2.1 Introduction

This policy explains how Noosh collects, uses, stores and protects your personal data when you visit our website, purchase products or interact with us. We process personal data in accordance with the UK General Data Protection Regulation and Data Protection Act 2018.

2.2 Personal Data We Collect

·      Information you provide: When you place an order or create an account, we collect your name, billing and delivery address, email address, phone number and payment details. We also keep a record of your purchase history and communications with us.

·      Automatically collected data: When you visit our site, we automatically collect your IP address, browser type, device information, pages visited and time spent, via cookies, web beacons and similar technologies.

·      Third‑party data: We may receive information from service providers, such as payment processors or couriers, to facilitate your purchases and deliveries.

2.3 How We Use Your Data

We use your personal data to:

- Process and fulfill your orders, including delivery and customer service. - Communicate with you about orders, products, services and promotions (with your consent where required).

- Improve our website and services, perform analytics, and tailor content to your preferences.

- Comply with legal obligations and enforce our terms.

2.4 Legal Bases for Processing

We process your personal data on the following bases:

- Contractual necessity: to fulfill orders and provide services you request.

- Legitimate interests: to improve and secure our services, prevent fraud, and contact you about relevant products.

- Consent: for sending marketing communications or placing non‑essential cookies. You may withdraw consent at any time.

- Legal compliance: to meet obligations such as tax or product safety laws.

2.5 Cookies and Tracking

Our site uses cookies to function, remember your preferences and analyse traffic. Non‑essential cookies (e.g. for marketing) are used only with your consent. For details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

2.6 Sharing Your Data

We share your personal data with:

- Service providers such as Shopify, payment processors, fulfilment warehouses and couriers to process payments, deliver orders and manage our business.

- Analytics and marketing partners to measure site usage and deliver targeted advertising, where consented.

- Legal authorities if required by law, or to protect our rights and customers’ safety. We do not sell your personal data to third parties.

2.7 Data Transfers Outside the UK

Where personal data is transferred outside the UK (e.g., Shopify servers in other countries), we ensure adequate protection by using approved safeguards such as standard contractual clauses.

2.8 Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. After this period, data will be securely deleted or anonymized.

2.9 Your Rights

You have the right to:

- Access your personal data and request a copy of the information we hold about you.

- Request correction of inaccurate data or completion of incomplete data. - Request deletion of your personal data, or restriction of processing, under certain circumstances.

- Object to our processing of your data where we rely on legitimate interests.

- Withdraw consent for marketing communications at any time. - Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not complied with data protection laws. To exercise these rights, please contact us at hello@drinknoosh.com

2.10 Marketing Communications

If you opt‑in to receive marketing emails or newsletters, we will send you information about our products, promotions and events. You may unsubscribe at any time using the link in each email or by contacting us.

2.11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our business practices. The latest version will always be posted on this page with the date of revision.

2.12 Contact Us

If you have any questions about this policy or our privacy practices, contact us by email at [insert privacy contact email] or by mail at [insert postal address].