Privacy Policy

Introduction

Rheal Superfoods (“we”) or (“us”) are committed to protecting and respecting your privacy. This privacy policy, along with any other documents that we make reference too, informs you how we collect, process, use and retain your personal information, including any special categories of personal data, when you use our site, buy our products, sign up to our marketing, engage with our brand and enter any competitions associated with the Rheal brand. 

This privacy policy was last updated on 30th May 2024.

If you have any questions regarding our policy, or in relation to your data, please get in touch with us at support@rhealsuperfoods.com.


Rheal Superfoods Ltd is the data controller responsible for this website (www.rhealsuperfoods.com). The Rheal group refers to our UK business. We also collect your data if you have purchased from other sites selling Rheal Products (from Rheal directly) such as TikTok Shop and Amazon. We are responsible for the personal data we collect from you. This just means that we are in control of the data we collect from you and decide how we use it. 

 


The Personal Data we collect and how we use it

How you use our site depends on which information we collect. There are many different points when you give us your data, these include when you; use our site, purchase products, opt-in to marketing communications, engage with social media or our customer support team, respond to surveys, enter competitions, use refer-a-friend or review our products and services. When you interact with the Brand, you are giving us permission to collect your information.

 

Identity Data

Full Name, Title, Gender, Date of Birth, Email Address, Phone Number, and any username information from social media (social media handles)

Transactional Data

Billing address, Shipping Address, Payment Details including card information, Direct Debit and other bank information

Technical Data

Log files such as IP address, browser type, internet service provider, referring and exit pages, time stamps, location, cookies, time zone, search terms, page views, and any other device Information.

Tracking Data

Web beacons, cookies, tags and pixels are electronic files used to record how you browse and use the website. 

Profile Data

Account Username and Passwords, Orders made, Survey/Feedback responses, Any preferences you have, and any custom categories we have made on your behalf.

Marketing Preferences

Opt in (or out) status on email, SMS and general marketing.

Special Category

Health information - e.g. contact sharing symptoms, health issues.


We only use your personal data in accordance with data protection laws.


We use your above personal data for many reasons, including:

  • To register you as a new customer and managing a sale with you
  • To contact you regarding your completion of registration process, or due to your order(s) with us.
  • To process your orders, manage payments for products/services, and deliver them to you.
  • To manage our relationship with you, including notifying you about changes to your order, our terms of service or privacy policy
  • To ask you to leave a review or take a survey, and complete a survey
  • To protect our business and website, including troubleshooting, maintenance and testing
  • For manage financial, tax and legal purposes
  • To monitor how you use our site, give you the best site experience, deliver relevant content and website advertisements to you and measure their effectiveness
  • To use data analytics to improve our products/services, websites, customer relationships and experiences
  • To make recommendations to you about goods and services that we think may be of interest to you on the basis of previous purchase behaviour.
  • For monitoring any fraudulent or illegal activity.

Marketing consent: We only opt you into marketing if you explicitly opt in, either at checkout, our email sign up or on any pop ups. We use this information to target you with marketing information and you can opt-out at any time.

 All data, except for Special Category Data, is collected and processed for our legitimate interest - which means in the interest of operating our business and being able to offer the best experience/product and service to you.


Special Data

We also collect some data that is considered a Special Category. This is information we collect during our Product Finder Quiz and/or through Customer Experience reachout. This data relates to sensitive health information, such as what your health concerns are or which symptoms you are experiencing. You have to give explicit consent for us to collect and process this data. When submitting this data, it is sent to our Customer Database (Klaviyo) and attached to your profile. This data is not used for targeting or profiling, and it is not shared outside of Rheal and the software we use. The purpose for collecting this special category data is for Rheal only and is for market research and to recommend the most suitable product for you on the quiz or during your conversation with Customer Experience directly. At any point, this data can be removed from our systems by requesting it is done so.

We will always act with care when it comes to your personal data. Our Special Category data is collected and processed based on individuals explicit consent. You can withdraw this consent at any time, by simply emailing us at support@rhealsuperfoods.com and asking us to do so. 

 

We also collect, use and share statistical or demographic data for any purpose. This is known as Aggregated Data. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will never directly or indirectly reveal your identity.

Your failure to provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to set up a Rheal subscription or provide you with your order). In this case, we may have to cancel a product or service you have with us. If this happens, we will notify you.

 


Data Retention

Data retention looks at the length of time we hold your data for. We take steps to ensure we only keep your data for as long as necessary relating to the purpose of collecting your data. For tax and legal reasons, we hold all personal data, including financial and identity data, for up to seven (7) years since your last purchase or interaction with us. After this period, all personal data relating to an individual is either deleted or anonymised.  At any time, you are able to withdraw your consent by contacting our team and requesting your data to be erased, instructions of which are listed in the introduction. 


In some circumstances, we will anonymise your personal data instead. This means it can no longer be linked to you and you cannot be identified from it. This is for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Disclosure of your data

We will only share your personal information within the Rheal group and third party service providers if it is necessary or reasonably required for any of the purposes listed above.

 

Sharing your data internationally

We share your personal data within Rheal. We have operations in the United Kingdom and so will involve transferring your data outside the European Economic Area (EEA). We share data between the EEA only within Rheal.

Some of our external third parties are based outside the EEA and therefore their processing of your personal data will involve a transfer of data outside the EEA. Whenever there is a transfer of your personal data out of the EEA, we take a similar degree of protection to it and will always comply with the General Data Protection Regulation.

 

Who can access your data?

We have put measures in place so your personal data is protected from being accidentally lost, used, altered or accessed in an unauthorised way. Your personal data has limited access, restricted to Rheal employees, agents, contractors and any third party who have a purpose to know. 

 

Third Party Providers

We may share personal data with third parties, for the purpose of suppliers and other service providers who process data on our behalf, including those allow that us to operate as a business. We also may share personal data with any government agencies or for law enforcement purposes, where we are required to do so by law. All third parties we use, are required to respect the security of your personal data and ensure it is treated in accordance with the law. All third parties are only allowed to process any personal data based on our instruction and are not permitted to use it for their own purposes.


We also share data with third parties relating to marketing activities, advertising and analytics. You can find more information about this in our cookie policy. We may also share data with third parties to whom we may choose to transfer, sell or merge parts of our business or our assets, or those who we seek to acquire or merge with. Any chances made will handle or use your personal data in accordance with this privacy policy.


Occasionally, we may also include links to external websites (outside of the rhealsuperfoods domain). Any hyperlinks or references are provided for your convenience only. We have no control over third party websites and accept no legal responsibility for any content, material or information contained in them. 

 

Cookies

We use cookies to identify you from other users of our site and to give you a more tailored experience. We use essential cookies, functional cookies and performance and advertising cookies. For detailed information on cookies, and third party cookies, please see our Cookie Policy here.

 

Your rights

Under data protection law when it comes to your personal data, you have the right to the following:

  • Request access to your personal data
  • Request correction of your personal data
  • Request erasure of your personal data
  • Object to processing of your personal data
  • Request restriction of processing your personal data
  • Request transfer of your personal data
  • Right to withdraw consent

If you wish to exercise your rights relating to the above, please contact us at support@rhealsuperfoods.com and we will action your request within one month, unless the request is complex, in which case we may require longer. However, we will keep you regularly updated with our time frames relating to your case.