Privacy Policy
Effective Date: 1 June 2025 Last Updated: 13/03/2026
Reefphyto Ltd ("Reefphyto", "we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights under UK data protection law.
This policy applies to all visitors and customers of https://reefphyto.co.uk (the "Site").
1. Who We Are
Reefphyto Ltd is the data controller for personal information collected through this Site.
Registered address: Swynant, Idole, Carmarthen, SA32 8DG
Contact: care@reefphyto.co.uk
2. What Personal Information We Collect
a. Information You Provide to Us
When placing an order or creating an account, we collect:
- Full name
- Billing and shipping address
- Email address
- Phone number
- Payment information (processed securely via our payment provider — we do not store full card details)
When you purchase a digital product, we also collect the email address used to deliver your download link.
If you contact us directly, we retain records of that correspondence.
b. Information Collected Automatically
When you visit the Site, we automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages viewed and time spent on the Site
- Referring website or search terms
- Date and time of visit
This information is collected using cookies, log files, and tracking pixels — including the Meta (Facebook) Pixel and Google Analytics. See Section 5 for more detail on cookies and how to manage them.
3. How We Use Your Personal Information
We use your personal data for the following purposes, and on the following legal bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your order | Contract performance |
| Delivering digital products by download link | Contract performance |
| Communicating about your order | Contract performance |
| Fraud screening and security | Legitimate interests |
| Improving website performance and user experience | Legitimate interests |
| Sending marketing emails (where you have opted in) | Consent |
| Showing targeted advertising via Facebook and Google | Legitimate interests / Consent |
| Complying with legal obligations | Legal obligation |
You may withdraw consent for marketing at any time by unsubscribing from emails or contacting us directly.
4. Sharing Your Personal Information
We share your data with the following trusted third-party service providers where necessary to operate our business:
- Shopify — ecommerce platform and order management. Shopify Privacy Policy
- Filemonk — digital product delivery. Filemonk processes your email address to send download links for purchased digital products.
- Meta (Facebook) — advertising and analytics via the Meta Pixel. Meta Privacy Policy
- Google — analytics and advertising. Google Privacy Policy | Opt out of Google Analytics
- Royal Mail / Courier providers — fulfilment of physical orders
- Payment processors — secure handling of payment transactions
We do not sell your personal data to third parties.
We may also disclose your information where required by law, court order, or to protect the rights and safety of Reefphyto Ltd or others.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate the Site and improve your experience. These include:
- Essential cookies — required for the Site to function (e.g. shopping cart, checkout)
- Analytics cookies — used to understand how visitors use the Site (e.g. Google Analytics)
- Marketing cookies — used to show relevant advertising (e.g. Meta Pixel, Google Ads)
When you first visit the Site, you will be asked to consent to non-essential cookies. You can update your preferences at any time via the cookie settings on the Site.
You can also manage cookies directly through your browser settings. For more information, visit www.allaboutcookies.org.
6. Behavioural Advertising
We use your information to deliver relevant advertising on platforms including Facebook and Google. You can opt out of personalised advertising using the following tools:
- Facebook Ad Preferences
- Google Ad Settings
- Your Online Choices (UK)
- Digital Advertising Alliance Opt-Out
7. Your Rights Under UK GDPR
If you are based in the UK or EU, you have the following rights in relation to your personal data:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of your data, subject to legal retention requirements
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a portable format
- Objection — object to processing based on legitimate interests or for direct marketing
To exercise any of these rights, please contact us at care@reefphyto.co.uk. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113.
8. International Data Transfers
Some of our third-party service providers process data outside the UK and European Economic Area, including in the United States. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses or equivalent protections.
9. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, including for legal, accounting, and regulatory requirements.
Order records are typically retained for six years in line with UK tax and accounting obligations. You may request deletion of your data at any time, subject to these legal retention requirements.
Download records for digital products are retained to allow re-access to purchased content where required.
10. Text Marketing
If you have opted in to receive text messages from us, you agree to receive recurring automated marketing texts. Consent is not a condition of purchase. Message and data rates may apply. You can opt out at any time by replying STOP.
11. Do Not Track
We do not alter our data collection practices in response to Do Not Track signals from browsers.
12. Children's Privacy
Our Site is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated effective date. Where changes are significant, we will make reasonable efforts to notify you directly.
14. Contact Us
If you have any questions about this policy or wish to exercise your data rights, please contact us:
📮 Reefphyto Ltd, Swynant, Idole, Carmarthen, SA32 8DG