Privacy Notice (Stanluc Wellbeing)
Last updated: 03/02/2026

This Privacy Notice explains how Stanluc LTD trading as Stanluc Wellbeing (“we”, “us”, “our”) collects and uses personal data when you visit stanluc.com, place an order, contact us, or interact with our marketing.

1) Who we are

Data controller: Stanluc LTD trading as Stanluc Wellbeing
Company number: 16654512
Registered office/operating address: Ash Grove, Caldicot, Wales, NP26 4NG, United Kingdom
Email: contact@stanluc.com

2) The personal data we collect

We may collect:

1. Identity and contact data
   Name, billing address, delivery address, email address, telephone number.
2. Order and account data
   Items purchased, order history, returns/refunds, and account login details (if you create an account).
3. Payment data
   Payments are processed by Stripe. We do not store full card details on our website. Stripe processes payment and fraud-prevention information to provide payment services.
4. Communications data
   Messages you send us (for example, via contact forms, email, or customer support).
5. Technical and usage data (cookies and similar technologies)
   IP address, device/browser information, pages viewed, and identifiers associated with cookies and similar technologies (where used and where you consent, if required). Rules for non-essential cookies are covered by PECR guidance.

Important: We do not ask for health information. Please do not send sensitive medical details via forms or email.

3) How we collect your data

We collect data when you:

• place an order or create an account;
• enter delivery or billing details at checkout;
• contact us by email or via forms;
• browse the website (via cookies and similar technologies, depending on your preferences).

4) How we use your data and our lawful bases

Under UK GDPR, we must have a lawful basis for each use.

1. To process orders and deliver products
   Order confirmation, fulfilment, delivery updates, and customer support.
   Lawful basis: performance of a contract.
2. To take payments and prevent fraud
   Processed through Stripe, including transaction security.
   Lawful basis: contract; legitimate interests (fraud prevention).
3. To manage returns, refunds, and complaints
   Lawful basis: contract; legal obligation; legitimate interests.
4. To operate and secure our website
   Security logs, error monitoring, protecting against misuse.
   Lawful basis: legitimate interests (running and protecting our business and website).
5. To comply with legal and accounting obligations
   Keeping records required for tax/accounting.
   Lawful basis: legal obligation. Limited companies must generally keep records for 6 years from the end of the last company financial year to which they relate (with exceptions).
6. Marketing communications
   If you opt in, we may send newsletters and offers by email and record your preferences.
   Lawful basis: consent (you can withdraw at any time).
   Where permitted, we may also contact existing customers about our own similar products and always provide a clear opt-out.

5) Marketing preferences

You can unsubscribe at any time using the link in the email or by contacting contact@stanluc.com. You can object to direct marketing at any time.

6) Cookies, analytics, and advertising

We use cookies and similar technologies to make the website work and, if enabled, to understand how it is used and measure advertising.

• Strictly necessary cookies are required for core functions such as basket and checkout.
• Non-essential cookies (for example, analytics and advertising) are used only with your consent, given by a clear positive action and as easy to refuse as to accept.

You can change your cookie preferences at any time using the cookie settings link/banner on our website.

7) Who we share your data with

We share personal data only where necessary to operate the store and deliver your order, including with:

• Stripe (payment processing and fraud prevention).
• Royal Mail (shipping and delivery).
• Website hosting, IT, and security providers (to run and protect the site).
• Customer support tools (if used).
• Professional advisers (accountants, legal advisers) were necessary.
• Authorities were required by law.

We do not sell your personal data.

8) International transfers

Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards required under UK GDPR (for example, contractual protections). Stripe provides data protection terms for its services.

9) How long do we keep your data

We keep personal data only as long as needed for the purposes described in this notice.

Typical retention approach:

• Order and accounting records: generally 6 years from the end of the relevant company financial year (longer in specific cases).
• Customer support messages: as long as needed to handle your request and maintain business records.
• Marketing data: until you unsubscribe or withdraw consent.
• Account data: until you close your account, unless we are required to keep certain records for legal reasons.

10) If you do not provide personal data

If you do not provide the required checkout details (such as your name, address, and contact details), we may not be able to process and deliver your order.

11) Your data protection rights

You may have the right to access, correct, delete, restrict processing, object (including to direct marketing), request portability, and withdraw consent where we rely on consent. You can also complain to the UK supervisory authority, the Information Commissioner’s Office (ICO).

12) How to contact us

To exercise your rights or ask questions, contact us at contact@stanluc.com.

13) Updates to this notice

We may update this Privacy Notice from time to time. We will post the latest version on this page and update the “Last updated” date.