Privacy policy

Naya Self Care Ltd  |  Last updated: June 2026  |  Governing law: England and Wales

1. Who We Are

Naya Self Care Ltd is the data controller responsible for your personal data collected through this website.

Naya Self Care Ltd
Registered address: 112 Arlington Road, West Midlands, B14 4QE
Company number: 13200905
VAT number: 515 1968 84
Email: info@nayaselfcare.com
Website: www.nayaselfcare.com

If you have any questions about how we handle your personal data, or wish to exercise any of your rights, please contact us at info@nayaselfcare.com.

Our website is hosted and powered by Shopify Inc. Where Shopify processes your personal data as part of providing their platform services, Shopify acts as a data processor on our behalf. For more information on how Shopify handles your data, please visit the Shopify Privacy Policy.

2. What Personal Data We Collect

We collect the following categories of personal data, depending on how you interact with our website:

Data you provide to us directly:

• Your name
• Billing and shipping address
• Email address
• Telephone number
• Payment information (processed securely — we do not store full payment card details)
• Account login credentials if you create an account
• Communications you send to us, including customer service enquiries
• Marketing preferences and consent

Data collected automatically when you use our website:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website or search term
• Purchase history and browsing behaviour on our website
• Cookie data — see Section 8 for full details

Data received from third party platforms:

• Advertising and audience data from Meta (Facebook and Instagram) and Google, where you have interacted with our adverts on those platforms and consented to such tracking
• Review submissions through Loox, our customer review platform

We do not collect sensitive personal data such as health information, ethnic origin, or religious beliefs. We do not collect data from children — our website is intended for adults aged 18 and over.

3. How and Why We Use Your Personal Data

We only use your personal data where we have a lawful basis to do so under UK GDPR. The table below sets out the purposes for which we use your data and the lawful basis we rely on for each:

We will never use your personal data for purposes that are incompatible with the purposes listed above without first obtaining your consent.

4. Marketing Communications

We send marketing emails through Klaviyo, our email marketing platform. We will only send you marketing communications where you have given us your explicit consent to do so — for example by ticking an opt-in box at checkout, when creating an account, or through a sign-up form on our website.

You can withdraw your consent and unsubscribe from our marketing emails at any time by:

• Clicking the unsubscribe link in any marketing email we send you
• Contacting us at info@nayaselfcare.com

Withdrawing your consent will not affect the lawfulness of any processing carried out before your withdrawal. Please note that even if you unsubscribe from marketing emails, we may still send you transactional emails related to your orders, account, or returns.

We may also contact you by telephone where you have provided your number and consented to this form of contact.

5. Who We Share Your Personal Data With

We do not sell your personal data to third parties. We share your data only where necessary to provide our services or where required by law. The third parties we work with are listed below:

All third party processors we work with are required to handle your personal data securely and in accordance with applicable data protection law. Where they are located outside the UK, we ensure appropriate safeguards are in place — typically through Standard Contractual Clauses approved by the relevant data protection authority.

We may also disclose your personal data to regulatory or law enforcement authorities where required by law, or in connection with a business sale or transfer, in which case your data will remain subject to this Privacy Policy.

6. International Data Transfers

Some of our third party service providers are based outside the United Kingdom, including in the United States. When your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place to protect it, in accordance with UK GDPR requirements.

For transfers to the United States and other countries without a UK adequacy decision, we rely on Standard Contractual Clauses as the legal mechanism for those transfers. Each of our third party processors — including Shopify, Klaviyo, Meta, and Google — has their own data transfer mechanisms in place. You can find further information on these in their respective privacy policies.

7. How Long We Keep Your Personal Data

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

• Order and financial transaction data — retained for 6 years from the date of the transaction, in accordance with HMRC requirements
• Customer account data — retained for as long as your account is active. If you request deletion of your account and there is no legal obligation requiring us to retain your data, we will delete it promptly
• Marketing consent and email preferences — if you unsubscribe from our marketing emails, we will retain your email address on a suppression list to ensure we do not contact you again. We will not use your address for any other purpose
• Customer service communications — retained for up to 3 years from the date of the communication
• Cookie and analytics data — retained in accordance with the retention periods set by the relevant platform. See Section 8 for further details

When your data is no longer required, we will delete or anonymise it securely.

8. Cookies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device when you visit our website. We use cookies to make our website function correctly, to analyse how it is used, and — where you have given your consent — to show you relevant advertising.

When you first visit our website, you will be presented with a cookie consent banner. You can choose to accept all cookies, reject non-essential cookies, or manage your preferences. You can change your cookie preferences at any time through the cookie settings on our website.

The categories of cookies we use are as follows:

For full details of the cookies we use, please see our Cookie Policy.

9. Your Rights Under UK GDPR

As a UK resident, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to certain exceptions under applicable law:

• Right to access — you have the right to request a copy of the personal data we hold about you
• Right to rectification — you have the right to ask us to correct inaccurate or incomplete personal data we hold about you
• Right to erasure — you have the right to ask us to delete your personal data where there is no legitimate reason for us to continue holding it
• Right to restrict processing — you have the right to ask us to limit how we use your personal data in certain circumstances
• Right to data portability — you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that we transfer it to another organisation
• Right to object — you have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis
• Right to withdraw consent — where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal

To exercise any of these rights, please contact us at info@nayaselfcare.com. We will respond to your request within one calendar month. We may need to verify your identity before processing your request.

You will not be charged for exercising your rights, unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.

10. How to Complain

If you are unhappy with how we have handled your personal data, please contact us in the first instance at info@nayaselfcare.com and we will do our best to resolve your concern.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority:

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Security

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These include:

• Secure encrypted connections (SSL/TLS) on our website
• Secure password-protected account access
• Payment data processed securely through Shopify's PCI-DSS compliant payment infrastructure — we do not store full payment card details
• Access to personal data restricted to authorised personnel only

Please be aware that no method of transmission over the internet is completely secure. Whilst we take all reasonable steps to protect your data, we cannot guarantee absolute security. If you suspect any unauthorised access to your account or personal data, please contact us immediately at info@nayaselfcare.com.

12. Children

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with their personal data without parental consent, please contact us at info@nayaselfcare.com and we will delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically to stay informed about how we are protecting your personal data. Your continued use of our website following any changes constitutes your acknowledgement of the updated policy.

14. Third Party Websites

Our website may contain links to third party websites. This Privacy Policy applies only to our website and our processing of your personal data. We are not responsible for the privacy practices of any third party websites and encourage you to read their privacy policies before providing any personal data to them.