Legal

Privacy Policy

LAST UPDATED: 10 AUGUST 2026

This policy explains what personal data BOTANIQ LABS collects, why we collect it, and what you can ask us to do with it. We have tried to write it in plain English rather than legal boilerplate, because a privacy policy nobody can read protects nobody.

01Who we are

BOTANIQ LABS ("we", "us", "our") is a United Kingdom business selling organic KSM-66® ashwagandha. For the purposes of UK data protection law we are the data controller for the personal data described in this policy.

You can reach us about anything in this policy, including any request about your data, at info@botaniqlabs.uk. We aim to respond within five working days, and in any event within the one month required by law.

02What we collect

We collect very little, because this website does not sell anything directly, does not run advertising and has no accounts to sign up for. In practice we hold personal data in only two situations:

  • When you email us. Your email address, your name if you give it, and the content of your message — including any order number or batch number you quote.
  • When you order on Amazon UK. The limited order information Amazon makes available to us as the seller (see section 3).

We do not ask for, and do not want, health information. If you choose to tell us about your health in an email, we will use it only to answer your question and will delete it once the matter is closed.

03Buying through Amazon UK

All purchases are currently made through our listing on Amazon UK. This matters for your privacy, so it is worth being precise about it:

  • When you buy on Amazon, you are transacting with Amazon's platform. Your payment details, full address book, browsing history and Amazon account data are held by Amazon under Amazon's own privacy notice, not by us. We never see your card details.
  • As the seller, we receive only the limited order information Amazon provides through Seller Central — typically an order number, the item ordered, and, where a delivery or customer service issue arises, the buyer name and delivery details needed to resolve it.
  • Reviews on our Amazon listing are collected, verified and moderated by Amazon. We cannot add, edit or remove them, and we do not receive reviewers' contact details.

For anything relating to your Amazon account, payment data, delivery address or review, Amazon is the organisation to contact. Their privacy notice is available at amazon.co.uk privacy notice.

04This website and cookies

We do not set any cookies on this website. There is no analytics, no advertising pixel, no tracking script and no visitor profiling. Nothing is stored on your device by us.

Two things are worth disclosing anyway:

  • Web fonts. Our pages load typefaces from Google Fonts. To serve those files, Google receives your IP address and basic request information. If you would rather avoid this, a browser extension that blocks third-party font loading will prevent it; the site remains fully readable.
  • Hosting logs. Our hosting provider keeps standard server logs, which include IP addresses, for security, abuse prevention and diagnosing faults. We do not use these logs to identify or track individual visitors.

If we ever add analytics or any non-essential cookie, we will ask for your consent first and update this page before doing so.

05Why we use your data, and our legal basis

PurposeData usedLegal basis (UK GDPR)
Answering your enquiry, including sending you the Certificate of Analysis for a batch Email address, name, message content Legitimate interests — responding to someone who has contacted us
Resolving an order, delivery, replacement or refund issue Order information provided by Amazon Performance of a contract, and compliance with consumer law obligations
Product safety, batch traceability and responding to a quality concern Batch number, order reference, your description of the issue Legal obligation — food and product safety law
Keeping business and tax records Transaction records from Amazon Legal obligation — HMRC record-keeping requirements
Keeping this website secure and available Server log data Legitimate interests — security and fault diagnosis

We do not send marketing emails and we do not build a mailing list. If that changes, it will be opt-in only, clearly separate from any purchase, and unsubscribing will take one click.

06Who we share data with

We do not sell personal data. We never have and we do not intend to. We share data only with organisations that help us operate, and only as far as they need it:

  • Amazon — as the sales platform for every order.
  • Our email provider and website host — who process correspondence and serve these pages on our behalf.
  • Our accountant and HMRC — for tax and statutory record-keeping.
  • Regulators — where we are legally required to disclose information, for example to a trading standards or food safety authority.

07How long we keep it

  • Email correspondence: kept while we deal with your query and then for up to 24 months, so we can pick up the thread if you come back to us about the same order or batch.
  • Order and transaction records: kept for six years after the end of the relevant financial year, as required for UK tax purposes.
  • Batch and quality records: kept for the life of the batch plus the period required by food safety law.
  • Server logs: kept for a short period by our host, typically no more than 30 days.

08International transfers

Some of the services we rely on — including Amazon, our email provider, our website host and Google Fonts — are operated by companies based outside the UK or with infrastructure abroad. Where personal data is transferred outside the UK, it is protected by UK adequacy regulations or by the International Data Transfer Agreement or Addendum approved by the UK government, together with appropriate safeguards.

09Your rights

Under UK GDPR you have the right to:

  • ask what personal data we hold about you, and get a copy of it;
  • have inaccurate data corrected;
  • ask us to delete data where we no longer have a good reason to keep it;
  • ask us to restrict how we use it while a concern is looked into;
  • object to processing we carry out on the basis of legitimate interests;
  • receive data you gave us in a portable format; and
  • withdraw consent at any time, where we relied on consent.

To exercise any of these, email info@botaniqlabs.uk. There is no charge, and we will not ask you to explain why. We may need to confirm your identity before releasing data, and where the data is held by Amazon rather than us, we will tell you so and point you to the right place.

10Security

This site is served over HTTPS. Access to our email and seller accounts is protected with strong, unique credentials and two-factor authentication, and is limited to the people who need it. No system is perfect, but we keep what we hold deliberately minimal — the less data we store, the less there is to lose.

11Children

Our products are intended for adults and are not suitable for children. This website is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

12Changes and complaints

If we change this policy we will update the date at the top of this page. Where a change materially affects how we use your data, we will say so clearly rather than quietly editing the text.

If you are unhappy with how we have handled your data, please tell us first at info@botaniqlabs.uk so we have the chance to put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113. Complaining to us first does not affect that right.