Privacy Policy

Privacy Policy

Last updated: 3 June 2026

This Privacy Policy explains how Cloverlight LLC (“we”, “us”, “our”), operating the Nutrisentra brand at www.nutrisentra.co.uk, collects, uses, shares and protects your personal data. We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and where applicable the EU General Data Protection Regulation (EU GDPR 2016/679).

1. Data Controller

Cloverlight LLC (trading as Nutrisentra) is the data controller responsible for your personal data.
Email: support@nutrisentra.co.uk
Website: www.nutrisentra.co.uk

2. Personal Data We Collect

We collect the following categories of personal data:

  • Identity & Contact: Name, email address, billing and delivery address, telephone number.
  • Transaction: Purchase history, order details, payment method type (we do not store full card numbers).
  • Technical: IP address, browser type, device information, pages visited, referral source.
  • Marketing: Your preferences for receiving marketing from us and any third parties.
  • Communications: Messages you send us via email, contact forms, or live chat.

3. How We Collect Your Data

  • Direct interactions: When you create an account, place an order, subscribe to our newsletter, or contact us.
  • Automated technologies: Cookies, web beacons, and similar tracking technologies when you visit our website.
  • Third parties: Payment processors, analytics providers, and advertising partners.

4. Legal Basis for Processing

Purpose Legal Basis
Processing your order and payment Performance of a contract (Art. 6(1)(b))
Account management Performance of a contract (Art. 6(1)(b))
Fraud prevention & security Legitimate interests (Art. 6(1)(f))
Legal and regulatory compliance Legal obligation (Art. 6(1)(c))
Marketing communications (where consented) Consent (Art. 6(1)(a))
Website analytics & improvement Legitimate interests (Art. 6(1)(f))
Customer support Legitimate interests (Art. 6(1)(f))

5. How We Use Your Data

  • To process and fulfil orders and manage returns.
  • To communicate with you about your order and provide customer support.
  • To send promotional emails and newsletters (only with your consent).
  • To personalise your shopping experience.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with legal obligations (e.g. tax, accounting).
  • To improve our website, products and services.

6. Sharing Your Data

We may share your personal data with:

  • Payment processors (e.g. Shopify Payments, Stripe) to process transactions securely.
  • Delivery and logistics partners to fulfil and track your order.
  • IT and platform providers (e.g. Shopify) who host and support our store under data processing agreements.
  • Marketing platforms (e.g. Klaviyo, Meta, Google) where you have consented to marketing.
  • Legal or regulatory authorities when required by law.

We do not sell your personal data to third parties.

7. International Transfers

Some of our service providers are based outside the UK and European Economic Area (EEA). Where we transfer personal data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or transfers to countries with UK adequacy regulations. You may request details of these safeguards by contacting us.

8. Data Retention

  • Customer order data: Retained for 7 years to comply with HMRC and tax obligations.
  • Marketing data: Until you withdraw consent or unsubscribe.
  • Account data: For the duration of your account plus 2 years after closure.
  • Technical/log data: Up to 12 months.

9. Your Rights

Under UK GDPR (and EU GDPR where applicable), you have the following rights:

  • Right of access – to request a copy of your personal data.
  • Right to rectification – to request correction of inaccurate data.
  • Right to erasure (“right to be forgotten”) – to request deletion of your data where there is no lawful basis for retention.
  • Right to restriction of processing – to request we limit how we use your data.
  • Right to data portability – to receive your data in a structured, machine-readable format.
  • Right to object – to object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision-making – not to be subject to solely automated decisions that significantly affect you.
  • Right to withdraw consent – at any time where processing is based on consent.

To exercise any of these rights, please contact us at support@nutrisentra.co.uk. We will respond within 30 days.

10. Complaints

If you are in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113

If you are in the EU, you may contact your national data protection supervisory authority.

11. Cookies

We use cookies and similar technologies on our website. Please see our Cookie Policy for full details.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review it periodically.

13. Contact Us

For any queries about this policy or your personal data, please contact:
Cloverlight LLC (trading as Nutrisentra)
Email: support@nutrisentra.co.uk