Privacy Policy | Kindred Nutrition

1. Who we are

This Privacy Policy applies to Kindred Nutrition Ltd ("we", "us", "our"), a company registered in England and Wales.

Registered address: 14 Cavendish Lane, London, W1G 9PQ, United Kingdom
Company No. / VAT: 12847563 / GB 348 2917 10
Email: hello@zoeflex.world
Telephone: +44 20 7946 0821

Kindred Nutrition Ltd is the data controller for personal data collected through this website (https://zoeflex.world/) and through our order and contact processes.

2. Legal framework

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we refer to "applicable data protection law" in this policy, we mean those instruments collectively.

3. What personal data we collect

We may collect and process the following categories of personal data:

Identity data: first name, last name
Contact data: telephone number, email address, postal address (where provided)
Order data: product ordered, price paid, order reference
Communications data: messages sent to us via the contact form or by email
Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, device type, pages visited, referring URL, session duration
Marketing and analytics data: cookie identifiers, UTM parameters, Google Click ID (gclid), preferences regarding marketing communications (only where consent has been given)

We do not collect any special category data (e.g. health, genetic, or biometric data) through this website.

4. How we collect personal data

We collect personal data through:

The order form on our website (name, telephone number)
The contact form on our website (name, email address, message)
Automated technologies (cookies, server logs) - see our Cookie Policy
Direct correspondence by email or telephone

5. Lawful bases for processing

We rely on the following lawful bases under UK GDPR Article 6:

Contract (Article 6(1)(b)): processing your order, fulfilling delivery, managing returns and refunds
Legitimate interests (Article 6(1)(f)): preventing fraud (honeypot field); website security; improving our website; responding to contact enquiries
Consent (Article 6(1)(a)): analytics cookies; marketing cookies; marketing communications - where you have actively opted in via our cookie banner or consent checkbox. You may withdraw consent at any time.
Legal obligation (Article 6(1)(c)): compliance with tax and accounting law, consumer protection legislation

6. How we use your personal data

To process and fulfil your order for Slim Coffee Booster
To communicate with you about your order, including delivery and returns
To respond to enquiries submitted via the contact form
To maintain the security and proper functioning of our website
To analyse how our website is used (analytics cookies - consent only)
To deliver targeted advertising (marketing cookies - consent only)
To comply with our legal and regulatory obligations

7. Cookies and tracking technologies

We use cookies and similar technologies. Our website implements Google Consent Mode v2 - all non-essential cookies are set to "denied" by default and are only activated if you click "Accept All" in our cookie banner. For full details of the cookies we use, please see our Cookie Policy.

8. Sharing your personal data

We do not sell your personal data. We may share it with:

Order fulfilment and logistics partners: to arrange delivery of your order
Payment processors: to process payment securely (subject to their own privacy policies)
IT and hosting providers: who host and maintain our website infrastructure
Analytics providers (e.g. Google Analytics): only where consent has been given
Legal and regulatory authorities: where required by law

All third-party processors are subject to data processing agreements and are required to process data only as instructed by us and in accordance with applicable data protection law.

9. International transfers

Some of our service providers (including Google) may process personal data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including reliance on the UK's adequacy regulations or standard contractual clauses, as applicable.

10. Data retention

Order data: retained for 7 years to comply with tax and accounting obligations
Contact form submissions: retained for up to 2 years from last contact, unless you request earlier deletion
Technical and analytics data: retained in accordance with the relevant service provider's retention settings (typically 14 months for Google Analytics)
Cookie consent records: retained for up to 12 months

11. Your rights under UK GDPR

You have the following rights in relation to your personal data:

Right of access (Article 15): to request a copy of personal data we hold about you
Right to rectification (Article 16): to request correction of inaccurate data
Right to erasure (Article 17): to request deletion of your data in certain circumstances
Right to restriction (Article 18): to request that we restrict processing in certain circumstances
Right to data portability (Article 20): to receive your data in a structured, machine-readable format where processing is based on consent or contract
Right to object (Article 21): to object to processing based on legitimate interests
Right to withdraw consent: where processing is based on consent, you may withdraw at any time without affecting prior processing

To exercise any of these rights, please contact us at hello@zoeflex.world or in writing to our registered address. We will respond within one calendar month.

12. Right to lodge a complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address any concerns directly before you contact the ICO.

13. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include HTTPS encryption, access controls, and regular review of our security practices.

14. Children

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

15. Links to third-party websites

Our website contains links to third-party websites (including institutional sources in our Further Reading section). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

16. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website after any update constitutes acceptance of the revised policy.

17. Contact us

For any questions about this Privacy Policy or how we handle your personal data, please contact:

Kindred Nutrition Ltd
14 Cavendish Lane, London, W1G 9PQ, United Kingdom
Email: hello@zoeflex.world
Telephone: +44 20 7946 0821