Privacy Policy

Last updated: October 2026.

This policy explains what personal data Alluvi Healthcare collects, why we collect it, how long we keep it, and the rights you have. It applies to this website and to orders placed through it.

Who we are

Alluvi Healthcare is the data controller for the information collected on this website. Registered address: [Registered address – street, city, postcode], United Kingdom. Contact the data controller at info@alluvi.co.uk.

What we collect

Order information: your name, delivery address, email address, phone number, and the items you order.
Account information: if you create an account, your login details and order history.
Payment information: orders are paid by bank transfer. We record payment status and references; we never store card details on this website.
Correspondence: messages you send us (email, phone notes, order enquiries).
Technical information: basic, privacy-respecting analytics such as pages viewed and device type.

Why we use your data (legal basis)

Contract: to take, process, fulfil, deliver and support your order this is necessary to do business with you.
Legal obligation: to keep tax and accounting records (HMRC) and to respond to lawful requests.
Legitimate interests: to prevent fraud, secure the website, and respond sensibly to enquiries.
Consent: for any marketing communications, which we only send with your consent and which you can withdraw at any time.

Who we share your data with

We share only what is necessary, and never sell your data:

Royal Mail / delivery carriers: your name, address and phone number, so they can deliver your cold-chain parcel.
Email and hosting providers: to send order confirmations and run the website.
Accounting and tax authorities: where the law requires it.

How long we keep it

Order records are kept for up to six years to meet UK tax and legal requirements. Account data is kept until you ask us to delete it. Correspondence is kept only as long as needed for the matter it relates to.

International transfers

Our systems and the data we process are based in the United Kingdom. Your data is not transferred outside the UK for order fulfilment.

Your rights

Under the UK GDPR and the Data Protection Act 2018 you can request access to your data, correction, erasure, restriction of processing, a portable copy of your data, and object to processing. To exercise any right, email info@alluvi.co.uk we respond within one month. You can complain to the Information Commissioner’s Office (ICO) at any time.

Cookies and analytics

The website uses minimal cookies needed for the cart, account, and privacy-respecting analytics. You can control cookies in your browser settings; disabling essential cookies may prevent the cart from working.

Age restriction

Our website and services are for adults aged 18 and over. We do not knowingly collect personal data from anyone under 16; if you believe we hold data from a child, contact us and we will delete it.

Changes to this policy

We may update this policy; the version on this page is always current. See also our Disclaimer, Terms & Conditions and Contact page.