necessary for the purposes collected, or as required by law. For example:

• Purchase and transaction records: 6 years (for tax and accounting).

• Marketing data: until you withdraw consent or after 24 months of inactivity.

• Support communications: typically up to 2 years after resolution.

Once no longer required, data will be securely deleted or anonymised.

Under UK GDPR, you have the following rights (subject to legal limitations):

• Access – to request a copy of your data.

• Rectification – to correct inaccurate or incomplete data.

• Erasure – to request deletion of your data.

• Restriction – to limit how we process your data.

• Portability – to request your data in a machine-readable format.

• Objection – to object to processing (e.g. direct marketing).

• Withdraw Consent – where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK (www.ico.org.uk).

We use cookies to:

• Make the site function properly (essential cookies).

• Analyse traffic and improve performance.

• Remember your preferences.

• Deliver targeted advertising.

Non-essential cookies will only be placed with your consent. You can manage or withdraw consent via our cookie banner or through your browser settings.

We do not knowingly collect personal data from children under 13 years of age. If you believe we have collected such data, please contact us and we will delete it promptly.

We implement appropriate technical and organisational safeguards to protect your data against unauthorised access, disclosure, alteration, or destruction. However, no system is completely secure and we cannot guarantee absolute security.

In the event of a breach posing a high risk to your rights, we will notify you and the ICO without undue delay.

For questions, requests, or complaints about this policy or our data practices, please contact:

📧 support@nadiol.com
📮 NADIOL UK LTD, International House, 36–38 Cornhill, London, EC3V 3NG