Privacy Policy
Last updated: 28 July 2026 · Version 1.0
Thornton Nutrition Review Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit https://purifyppdrain.world/ (the "Site") or place an order for Wellaray Coffee through the Site.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
The data controller responsible for your personal data is:
Thornton Nutrition Review Ltd
14 Caldwell Street, London, SW9 0DH
United Kingdom
Company No. / VAT: 14782903
Email: privacy@purifyppdrain.world
Phone: +44 20 7946 0821
2. What Personal Data We Collect
Depending on how you interact with the Site, we may collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity data | Full name | Provided by you (order form / contact form) |
| Contact data | Telephone number, email address, delivery address | Provided by you |
| Transaction data | Order details, quantity, price, SKU | Provided by you / automatically generated |
| Technical data | IP address, browser type, device type, pages visited, referring URL | Automatically collected via cookies / server logs |
| Marketing data | Cookie consent status, UTM parameters, Google Click ID (gclid) | Automatically collected subject to consent |
| Communications data | Content of messages sent via the contact form | Provided by you |
We do not collect special category data (health, biometric, genetic data) through this Site. We do not collect payment card data directly - any payment processing is handled by third-party providers under their own privacy obligations.
3. How We Use Your Personal Data
| Purpose | Lawful Basis (UK GDPR Art. 6) |
|---|---|
| Processing and fulfilling your order for Wellaray Coffee | Art. 6(1)(b) - performance of a contract |
| Responding to enquiries submitted via the contact form | Art. 6(1)(b) - pre-contractual steps / Art. 6(1)(f) - legitimate interests |
| Sending order confirmation and dispatch notifications | Art. 6(1)(b) - performance of a contract |
| Complying with legal obligations (tax, consumer law) | Art. 6(1)(c) - legal obligation |
| Analytics to improve Site performance (Google Analytics) | Art. 6(1)(a) - consent (Consent Mode v2) |
| Advertising measurement (Google Ads) | Art. 6(1)(a) - consent (Consent Mode v2) |
| Fraud prevention and security (honeypot, server logs) | Art. 6(1)(f) - legitimate interests |
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on the Site. For full details of the cookies we use and how to manage them, please see our Cookie Policy.
We implement Google Consent Mode v2. By default, all non-essential cookies (including advertising and analytics cookies) are set to denied until you actively accept them via our cookie consent banner. You may withdraw consent at any time by revisiting the cookie settings.
5. Sharing Your Personal Data
We may share your personal data with the following categories of third parties:
- Order fulfilment and courier services - to deliver your Wellaray Coffee order (name and delivery address shared only).
- Google LLC - analytics (Google Analytics 4) and advertising measurement (Google Ads), subject to your consent. Data may be processed in the United States; Google LLC is certified under the UK-US Data Bridge.
- IT and hosting service providers - for website hosting and server infrastructure, under contractual data processing agreements.
- Legal and regulatory authorities - where required by law, court order, or regulatory obligation.
We do not sell your personal data to any third party.
6. International Transfers
Where we transfer personal data outside the UK (for example, to Google LLC in the United States), we ensure appropriate safeguards are in place, including reliance on the UK-US Data Bridge or the ICO's international data transfer agreements (IDTAs) where applicable.
7. Data Retention
| Data type | Retention period |
|---|---|
| Order records (identity, contact, transaction data) | 7 years from date of order (UK tax law obligation) |
| Contact form communications | 3 years from date of last contact |
| Analytics data (Google Analytics) | 14 months (configured in GA4) |
| Server access logs | 90 days |
| Cookie consent records | 12 months |
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access - to request a copy of the personal data we hold about you (Subject Access Request).
- Right to rectification - to request correction of inaccurate or incomplete data.
- Right to erasure - to request deletion of your data where there is no compelling reason for continued processing.
- Right to restriction - to request that we restrict processing of your data in certain circumstances.
- Right to data portability - to receive your data in a structured, commonly used, machine-readable format.
- Right to object - to object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decision-making - we do not carry out solely automated decision-making or profiling that produces legal or similarly significant effects on you.
To exercise any of these rights, please contact us at privacy@purifyppdrain.world. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing your request.
9. Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns before you approach the ICO. Please contact us first at privacy@purifyppdrain.world.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. The Site is served over HTTPS (TLS). Access to order data is restricted to authorised personnel only.
No transmission of data over the internet is guaranteed to be completely secure. If you suspect any misuse of your data, please contact us immediately.
11. Children
Our Site and products are directed at adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
12. Links to Third-Party Sites
Our Site may contain links to external websites (for example, PubMed, NHS, EFSA). We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies independently.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be signalled by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.
14. Contact Us
For any questions about this Privacy Policy or our data practices:
Email: privacy@purifyppdrain.world
Post: Thornton Nutrition Review Ltd, 14 Caldwell Street, London, SW9 0DH, United Kingdom