Last updated: 16/06/2025

Serpentine Wellness values the privacy of our users ("you," "your"). This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website https://www.serpentinewellness.co.uk (the "Site").

By using the Site, you agree to the terms outlined in this Privacy Policy.

​​

1. Information We Collect

We collect the following types of personal data:

• Personal Information:

  • Name

  • Email address

  • Phone number

  • Billing and shipping address

  • Payment information (processed through a secure third-party payment processor)

• Technical Data:

  • IP address

  • Browser type and version

  • Device information

  • Operating system

  • Pages viewed and interactions with the Site

  • Date and time of your visit

• Marketing and Communications Data:

  • Preferences in receiving marketing from us

  • Your communication preferences

• Cookies: We use cookies to enhance your experience on our Site. Cookies are small text files placed on your device to enable functionality such as remembering your preferences and tracking site usage. You can control cookie settings via your browser.

​

2. How We Use Your Information

We use your personal data for the following purposes:

• Performance of a Contract: To process and fulfil orders, including payment processing and shipping.

• Legitimate Interests: To improve and optimize the functionality of our Site, analyse website usage, and enhance user experience.

• Consent: To send marketing emails or newsletters, subject to your consent (you can opt-out at any time).

• Legal Obligation: To comply with legal requirements, including responding to lawful requests by public authorities or regulatory bodies.

​

3. Legal Basis for Processing Your Data

Under the GDPR, we must have a legal basis for processing your personal data. The legal bases we rely on include:

• Consent: For sending marketing materials or processing your data in certain cases.

• Contractual Necessity: For processing data related to the purchase of goods/services.

• Legitimate Interests: For improving our services and monitoring site activity.

• Legal Obligation: When we need to comply with legal requirements.

​

4. How We Protect Your Information

We take appropriate technical and organisational measures to safeguard your personal data, including:

• Data Encryption: All sensitive information is encrypted during transmission.

• Access Control: We limit access to your data to those employees or third-party providers who need to know in order to perform their tasks.

• Security Measures: We regularly review our security practices and perform security audits.

However, no system is completely secure, and we cannot guarantee the absolute security of your personal data.

​

5. Sharing Your Information

We may share your personal data with:

• Service Providers: Third-party providers who help us manage our business, such as payment processors, email marketing services, and hosting providers. These providers only process data on our behalf and are contractually obligated to keep it confidential and secure.

• Legal Obligations: We may disclose your data if required to do so by law, court order, or regulatory authority.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred.

​

6. Your Rights Under the GDPR

As a data subject, you have several rights under the GDPR, including:

• Right to Access: You can request a copy of the personal data we hold about you.

• Right to Rectification: You can request that we correct any inaccurate or incomplete data.

• Right to Erasure: You can ask us to delete your personal data, subject to certain conditions.

• Right to Restriction: You can request that we limit the processing of your data in specific circumstances.

• Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.

• Right to Object: You can object to the processing of your data for direct marketing purposes or on grounds relating to your particular situation.

• Right to Withdraw Consent: If processing is based on consent, you can withdraw consent at any time.

To exercise any of these rights, please contact us at info@serpentinewellness.co.uk.

​

7. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience and collect information about how the Site is used. For detailed information about how we use cookies, please refer to our Cookie Policy.

You can manage your cookie preferences directly through your browser settings, including the option to block or delete cookies. However, please note that disabling cookies may affect your experience on the Site.

​

8. Third-Party Links

Our website may contain links to third-party websites that are not operated or controlled by us. We are not responsible for the privacy practices of these websites, and we encourage you to review their privacy policies before providing them with personal data.

​

9. Children’s Privacy

We do not knowingly collect personal data from children under the age of 13. If we become aware that we have unintentionally collected data from a child, we will take immediate steps to delete such data.

​

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy regularly.

​

11. Contact Us

If you have any questions or concerns regarding this Privacy Policy, or wish to exercise any of your rights under the GDPR, please contact us at:

Serpentine Wellness
Oxlip Barn, Christian Malford, Chippenham, SN15 4DF
info@serpentinewellness.co.uk
07585 668066

For more information on your rights, you can also visit the UK Information Commissioner’s Office (ICO) website: www.ico.org.uk.

​