The summary, in plain English
We only collect personal data you actively give us — your email when you join the waitlist, your name and address when you order. We never sell, rent, or share your data with third parties for marketing. You can ask us to delete everything we hold about you at any time by emailing privacy@innatelyhalal.com.
Who we are
Innately Halal Ltd (registered in England, company number pending incorporation). Registered office: to be confirmed at incorporation. Contact: info@innatelyhalal.com.
We are the data controller for the personal data described in this policy. Our ICO registration is pending and the number will be added here once issued.
What we collect, when, and why
Waitlist signup. We collect your email address when you join the waitlist or subscribe to our newsletter. We use it to send you the email you signed up for and nothing else. Lawful basis: consent (Article 6(1)(a) UK GDPR).
Order data. When you place an order (post-launch, on the live storefront), we collect your name, billing and shipping address, email, phone, and payment confirmation token. Lawful basis: contract (Article 6(1)(b)).
Customer support. When you email or contact us, we keep a copy of the correspondence for as long as we need to resolve the matter and a reasonable record period afterwards. Lawful basis: legitimate interests (Article 6(1)(f)).
Analytics. If you accept analytics cookies, we use Google Analytics 4 (anonymised IP, no remarketing) to understand site usage in aggregate. If you do not accept, we do not load GA4 at all. Lawful basis: consent (Article 6(1)(a)).
Marketing pixels. If you accept marketing cookies, we may load the Meta Pixel for ad measurement. If you do not accept, the pixel is never loaded. Lawful basis: consent (Article 6(1)(a)).
Who sees your data
Your data is shared only with the processors strictly required to run the service: Netlify (hosting), Klaviyo (email), Shopify (storefront and checkout, once live), Stripe / Shopify Payments (payment processing), DPD / Royal Mail (delivery), and Google Workspace (our staff email). Each is contracted under a UK-GDPR-compliant data processing agreement.
We will never sell your data. We will never share your data with third-party marketers. We will never share your data with a data broker.
International transfers
Some of our processors (e.g. Klaviyo, Google) transfer data outside the UK. Where this happens, transfers rely on UK-approved Standard Contractual Clauses and additional safeguards. You can request a list of our specific transfer mechanisms at any time.
How long we keep it
Email signups: until you unsubscribe, or three years of no engagement (whichever is shorter). Order data: seven years after the last order, to meet UK tax record obligations. Customer support correspondence: three years from the last interaction.
Your rights
Under UK GDPR you have the right to: access your data (a copy of everything we hold), rectify any inaccurate data, erase your data (right to be forgotten), restrict processing, object to processing, data portability (a structured machine-readable copy of your data), and to withdraw consent at any time. To exercise any of these, email privacy@innatelyhalal.com — we'll respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data.
Children
We do not knowingly collect data from anyone under 18. The product itself is formulated and dosed for adult men. If you believe a child has provided us with personal data, contact privacy@innatelyhalal.com and we will delete it.
Changes to this policy
We will update this page if our processing practices change. The "Last updated" date at the top will reflect any change. Material changes will trigger an email notice to anyone on our list.