Privacy Policy

Last updated: 2 November 2026

This policy explains what personal information Nauti Nutrition Ltd (“Nauti Nutrition”, “we”, “us”) collects when you visit nauti-nutrition.co.uk, place an order or join the Nauti Club, how we use it, who we share it with and the choices you have. We are the data controller for this information under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Nauti Nutrition Ltd is a private limited company registered in England. Our registered office is Charles Roberts Office Park, Office 18, The Junction, Charles Street, Horbury, Wakefield, WF4 5FH.

If you have any questions about this policy or your information, email us at orders@nauti-nutrition.co.uk or write to us at the address above.

What we collect and why

When you place an order

We collect your name, email address, phone number, billing and delivery address, what you ordered, and whether you chose Royal Mail delivery or local drop-off. We use this to take payment, bake and send your order, email you order and dispatch updates, and deal with any questions or problems. Our lawful basis is that we need it to fulfil our contract with you. We also keep order records to meet our legal and tax obligations.

When you enter your postcode at checkout, we check it against postcodes.io to confirm that we deliver to mainland UK. Only the postcode is sent.

Payments

Card payments are processed by SumUp. You enter your card details directly into SumUp’s secure payment form. We never see or store your full card number. SumUp tells us whether the payment succeeded.

If you create an account

If you create an account, we store your login details, saved addresses and order history so you can view past orders and check out faster.

The Nauti Club (our mailing list)

If you sign up to the Nauti Club, we collect your name, email address and, if you give it, your phone number. We use these to send you news about new products, offers and events. We only add you after you confirm your sign-up by email. Our lawful basis is your consent. You can unsubscribe at any time using the link in every email. The list is held with Mailchimp (Intuit).

When you contact us

If you use our contact form, we receive your name, email address, subject and message by email so we can reply. Our lawful basis is our legitimate interest in answering your enquiry.

Cookies and similar technologies

Cookies are small files that a website stores in your browser. Essential cookies are always on because the shop can’t work without them. Analytics cookies are only set if you choose “Accept” on our cookie banner. We remember your choice for 6 months in a cookie called nn_cookie_consent. You can change your mind at any time using the “Cookie settings” link at the bottom of every page.

Essential (needed for the shop to work)

WooCommerce basket and session cookies (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*). These remember what’s in your basket and keep checkout working. They last from the end of your visit up to 2 days.
Login cookies (wordpress_*, wordpress_logged_in_*). These are only set if you log in to an account and keep you logged in.
Security. Our security service, Wordfence, may set cookies to protect the site and logged-in users from attacks.
Payment. SumUp’s payment form may set cookies needed to process your payment securely and prevent fraud.

Analytics (only with your consent)

Google Analytics (_ga, _ga_*). These help us understand how many people visit, which pages they view and how they found us, so we can improve the site. Google Analytics uses an identifier rather than your name. These cookies last up to 2 years. See how Google uses data from sites that use its services.
Order attribution (sbjs_*). Set by WooCommerce, these record how you arrived at the site (for example from Google or Instagram) so we can see which channels lead to orders. They last for your session and up to 6 months.

Browser storage

We store a small flag in your browser’s session storage so our opening animation only plays once per visit. It contains no personal information and is deleted when you close the tab.

Fonts

Our fonts load from Google Fonts. To deliver them, your browser connects to Google’s servers, which receive your IP address. Google Fonts does not set cookies.

Managing cookies

You can accept or reject analytics cookies at any time using the “Cookie settings” link at the bottom of every page. You can also block or delete cookies in your browser settings. If you block essential cookies, the basket and checkout won’t work. You can opt out of Google Analytics on all websites with the Google Analytics opt-out browser add-on.

Who we share your information with

We never sell your information. We only share it with the services we use to run the business:

Hostinger hosts our website and email, and stores the site’s data.
SumUp processes card payments.
Royal Mail receives your name and delivery address so it can deliver your order. This doesn’t apply to local drop-off orders.
Mailchimp holds our mailing list (Nauti Club members only).
Google provides fonts, and website analytics if you accept analytics cookies.
postcodes.io checks postcodes at checkout (postcode only).

Some of these providers process data outside the UK, for example in the USA. Where they do, they use legally recognised safeguards such as the UK–US Data Bridge or standard contractual clauses. We may also share information if the law requires it.

How long we keep it

Orders are kept for 6 years after the end of the financial year they were placed in, as UK tax law requires.
Accounts are kept until you ask us to delete yours. Order records are still kept as above.
Nauti Club details are kept until you unsubscribe.
Contact messages are kept for as long as we need them to deal with your enquiry.

Your rights

Under UK data protection law you have the right to:

ask for a copy of the information we hold about you
have it corrected or deleted
object to or restrict how we use it
withdraw your consent, for example by unsubscribing from emails
ask for your information in a portable format

To use any of these rights, email orders@nauti-nutrition.co.uk. We’ll respond within one month. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ICO).

Children

Our website isn’t aimed at children under 13, and we don’t knowingly collect their information.

Changes to this policy

We may update this policy, for example if we start using a new service. The “last updated” date at the top always shows when it last changed.