This privacy notice explains how Plankton for Health collects, uses, shares and protects your personal data when you visit our website, buy from us, sign up to our newsletter, leave a review, or get in touch. It also sets out your rights under UK data protection law and how to exercise them.
We have written it in as plain a language as a document like this allows. If anything here is unclear, please email us at info@planktonforhealth.co.uk and we will be glad to explain.
Last updated: June 2026.
Who we are
Plankton for Health is a trading name of Barefoot Web. We are the “data controller” for the personal data described in this notice, which means we are responsible for deciding how and why it is used and for keeping it safe in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
You can contact us, including about anything to do with your personal data, at:
- Barefoot Web, trading as Plankton for Health
- Lily Bank Cottage, Lewes Road, Westmeston, Hassocks, BN6 8RH, United Kingdom
- Email: info@planktonforhealth.co.uk
- Phone: 01342 457170
For any data protection request – such as a request to see, correct or delete your data – please email us at the address above with “Data request” in the subject line so we can deal with it promptly.
What personal data we collect and how
We only collect data we actually need to run our shop and serve you well. Depending on how you use the site, that may include the following.
When you place an order or use checkout
Your name, billing and delivery address, email address, phone number, the items you ordered and your order history. Payment is taken by our payment provider; we receive confirmation that a payment succeeded and limited transaction details, but we do not see or store your full card number.
When you create an account
Your name, email address, password (stored in encrypted form), saved addresses and your order history, so you can check out faster and track your orders.
When you subscribe to our newsletter
Your email address (and your name if you give it), so we can send you product news and offers. We use an email marketing tool to manage this; you can unsubscribe at any time using the link in every email.
When you leave a product review
Your name (or chosen display name), your rating and review text, and the email address linked to your review. Reviews are handled through our reviews provider and are published on the relevant product page.
When you contact us
Your name, email address and the contents of your message, so we can answer your query and keep a record of our correspondence.
When you browse the site
Like most websites, we collect limited technical information automatically – for example your IP address, browser and device type, and the pages you view – through cookies and similar technologies. This helps the site work, keeps it secure, and lets us understand how it is used. See our Cookie Policy for the detail, including how to control cookies.
Why we use your data, and our lawful basis
Data protection law requires us to have a valid “lawful basis” for everything we do with your data. Ours are as follows.
- To fulfil your order – process payment, deliver your goods, handle returns and provide customer support. Lawful basis: performance of a contract with you.
- To keep tax and accounting records – record sales as required by law. Lawful basis: legal obligation.
- To send you marketing – newsletters and offers, where you have signed up. Lawful basis: consent, which you can withdraw at any time.
- To publish and manage reviews – display the feedback you choose to leave. Lawful basis: consent when you submit a review.
- To run and improve the site, prevent fraud and keep our service secure – including analytics and basic security monitoring. Lawful basis: our legitimate interests in operating a safe, working and well-understood website, balanced against your rights.
- To set non-essential cookies – such as analytics cookies. Lawful basis: consent, managed through our cookie controls.
Who we share your data with
We do not sell your personal data. We do share it with a small number of trusted service providers who process data on our behalf and only on our instructions, under contracts that require them to keep it secure. These fall into the following categories:
- Our website host, which stores the site and its data on secure servers (our hosting is provided by SiteGround).
- Our e-commerce and payment processing providers, which run the shop and securely take card and other payments at checkout. Our online shop is built on WooCommerce; card payments are handled by a regulated payment provider so that we never hold your full card details.
- Our email marketing provider, which delivers our newsletter to subscribers.
- Our reviews provider, which collects and displays customer reviews.
- Our analytics provider(s), which help us understand how the site is used.
- Couriers and delivery partners, which need your name and address to deliver your order.
We may also disclose data where we are legally required to do so, for example to comply with a court order, a tax authority or a lawful request from law enforcement.
International transfers
Some of the providers above are based outside the UK, including in the United States. Where your personal data is transferred outside the UK, we take steps to ensure it receives a level of protection equivalent to that required under UK law – for example by relying on UK “adequacy” regulations for the destination country, or by putting in place standard contractual clauses (the UK International Data Transfer Agreement or Addendum) with the provider. You can ask us for more detail about the safeguards that apply to a particular transfer.
How long we keep your data
- Order, payment and tax records – we keep these for around six years after the relevant transaction, as required by UK tax and accounting law.
- Account data – for as long as your account is active; if you ask us to close it, we delete or anonymise the data we no longer need to keep for legal reasons.
- Newsletter data – until you unsubscribe, after which we remove you from active mailing lists.
- Reviews – for as long as the review remains published, unless you ask us to remove it.
- Contact enquiries – for a reasonable period after your query is resolved, then deleted.
When we no longer need your data, we securely delete or anonymise it.
Your rights
Under UK data protection law you have the right to:
- Be informed about how we use your data – which is the purpose of this notice;
- Access the personal data we hold about you (a “subject access request”);
- Rectification – have inaccurate or incomplete data corrected;
- Erasure – ask us to delete your data where there is no good reason for us to keep it;
- Restriction – ask us to limit how we use your data in certain circumstances;
- Portability – receive certain data in a portable, machine-readable format, or have it sent to another provider;
- Object to processing based on our legitimate interests, and to direct marketing at any time; and
- Withdraw consent at any time where we rely on it, for example for marketing or non-essential cookies.
To exercise any of these rights, email us at info@planktonforhealth.co.uk. We will respond within one month, and we will not charge you in normal circumstances. We may need to verify your identity before acting on a request, to protect your data.
Cookies
We use cookies and similar technologies to make the site work, remember your preferences, understand how the site is used and, where you consent, for analytics. You can find full details, and control which non-essential cookies are set, in our Cookie Policy.
Keeping your data secure
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including secure hosting, encrypted connections (HTTPS) and restricting access to those who need it. No method of transmission over the internet is completely secure, but we work to protect your data and to deal promptly with any issue.
Children
Our website and products are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with their data, please contact us and we will delete it.
Changes to this notice
We may update this notice from time to time to reflect changes in our practices or the law. When we do, we will revise the “Last updated” date above. Please check back occasionally to stay informed.
How to complain
If you have a concern about how we handle your personal data, please contact us first at info@planktonforhealth.co.uk so we can try to put things right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at any time. You can reach the ICO at ico.org.uk, by their helpline on 0303 123 1113, or by post at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.