Privacy Policy - The Calder Wellness

This Privacy Policy explains how Calder Wellness Ltd ("we", "us", "our"), trading as The Calder Wellness, collects, uses, stores and protects your personal data when you visit https://chargevitalexpel.world (the "Site") or place an order for Wellaray Coffee.

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Controller details

The data controller responsible for your personal data is:

Calder Wellness Ltd
14 Calder House, Merchant Quarter
Leeds, LS1 4DL
United Kingdom
Company No. / VAT: 12847361
Email: info@chargevitalexpel.world
Telephone: +44 20 7946 0312

2. What personal data we collect

Category	Data collected	Source
Order data	Full name, telephone number, delivery address, order reference, SKU, price paid	You provide this directly via the order form
Contact data	Name, email address, message content, subject of enquiry	You provide this via the contact form
Technical data	IP address, browser type, device type, pages visited, time and date of visit, referring URL	Collected automatically via server logs and analytics cookies (only if you consent)
Marketing data	UTM parameters, Google Click ID (gclid) if present in the URL	Appended automatically by advertising platforms when you click a paid link
Cookie consent data	Record of your consent choice (accept/reject) and the date it was given	Stored in your browser's localStorage

We do not collect special category data (health data, biometric data, etc.) and we do not knowingly collect data from persons under 18.

3. How we use your data and our legal basis

Purpose	Legal basis (UK GDPR)
Processing and fulfilling your order; contacting you by phone to confirm delivery	Art. 6(1)(b) - performance of a contract
Responding to enquiries submitted via the contact form	Art. 6(1)(b) - steps prior to a contract; Art. 6(1)(f) - legitimate interests
Complying with legal obligations (tax records, consumer law)	Art. 6(1)(c) - legal obligation
Analytics and measurement of website performance	Art. 6(1)(a) - consent (via cookie banner)
Advertising measurement (Google Ads conversion tracking)	Art. 6(1)(a) - consent (via cookie banner)
Fraud prevention and site security	Art. 6(1)(f) - legitimate interests

4. Cookies

We use cookies and similar technologies. Please see our full Cookie Policy for details. Non-essential cookies (analytics, advertising) are only set after you click "Accept All" in the cookie banner. You can change your preference at any time via the cookie banner.

5. Who we share your data with

We share your data only where necessary and with appropriate safeguards in place:

Fulfilment and delivery partners - to dispatch your order (name, address, telephone).
Google LLC - Google Analytics and Google Ads (only if you consent to analytics/advertising cookies). Google is certified under the UK-US Data Bridge. Data may be processed in the USA.
Hosting provider - server logs processed by our web hosting provider on our behalf under a data processing agreement.
Legal and regulatory authorities - where required by law (e.g. HMRC, courts).

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

6. International transfers

Where we transfer personal data outside the UK (e.g. to Google LLC in the USA), we rely on the UK-US Data Bridge (adequacy decision) or, where applicable, the International Data Transfer Agreement (IDTA) incorporating UK-specific addenda to the EU Standard Contractual Clauses.

7. Retention periods

Data type	Retention period
Order records (name, phone, order detail)	7 years (HMRC record-keeping requirement)
Contact form messages	2 years from last contact, unless required for legal proceedings
Analytics data (aggregated)	26 months (Google Analytics default)
Cookie consent records	12 months (stored in browser localStorage; automatically overwritten on new consent)
Server access logs	90 days

8. Your rights under UK GDPR

You have the following rights in relation to your personal data:

Right of access - request a copy of the personal data we hold about you (Subject Access Request).
Right to rectification - ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten") - ask us to delete your data where there is no compelling reason for its continued processing.
Right to restriction - ask us to restrict processing of your data in certain circumstances.
Right to data portability - receive your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object - object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@chargevitalexpel.world or in writing to the address in Section 1. We will respond within one calendar month. We may ask you to verify your identity before actioning your request.

9. Right to lodge a complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

We would, however, appreciate the chance to address your concerns before you contact the ICO, so please get in touch with us first.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. These include HTTPS encryption, access controls on our systems, and data minimisation practices.

11. Links to third-party websites

Our Site contains links to external websites (e.g. EFSA, NHS, BDA). We are not responsible for the privacy practices of those sites. We recommend you review their privacy policies before providing any personal data.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the Site following a material change constitutes acceptance of the updated policy.

13. Contact us about privacy

For any privacy-related queries, please contact: info@chargevitalexpel.world or write to us at the address in Section 1.