Our principles

Nature's Best respects the information shared with us and takes the security of this data very seriously. We handle your data carefully and sensibly. Our policies and compliance measures make sure of that. You can always contact us if you have questions or concerns

General

Nature's Best is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act of 2018 (UK DPA).

We have published this notice to help you understand:

• Which information Nature's Best collects from you
• How and why Nature's Best collect information from you
• Who we share your information with, why and on what basis
• What your rights are

If we make changes to this policy we will notify you by updating it on our website www.naturesbest.co.uk (the “Website”). Lamberts Healthcare Ltd. trading under its Nature's Best brand will be what is known as the 'Data Controller' of the personal data you provide to us, and we will sometimes refer to ourselves in this notice as “we” or “us”. By Data Controller, this means Nature's Best determines the purposes and way in which any personal data are, or will be, processed.

Should you need to contact us please write to:
Data Protection Officer
Nature's Best
Century Place
Tunbridge Wells
Kent
TN2 3BE
or via info@naturesbest.co.uk quoting Security and Privacy Enquiry.

How We Collect Personal Data

Like most brands, we collect personal data as you interact with us or when you share personal data with third parties that in turn can be shared with us. We do this respectfully and carefully to protect your rights. Personal data can help us better understand your interests and preferences as a consumer and a person.

We may collect data through a variety of ways, such as:

You Share it Directly - You give us your personal data directly for example when signing up for an account on our Website or purchasing as a Guest User or by calling or emailing us, or while participating in a survey or contest etc. We may ask for things like your name, email or home address, date of birth, payment information, your age, gender, the number of people in your family, and the way you want us to send you information about our products and services—for example, to your home address, email address, or by texting you.

You Interact with our Website or emails - We may use technologies that automatically collect information when you visit our Website, view our advertisements, or use our products or services. For example, we use cookies (a tiny file stored on your computer's browser) to tell us what browser and operating system you are using, your IP address, and about your online activities such as web pages you visit, links you click, or whether you have or have not opened an email from us. This information could include your mobile phone or other device advertising ID, information about your phone's operating system, how you use the app or device, your physical location, and other information that is considered personal data in some cases.

You Connect with Partners or Third Parties - We may get information that other companies share with or sell to us. For example, you may have given consent for another company to share your personal data with us when you signed up for telecom services or a retailer loyalty points program. Where possible, we may also collect personal data from publicly available sources, such as from internet postings, blog entries, videos, or social media sites. We may also receive personal data from other companies, such as consumer data resellers, who are in the business of collecting or aggregating information about you sourced from publicly available databases (in line with local legal requirements as applicable) or from consent you have given to their use and subsequently our use of your personal data. This might include information about your income level, age, gender, number of people in your family, and products you have bought on the internet or from stores in your neighbourhood.

Types of Personal Data We Collect

We collect the following types of personal data. Please be aware that we only collect it in accordance with legal requirements and when have a lawful basis to do so (for example when we have your consent, or when we need this information for the performance of a contract to which you are party, or when the processing is necessary based on our legitimate interest or for compliance with a legal obligation). Many of these data collection types almost certainly will not apply to you. If you want to know what data we actually have about you, please contact us.

Please be aware that we only collect it in accordance with legal requirements and when have a lawful basis to do so (for example when we have your consent, or when we need this information for the performance of a contract to which you are party, or when the processing is necessary based on our legitimate interest or for compliance with a legal obligation). Many of these data collection types almost certainly will not apply to you. If you want to know what data we actually have about you, please contact us.

What data do we typically collect

Contact Information: Data elements in this category include names (including nicknames and previous names), titles, mailing address, email address, telephone/mobile number and contact information for related persons (such as authorized users of your account).

General Demographics & Psychographics: Data elements in this category include personal characteristics and preferences, such as age range, marital and family status, shopping preferences, languages spoken, loyalty and rewards program data, household demographic data, data from social media platforms, education and professional information, hobbies and interests and propensity scores from third parties (likelihood of purchase, experiencing a life event, etc.).

Transaction and Commercial Information: Data elements in this category include customer account information, qualification data, purchase history and related records(returns, product service records, records of payments, credits etc.), records related to downloads and purchases of products and applications, non-biometric data collected for consumer authentication (passwords, account security questions), and customer service records.

Unique IDs & Accounts Details: Data elements in this category include unique ID number (such as customer number, account number, subscription number, rewards program number), system identifiers (including username or online credentials),device advertisers, advertising IDs and IP address.

Online & Technical Information: This includes internet or other electronic network activity information. Data elements in this category include IP addresses, MAC addresses, SSIDs or other device identifiers or persistent identifiers, online user IDs, encrypted passwords, device characteristics (such as browser information), web server logs, application logs, browsing data, viewing data (TV, streaming), website and app usage, first party cookies, third party cookies, web beacons, clear gifs and pixel tags. This also includes information such as your device functionality (browser, operating system, hardware, mobile network information); the URL that referred you to our Website; the areas within our Website or apps that you visit and your activities there (including emails, such as whether you open them or click on links within); your device characteristics; and device data and the time of day.

Inferred Information: This includes information derived from other personal data listed in this section. We create inferred and derived data elements by analyzing all personal data we may have about you. Data elements in this category include propensities, attributes and/or scores generated by internal analytics programs.

What data do we sometimes collect

Sometimes we collect sensitive personal data or special category data and we do it only in accordance with the legal requirements and when we have a lawful basis to do so (for example when we have your consent, or when we need this information for the performance of a contract to which you are party, or when the processing is necessary based on our legitimate interest or for compliance with a legal obligation).

Precise Geolocation: Data elements in this category include precise location (such as latitude/longitude).

Health-Related Information: Data elements based on how it is collected include: Information collected from consumer programs (such as when you register on our Website, participate in our rewards programs, or purchase our products); General health and symptom information, such as tiredness, fatigue, etc.; Pregnancy-related information, such as due date; Consumer Research Studies where you have provided your informed consent; Information about physical or mental health, disease state, medical history or medical treatment or diagnosis, medicines taken and related information; Information collected when you contact us to report a complaint or an adverse event occurring in connection with the use of one of our products.

Financial Account Information: Data elements in this category include bank account number and details and payment card information (e.g., when you receive a credit from us).

Government-Issued IDs: Data elements in this category include governmental ID and Tax ID (e.g., for winners of a contest in jurisdictions where we are required to collect that information).

Audio Visual Information: Data elements in this category include photographs, video images, CCTV recordings, Call Center recordings and call monitoring records and voicemails (e.g., for research, when you visit our facilities, or when you call us).

Smart Devices and Sensor Information: Data elements in this category include smart device records, IoT products.

Data About Children: : Data elements in this category may include for example the age of your children for pharmacovigilance purposes.

Biometric Information: Data elements in this category include facial recognition data, and a mathematical representation of your biometric identifier, such as the template maintained for comparison (e.g., for healthcare research studies).

General Ways We Use Personal Data

We use your personal data to help us meet our purpose of touching and improving the lives of people like you every day around the world. For example, we use your information for the following Processing Purposes:

Products/Services. This includes performing services for you and sending you products or samples you have requested.

Customer Management. This includes: Identifying and authenticating you to our different marketing programs and Website; Administering and maintaining accounts and preferences, as well as financial incentive, rewards, discounts (e.g., price or service coupons) and loyalty programs(collectively, “Rewards Programs”); Helping you manage your Website or app preferences; Allowing you to enter our contests or sweepstakes and leaving ratings and reviews.

Customer Service/Communications, such as: Responding to your questions or requests for information; Providing customer service; Sending transactional messages (such as account statements or confirmations); Interacting with you on social media; Sending marketing communications about our products or services (or the products or services of our partners), survey, and invitations.

Payment/Financial, such as: Processing your payment for the products you buy from us; Processing and issuing refunds and collections.

Serving Ads. This includes sending you relevant ads by email and serving others, who, having a profile like yours, may be interested in hearing from us, with relevant ads through look-alike audiences.

Ads Administration and Analytics, such as measuring and tracking the effectiveness of advertising campaigns and carry out other administrative and accounting activities with respect to ad campaigns.

Quality and Safety, including: Quality control, training, and analytics; Safety maintenance and verification; System administration and technology management, including optimizing our Website and applications, and products and services.

Security, including detecting threats and protecting against malicious or fraudulent activity. Recordkeeping and Auditing, including recordkeeping and auditing interactions with consumers, including logs and records maintained as part of transaction information.

Recordkeeping and Auditing, including recordkeeping and auditing interactions with consumers, including logs and records maintained as part of transaction information.

Legal/Compliance, including risk management, audit, investigations, reporting and other legal and compliance reasons.

Research & Development (“R&D”), such as Internal research; To design, develop and further improve our products, services and programs.

Legal Basis & Retention by Processing Purpose

Generally, we keep your personal data for only as long as it is needed to complete the processing purpose for which it was collected or as required by law. We may need to keep your personal data for longer than our specified retention periods to honour your requests, including to continue keeping you opted out of marketing emails, or to comply with legal or other obligations. This section outlines why the processing purposes comply with the law (legal basis, as required by UK GDPR), and how long we keep the personal data used for that processing purpose, unless an exception applies (retention period).

Products/Services
Legal Basis:

• Performance of a Contract for processing and fulfilling eCommerce sales, including collecting Guest order information.
• Consent for sampling programs.
• Legitimate Interest or Consent for coupon issuing and coupon clearing.

Retention Period: After no longer needed to provide you with the requested products or services unless required by law or contract to retain it further.

Customer Management
Legal Basis:

• Performance of a Contract for: contests, cash back and loyalty rewards membership (unless consent is required); managing warranty claims.
• Consent for: sending you (personalized) marketing email and text communications, processing your ratings and reviews of our products; collection and analysis of the information contained on the purchase receipts you upload for more personalized advertising; adverse event reporting; the processing of certain sensitive personal data or special category data; non-essential tracking technologies on our Website and in our mobile apps.
• Legitimate Interest for: setting up your Nature's Best account; managing your account; providing customer services to you; consumer complaint handling & complaint investigation (unless consent is required); postal marketing (unless consent is required); delivering requested items to you; processing your personal data within our various marketing systems.

Retention Period: Until you request to delete the personal data or withdraw your consent. Otherwise, we will delete your personal data after no longer needed for the processing purpose or after a maximum of 50 months of non-activity unless required by law or contract to retain it further. We define inactivity through several internal criteria that indicate a user's lack of interaction with our programs and communications. For example, if you do not log in, or do not open or click on our emails, we will consider you “inactive” and delete your data after a maximum of 50 months but sooner for certain countries depending on local legal requirements. We may need to keep some of your personal data to honour your requests, including to continue keeping you opted out of marketing emails, or to comply with other legal obligations. We may also retain certain personal data used in ratings and reviews for as long as the review is used or until the product is discontinued.

Customer Service/Communications
Legal Basis:

• Performance of a Contract for: sending transactional/program information about your accounts, purchases, order status, reward terms, etc. ; engagement with professional influencers, business contacts, ambassadors, etc.
• Consent for sensitive personal data or special category data which may be collected in some adverse event cases.
• Legitimate Interest for managing consumer and business inquiries, such as your questions or requests to our call centre or nutritional advice team.

Retention Period: Until you request to delete the personal data or withdraw your consent. Otherwise, we will delete your personal data after no longer needed for the processing purpose unless required by law or contract to retain it further.

Payment/Financial
>Legal Basis:

• Performance of a Contract.

Retention Period: As long as necessary to fulfil the order unless required by law or contract to retain it further. We generally retain data for 24 months for cashback offers and 10 years for warranties.

Serving Ads
Legal Basis:

• Consent: When we deploy tracking technologies on our own Website or within our own mobile applications, even when we place tracking technologies on third-party properties or buy data from third-party vendors, we require them to comply with the legal requirements (including obtaining your consent before deploying our tracking technology or sharing your personal data with us if needed) ; For processing your email address to send you personalized marketing communications by email.
• Legitimate interest for creating and activating look alike audiences.

Retention Period: After no longer needed for the processing purpose (i.e., after the ad campaign ends) or within a maximum of 36 months unless you opt-out sooner. For personal data collecting via tracking technologies on our Website or within our mobile applications, within 12 months unless you opt-out prior.

Ads Administration and Analytics
Legal Basis:

• Legitimate Interest.

Retention Period: After no longer needed to fulfil the processing purpose. We will, to the extent possible, aggregate or anonymize your personal information before utilizing it for analytics purposes.

Quality & Safety
Legal Basis:

• Legitimate Interest.

Retention Period: After no longer needed to fulfil the processing purpose unless required by law or contract to retain it further. For personal data collecting via tracking technologies on our Website or within our mobile applications, within 12 months.

Security
Legal Basis:

• Legitimate Interest for activities such as maintaining network and data security.

Retention Period: After no longer needed to fulfil the processing purpose unless required by law or contract to retain it further. For personal data collecting via tracking technologies on our Website or within our mobile applications, within 12 months.

Recordkeeping and Auditing
Legal Basis:

• Performance of a Contract for transactional data.
• Legal Obligation for certain recordkeeping activities

Retention Period: After no longer needed to fulfil the processing purpose unless required by law to retain it further.

Legal/Compliance
Legal Basis:

• Legal Obligation and legitimate interest (e.g. to establish, bring or defend against legal claims).

Retention Period: After no longer needed to fulfil the processing purpose unless required by law to retain it further.

Research & Development (“R&D”)
Legal Basis:

• Consent.

Retention Period: We retain non-biometric personal data collected from clinical research as long as needed for the purpose for which it was collected, or 30 years after the purpose of collection is fulfilled, and/or for as long as may be required to retain it by local law, regulation or good clinical research practice, whichever is later. For non-clinical research, we will retain non-biometric personal data for a maximum of 5 years after the time of collection, or after the purpose of collection is fulfilled, whichever is later. For biometric data, we will retain for as long as necessary to fulfil the purpose of collection or processing, unless we are required to retain it longer for legal or regulatory compliance purposes, or to exercise or defend our legal interests. We may retain your signed informed consent documents longer.

Children's Personal Data

Our Website is not intended for, and should not be used by, children under the age of 18. We only collect children's data in limited circumstances and always in accordance with applicable data protection laws. We do not use personal data collected from children for targeted advertising.

How We Disclose Personal Data

We may disclose your personal data to others, such as select partners so they can send you offers, promotions, or ads about products or services we believe you may be interested in. We work with a number of trusted partners, suppliers, agencies and businesses in order to provide you with high quality products and services, such as delivery companies, and market research companies amongst others. All selected third parties are subject to thorough security checks, and will only hold the minimum amount of personal information needed in order to fulfil the orders you place or provide a service on our behalf. We do not sell your personal data to marketers in exchange for monetary compensation.

Some examples of the categories of third parties with whom we share your data are:

Online Platforms and Ad Tech Companies
Our Website and applications may make available contact information, unique identifiers, inferred and derived information, online and technical information and geolocation data with online platforms and ad tech companies to help us support our Website and other business systems, serve you relevant advertisements and offers, subject to applicable legal requirements.

Vendors
We may disclose or otherwise make available your personal data to our vendors (including “service providers” and “processors” defined under applicable laws, which we collectively refer to as “service providers” or “vendors” herein) who help us run our business. This includes hosting our Website, processing payment information for the purchases made by you through our Website, delivering our emails and marketing communications to you, analysing the data we collect, helping us with sales attribution(e.g., to see if we showed you an ad on a platform site and then you bought a product from us) and delivering you the products and services you requested, or carry out surveys and product reviews on our behalf. We also disclose or otherwise make available your personal data with lawyers, auditors, consultants, information technology and security fi rms, and others who provide services to us. We disclose or otherwise make available only the personal data needed for these companies to complete the tasks we request or, where permitted by applicable law, use the personal data for certain internal purposes such as security or fraud detection. We instruct our service providers to appropriately process and protect your personal data.

Payment processing
Payments for purchases made through our Website are completed using a third-party vendor's online payment system. We only work with trusted third-party payment processing providers in order to securely manage payments. We do not retain access to your credit card information provided for purchases and do not store or disclose your credit card information as part of your purchases through these third-party systems. The personal or financial information you provide to our online payment system on our Website is subject to the third-party's privacy policy and terms of use and we recommend you review these policies before providing any personal or financial information.

Legal and Similar Reasons
If a brand or one of our businesses that controls your personal data, or some or all of its business assets, are sold to another company, your personal data will be disclosed to that company. We may also disclose your information to companies who help us protect our rights and property, or when required by law, legal processes, government authorities or as reasonably necessary to protect the rights or interests of ourselves or others.

We ensure all security measures are in place to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way. In addition, access to your personal information is limited to those employees, agents, contractors and other third parties who have a legitimate business need to access it and are trained accordingly for the purpose of data handling. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

Interest-based Advertising

When you visit our partner sites, we can show you ads or other content we believe you would like to see. In this way, we intend to send you relevant information about our products that might be of benefit to you.

We Learn from Groups of Consumers Sharing Similar Interests
We may place you into a particular group of consumers who show the same interests. We may infer these things about you based on your activity on certain web pages, links you click on our Website and other websites you visit, mobile applications you use, or our brand emails you view and links you click in the emails, as well based on other information we have collected, such as from retailer partners and other third parties. We group together cookie and device IDs to help us learn about general trends, habits, or characteristics from a group of consumers who all act similarly online and/or offline. By doing this, we can find and serve many others who “look like” those already in the group and thereby send them what we believe will be relevant and beneficial product offers and information.

We Link Other Information to Your Cookie and Device IDs
Your cookie and device IDs may be supplemented with other information, such as information about the products you buy offline or information that you provide directly to us when creating an account on our Website. We generally do this in ways that will not directly personally identify you. For example, we could know that a certain cookie ID belongs to a certain consumer group based on a person's website visits, age, gender, and shopping habits. Should we want to personally identify your cookie or device information (web and app viewing history), we will do so in accordance with applicable laws.

We May Know You Across Your Computers, Tablets, Phones and Devices
We may know that a specific cookie ID is from a computer that that may be connected to the same person or household owning the mobile phone with a certain device ID. This means that you may search for our products on your laptop, click on a Google search result link which we have sponsored, and then later see an ad for our products on your mobile phone. We might assume or deduce that the same person owns the computer and phone because, for example, they sign on to the same Wi-Fi network every day at the same time. Understanding what devices seem to be used by a person or household helps us limit the number of times you see the same ad across your devices. And this is important because that way you don't get annoyed at us for spamming you with the same ad and we don't pay for such repetitive ads that we don't want you to receive.

Addressable Media
When you provide us with your personal data via our Website or apps, we may use an encryption of that data - or a substitute identifier such as The TradeDesk's UID2 - to serve you with ads we think you may like. We do this generally by uploading a pseudonymized version (replaced with artificial letters or numbers) of your email address, phone number, or your mobile advertising ID to a platform that offers ad space (e.g., Facebook, YouTube, Instagram, TikTok, etc.). We also use that same data to serve you advertising through what is called the open web. This means you may see relevant ads from us on wbesites or apps or other places like digital TV that participate in online auctions of their ad inventory.

Advanced Matching
Our Website may use the Advanced Matching features offered by Social Media Platforms to its advertisers (e.g.Facebook's Advanced Matching, TikTok's Advanced Matching, etc.). Through Advanced Matching, we may send some of the personal data you enter on our Website form fields (e.g., your name, email address, and phone number - not any sensitive personal data or special category data) in a pseudonymized format to the Social Media Platform, or the Social Media Platform Pixel will pseudonymize and pull that data automatically, for the purpose of helping associate you with your browser cookie or device ID. We do this so that we can better target and measure the effectiveness of our advertising on the respective Social Media platforms. This is how we can know that if we showed you an ad on a given Social Media Platform, you clicked on it, came to our Website and bought something - or not - and therefore whether we should continue to buy ads on that Social Media Platform - or not.

Google Analytics Advertising Features
Our Website may use Google Remarketing Lists for Search Ads with Analytics (“RLSA”), which is a service they offer to advertisers. When individuals visit our Website, Google Analytics collects data about their visits (and not any sensitive personal data or special category data). If a visitor is signed into their Google account, we are able to provide that user with interest-based advertising when they conduct a Google search for terms related to our Website. For example, if you are signed into a Google account when visiting our Website, we may provide you with advertising when you search for a specific keyword on Google. Our ability to use and share information collected by Google Analytics about your visits to our Website is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. To understand how Google uses data when you use our partners' sites or apps, visit here. You may opt out of Google Analytics at any time.

Other Technologies We May Use

Proximity-Based Beacons
Beacons send one-way signals to mobile apps you install on your phone over very short distances to tell you, for example, what products are on-sale as you walk through a store. Beacons only talk to your device when you get close enough and after you have given consent within the mobile application associated with a particular beacon. In turn, apps may provide us location information to help customize advertising and offers to you. For example, when you are near a beacon in a local pharmacy, we may send you a £1 off coupon.

Pixels
These are small objects embedded into a web page but are not visible. They are also known as "tags,” “web bugs,” or "pixel gifs." We may use pixels to deliver cookies to your computer, monitor our Website activity, make logging into our Website easier, and for online marketing activities. We may also include pixels in our promotional email messages or newsletters to determine whether you open them and click on their links. This helps us understand whether you are an active user (which will prevent your data from being deleted due to inactivity). It also helps us measure the effectiveness of our marketing efforts, and derive insights and analysis, that we will use to personalize the content of our communication and to guide our marketing decisions (for example, if you opened an email but did not click on the links in it, we may decide to retarget you on Facebook).

Mobile Device Identifiers and SDKs
We use software code in mobile apps to collect information as you use our apps which is like what cookies collect on our Website. This will be information like your mobile phone identifiers (iOS IDFAs and Android Advertising IDs) and the way you use our apps.

Precise Geolocation
We may receive information about your exact location from things like global positioning system (GPS) coordinates (longitude and latitude) when you use mobile apps. You will always get a pop-up notice on your phone or device asking for you to accept or reject allowing us to know exactly where you are in the world. You should understand that we will not always ask for consent to know generally that you are in a broader city, postal code, or province. For example, we do not consider it to be precise location if all we know is that you are somewhere in London, UK.

Website and App Content

Plugins
Our Website may include plugins from other companies such as social networks. These plugins may collect information (e.g., the URL of the page you visited) and send it back to the company that created them. This may happen even if you do not click on the plugin. These plugins are governed by the privacy policy and terms of the company that created them, even though they appear on our Website.

Logins
Our Website may allow you to log in using your account with another company such as, for example, “Login with Apple.” When you do this, we will have access only to the information that you have given us consent to receive from your account settings in the other company's account you're using to log in with.

User Content
Our Website and apps may allow you to upload your own content for contests, blogs, videos, and other functions. Please remember that any information you submit or post becomes public information. We do not have control over how others may use the content you submit to our Website and apps. We are not responsible for such uses in ways that may violate this privacy policy, the law, or your personal privacy and safety.

Links
Our Website may include links to other sites, which we do not control. Those sites will be governed by their own privacy policies and terms, not ours.

Automated Decision-Making and Profiling

Automated decision-making implies making a decision using automated means without human involvement. Profiling is a form of automated processing of personal data consisting of the use of personal data to evaluate certain personal characteristics of an individual for the purpose of analysing or predicting, for example, that individual's personal preferences, interests, likely behaviour, etc.

As you have read in this Privacy Policy, we collect a variety of types of personal data both from you and from other commercially available sources. This data may be combined and analysed, including sometimes using algorithms, to identify links between certain behaviours and personal characteristics. Users who have similar characteristics or have performed similar actions are likely to share similar interests in our products: based on this analysis, segments of consumers are created and targeted accordingly with relevant offers via email, online advertising, and social media.

This process allows us to customize our communications to your declared or inferred interests. However, we will not conduct any automated decision-making processes, including profiling, that can produce legal effects or that can similarly significantly affect your rights and freedoms, as per Art. 22(1) and (4) of the GDPR and, should we want to engage in more intrusive profiling and tracking practices, we will always inform you and, where legally required, ask for your consent before doing so or provide you with the right to opt-out.

How We Protect Your Personal Information

Your privacy is important. That's why we respect it by taking steps to protect your personal data from loss, misuse, or alteration. We have processes and controls in place to appropriately manage personal data, including its collection, use, disclosure, retention, and destruction. We respect your personal data and take steps to protect it from loss, misuse, or alteration. Where appropriate, these steps can include technical measures like firewalls, intrusion detection and prevention systems, unique and complex passwords, and encryption. We also use organizational and physical measures such as training staff on data processing obligations, identification of data incidents and risks, restricting staff access to your personal information, and ensuring physical security including appropriately securing documents when not being used.

International Transfers

We may undertake data transfers when sharing your data with third parties such as service providers or selected partners that may store, process, or access your data in a country other than the one in which it was collected, including the United States.

As far as UK and EU citizens are concerned, this means that their data may be processed outside of the European Economic Area (EEA), either in countries that have been recognized by the United Kingdom and the European Commission to offer adequate data protection, like the United Kingdom (from where, for example, our fulfilment, return and contact centre services are managed), or Switzerland. For such transfers of data, special safeguards are foreseen to ensure that the protection travels with the data. Our transfer agreements also incorporate the standard data protection clauses issued in accordance with UK, EU and Swiss data protection law. If you are located in the European Economic Area (EEA), United Kingdom (and Gibraltar) or Switzerland, please note that we are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) [collectively, the “Data Privacy Framework”] developed by the U.S. Department of Commerce and the European Commission and Information Commissioner and Swiss Federal Data Protection, respectively, regarding the transfer of personal information from the EEA, United Kingdom (and Gibraltar) or Switzerland to the U.S. For non-EEA and UK data, we perform such transfers based on your consent, or on our contracts, where so required by local law.

Your Rights

Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.

You are entitled to request the following from Nature's Best , these are called your Data Subject Rights and there is more information on these on the UK ICO website www.ico.org.uk

• Right of access - to request access to your personal information and information about how we process it.
• Right to rectification -to have your personal information corrected if it is inaccurate, outdated and to have incomplete personal information completed.
• Right to erasure (also known as the Right to be Forgotten) - to have your personal information erased.
• Right to restriction of processing - to restrict processing of your personal information.
• Right to data portability - to electronically move, copy or transfer your personal information in a standard form.
• Right to object - to object to processing of your personal information.
• Rights with regards to automated individual decision making, including profiling -rights relating to automated decision making, including profiling.

You may withdraw your consent at any time where we are relying on your consent for the processing of your personal data. You may object to our processing of your personal data (this means ask us to stop using it) where that processing is based on our legitimate interest (this means we have a legitimate reason for using the data for a certain purpose and this reason is not outweighed by your interest in Nature's Best not using it). You can tell us to stop sending you communication by following the opt-out instructions sent with these communications. Please be aware that we may need to keep certain information to honor your choices (e.g., if you tell us to stop sending marketing emails, we will need your email address on file so that our systems remember that you no longer wish to receive marketing communications to that email address). Also, there are some situations where we may be unable to grant your request (e.g., deleting transaction data where we have a legal obligation to keep it, or for fraud prevention, security, or to protect the privacy of others, or for the establishment, exercise, or defense of legal claims, among other things).

For more information or to exercise your data protection rights, please contact us using the contact details above. You also have a right to complain to the UK Information Commissioner's Office (ICO), which regulates the processing of personal data.

Online platform Opt-Outs

Nature's Best may share identifiers connected to you, such as a hashed version of your email address, with online platforms, for the purpose of sending you interest-based advertising. To learn more about how these platforms may use your data and about how you can control the use of this data, please follow the links on these respective websites.

You can prevent or reduce getting interest-based ads on websites by declining cookies in your browser(s), or on mobile devices by declining the “access to data” requests that apps usually present when you install them or by adjusting the ad tracking settings on your device.

Please be aware that, even if you opt-out of certain kinds of interest-based ads, you may continue to receive other ads. You will still see contextual ads even if you opt out of interest-based ads. Even if we stop sending you interest-based ads, you may still receive ads from our brand on your computer or mobile devices. These ads, however, are based on the context of the sites you visit and are called contextual ads. Unlike interest-based ads which are based on pages you visit on your mobile phone or computer viewing activities over time and across unrelated services, contextual ads are ads shown to you based on the context of the specific site you are visiting. You should also know that we may still collect information from your computer or devices and use it for other purposes like evaluating how our Website works, for consumer research, or detecting fraud, pursuant to applicable laws.

Cookie Notice

This notice is designed to help you understand what cookies are, how Nature's Best uses them and the choices you have in regards to their use.

What are cookies?

Cookies are small text files that are sent to your computer or mobile device as you surf. They store useful information about how you interact with the websites you visit.

Cookies are stored on your browser or the hard drive of your computer or other device when you visit the Website. This allows the Website to recognise you as a user either for the duration of your visit (using a 'session cookie') or for repeat visits ( a 'persistent cookie'). They are not harmful and do not contain any information such as your home address, date of birth or credit card details.

The cookies we use fall into four broad types:

Strictly Necessary Cookies. These cookies allow the page to load and are essential in helping you to move around our Website and use its features, such as accessing secure areas of the Website. These cookies provide some essential functionality without which the page would not work (i.e., store your data in a shopping cart). Without these cookies, services you have asked for, such as setting up an account cannot be provided. These cookies do not gather information about you that could be used for marketing or remembering where you've been on the internet.

Analytical/Performance Cookies. In order to keep the Website, its services and products relevant, easy to use and up-to-date, we use web analytics services to help us understand how people use our Website. These cookies tell us how you use our Website, like which pages you visited and which links you clicked. This helps us measure and improve the performance of our Website. For example, we can see which parts of the Website and products are most popular, identify when errors occur, and test different versions of a page or feature to see which one works best. We use different analytics cookies. In many cases, we use Google Analytics cookies to monitor the performance of our Website. Our ability to use and share information collected by Google Analytics about your visits to our Website is restricted by the Google Analytics Terms of Use and the Google Privacy Policy.

Functional Cookies. These cookies allow websites and applications to remember choices and preferences you make (such as your user name, language or the region you are in) when you come back again. They provide enhanced, more personal features. The information these cookies collect is usually anonymised which means we can't identify you personally. These cookies are meant to make your experience more convenient, more efficient, and user-friendly for you. They do not gather any information about you that could be used for selling advertising or remembering where you've been on the internet, but do help us to serve you with advertising that is more relevant to you.

Advertising/Targeting Cookies. These cookies can be used to learn about what interests you generally might have, based, for example, on the websites you visit and the products you buy, to assist in targeted advertising. This data allows us to send you ads for products and services that better fit the things you like or need. We also use them to measure the effectiveness of our marketing communications, for example by telling us if you have responded to an advert that we have sent you. It also allows us to limit the number of times you see the same advertisement. Without these cookies, online advertisements you encounter will be less relevant to you and your interests.

Social Media Cookies. These cookies, that are set by a range of social media services, allow you to share our content with your friends and networks and enable us to reach you with ads on those social platforms related to your visits on our Website. The cookies of some social media sites, e.g., Facebook, are also used for ad targeting.

How you can control cookies

We offer a cookie consent management platform which allows you to exercise choice with respect to certain categories of cookies. This may appear as a cookie banner and/or as an icon that is visible on the Website. We may also provide similar technology in mobile apps, which, if available, will be accessible through the applicable app's settings menu. You can change your cookie preferences at anytime if you have an account with us under the My contact preference tab.

Contact Us

Still have a question or concern? We're here to help. Please contact us directly with any questions or concerns you may have about your privacy and our data protection practices or if you are a consumer with a disability and need a copy of this notice in an alternative format. If you have an inquiry that is specific to our data protection officer, such as a suspected data breach, please contact us here and state that in your message.

The contact details of our Art. 27 GDPR representative in the UK and EU are as follows: Lamberts Healthcare Ltd., Century Place, Tunbridge Wells, Kent TN2 3BE, United Kingdom

Please contact us by writing to:
Data Protection Officer
Nature's Best
Century Place
Tunbridge Wells
Kent
TN2 3BE
or via info@naturesbest.co.uk quoting Security and Privacy Enquiry.