Privacy Policy
Last updated: 21 July 2026 - Version 1.0
This Privacy Policy explains how Stonebridge Nutrition Ltd ("we", "us", "our") collects, uses, stores and protects your personal data when you visit https://purefresh.world/ (the "Site") or place an order for Wellaray Coffee.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
Stonebridge Nutrition Ltd
12 Clerkenwell Road, London EC1M 5PA, United Kingdom
Company No. 14829376 · VAT GB847293561
Email: info@purefresh.world
2. What Personal Data We Collect
| Category | Data collected | Source |
|---|---|---|
| Identity | Full name | Order form / contact form |
| Contact | Phone number, email address | Order form / contact form |
| Transaction | Order details, product SKU, price | Order form |
| Marketing | UTM parameters, Google Click ID (gclid) | URL parameters (with consent) |
| Technical | IP address, browser type, pages visited, session duration | Cookies / server logs (with consent) |
We do not collect sensitive personal data (special category data) such as health information, racial origin, religious beliefs or biometric data.
3. Legal Bases for Processing
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Processing and fulfilling your order | Article 6(1)(b) - performance of a contract |
| Responding to contact form enquiries | Article 6(1)(b) - pre-contractual steps; or Article 6(1)(f) - legitimate interests |
| Analytics and site improvement | Article 6(1)(a) - consent (via cookie banner) |
| Advertising / remarketing | Article 6(1)(a) - consent (via cookie banner) |
| Legal compliance and record-keeping | Article 6(1)(c) - legal obligation |
| Fraud prevention and security | Article 6(1)(f) - legitimate interests |
4. How We Use Your Personal Data
- To process and confirm your order for Wellaray Coffee and arrange delivery.
- To respond to enquiries you submit via our contact form.
- To send transactional communications related to your order (confirmation, delivery updates).
- To analyse how our Site is used (where you have consented to analytics cookies).
- To comply with our legal and regulatory obligations, including tax and accounting requirements.
- To protect the security and integrity of our Site and prevent fraudulent submissions.
We do not sell, rent or share your personal data with third parties for their own marketing purposes.
5. Cookies and Tracking Technologies
We use cookies and similar technologies on our Site. Please see our separate Cookie Policy for full details. In summary:
- Strictly necessary cookies are set automatically and do not require consent.
- Analytics and advertising cookies are only set after you click "Accept All" on our cookie banner.
- We implement Google Consent Mode v2 - advertising and analytics tracking defaults to denied until explicit consent is given.
6. Data Sharing and Third-Party Processors
We may share your personal data with trusted third-party service providers acting as data processors on our behalf. These include:
- Hosting and infrastructure providers - to operate the Site securely.
- Order fulfilment and logistics partners - to deliver your Wellaray Coffee order.
- Google Analytics / Google Ads - for site analytics and advertising measurement, where you have consented.
- Email service providers - to send transactional order communications.
All third-party processors are required to process personal data only on our documented instructions and to maintain appropriate security measures. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).
7. Data Retention
| Data type | Retention period |
|---|---|
| Order records (name, contact, transaction) | 6 years from the date of order (UK tax / accounting obligation) |
| Contact form submissions | 12 months from the date of submission, unless a contract results |
| Analytics data (aggregated) | 26 months (Google Analytics default, configurable) |
| Server logs (IP, access logs) | 90 days |
| Cookie consent records | 13 months |
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access - to obtain a copy of the personal data we hold about you (Subject Access Request).
- Right to rectification - to have inaccurate data corrected.
- Right to erasure ("right to be forgotten") - to request deletion of your data, subject to legal obligations.
- Right to restrict processing - to ask us to pause processing in certain circumstances.
- Right to data portability - to receive your data in a structured, machine-readable format.
- Right to object - to processing based on legitimate interests.
- Right to withdraw consent - at any time, where processing is based on consent (e.g. analytics cookies). Withdrawal does not affect the lawfulness of prior processing.
- Rights related to automated decision-making - we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, contact us at info@purefresh.world. We will respond within one calendar month. We may need to verify your identity before fulfilling a request.
9. Right to Lodge a Complaint
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These include HTTPS encryption, access controls and regular security reviews. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our Site and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.
12. Links to Third-Party Sites
Our Site contains links to external websites (e.g. NHS, EFSA, BDA). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Where changes are material, we will take reasonable steps to notify you (e.g. via a notice on the Site).
14. Contact
For all privacy-related enquiries:
Email: info@purefresh.world
Post: Stonebridge Nutrition Ltd, 12 Clerkenwell Road, London EC1M 5PA, UK