Privacy Policy

Last updated: September 2026

Data Controller

Aryan Herbals Ltd
Ved Court, London, TW3 1LS, UK
Contact us via our form

1. Introduction

Aryan Herbals Ltd ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

We are registered in England and Wales. Our registered office is at Ved Court, London, TW3 1LS, UK. We are the data controller responsible for your personal data.

2. Information We Collect

Personal Data

We may collect the following personal information:

  • Name and contact details (email address, phone number, postal address)
  • Payment information (processed securely through our payment providers)
  • Order history and preferences
  • Communications you send to us
  • Account information if you create an account

Automatically Collected Data

  • IP address and browser type
  • Device information
  • Pages visited and time spent on our website
  • Cookies and similar tracking technologies (see our Cookie Policy)

3. Legal Basis for Processing (GDPR)

Under the UK GDPR, we process your personal data on the following legal bases:

  • Contract: To fulfil orders and provide our services
  • Legitimate interests: To improve our services and communicate with you
  • Consent: For marketing communications (where applicable)
  • Legal obligation: To comply with legal requirements

4. How We Use Your Information

  • Process and fulfil your orders
  • Send order confirmations and delivery updates
  • Respond to your enquiries and provide customer support
  • Improve our website and services
  • Send marketing communications (with your consent)
  • Prevent fraud and maintain security
  • Comply with legal obligations

5. Data Sharing and Disclosure

We may share your information with:

  • Service providers: Payment processors, delivery companies, hosting providers
  • Professional advisors: Lawyers, accountants as necessary
  • Legal authorities: When required by law or to protect our rights

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Retention Periods
Order & Transaction Data7 years (legal/tax requirements)
Account InformationUntil account deletion requested
Marketing PreferencesUntil consent withdrawn
Cookie Consent1 year
Analytics Data26 months (anonymized)

7. Your Rights (GDPR)

Under the UK GDPR, you have the following rights:

Right of Access

Request a copy of your personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data in certain circumstances.

Right to Restriction

Request restriction of processing of your personal data.

Right to Data Portability

Request transfer of your data to another organization in a machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent

Withdraw consent at any time for consent-based processing (e.g., marketing emails, analytics cookies).

To exercise these rights, please contact us via our form. We will respond to your request within one month.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls.

9. International Transfers

Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place in compliance with UK GDPR requirements.

10. Cookies

We use cookies and similar technologies. For detailed information, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us via our form.

13. Supervisory Authority

If you are not satisfied with our response or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): www.ico.org.uk