Legal
Privacy Policy
1. Who controls your data
The data controller is Go Natural with Priscillia, 32 Central Market, Ekiti State, Nigeria.
For any privacy question, email priscilliaherbsandhealth@gmail.com.
2. What we collect
| Category | What | Where from |
|---|---|---|
| Identity | Name, date of birth or age confirmation | You, at checkout |
| Contact | Email, phone, billing and delivery address | You, at checkout |
| Order | Items bought, amount, currency, order reference, delivery status | Generated by us |
| Payment | Last four digits, card brand, payment status. We never see or store your full card number. | Our payment processor |
| Correspondence | Messages you send us and our replies | You |
| Technical | IP address, browser, device, pages viewed | Automatically |
3. Why we use it, and on what legal basis
| Purpose | Basis |
|---|---|
| Taking payment and delivering your order | Performance of a contract |
| Confirming you are 18 or over | Legal obligation |
| Customer support and follow-up | Performance of a contract |
| Keeping accounting and tax records | Legal obligation |
| Investigating an adverse reaction report | Vital interests / legal obligation |
| Preventing fraud and chargeback abuse | Legitimate interests |
| Marketing emails | Consent — withdrawable at any time |
| Understanding how the shop is used, and helping customers who do not finish checkout | Legitimate interests. You can opt out: see section 6 |
We do not sell your personal data, and we do not share it with advertisers.
4. Who we share it with
We share only what each provider needs to do its job:
- Payment processing — Flutterwave
- Delivery — The courier that carries your parcel, which receives your name, address and phone
- Email — Google (Gmail)
- Hosting — Netlify (the website) and AppDeploy (the shop’s activity and order records)
- Analytics — Our own private shop dashboard, seen only by the shop owner. No third-party analytics or advertising trackers
- Booking — Calendly, only if you book a consultation
- Fonts — Google Fonts, which receives your IP address when the page loads
We may also disclose data where the law requires it, or to establish or defend legal claims.
5. Health information
What you buy from a wellness shop can reveal something sensitive about your health, and we treat it that way.
We do not ask you for a medical history and we would rather you did not send us one. If you tell us about a symptom or condition in a message, we use it only to answer you — usually to tell you to see a doctor — and we do not add it to a marketing profile, share it, or use it to target you.
Our packaging is plain, with no product name visible from the outside. Order confirmation emails use a neutral subject line.
If you would like your correspondence deleted after we have answered, say so and we will delete it.
6. Cookies and shop activity
We do not use advertising cookies or third-party analytics on this site. To understand how the shop is used, we keep our own record of visits, which products are opened and what is in a basket. It is linked to a random visitor code stored in your browser (browser storage, not a cookie), not to your name, unless you start checkout and type your details.
If you start checkout, we keep your basket, name, email, phone number and delivery address so that Priscillia can help if you do not finish, and to process your order. Priscillia may contact you about an unfinished basket if you left a phone number or email; tell her if you would rather not be contacted. We keep this information until you ask us to delete it. Orders and payment references are always recorded, because they are needed to fulfil your purchase.
If your browser sends Do Not Track or Global Privacy Control, we do not record your browsing or basket, and keep only what is needed to process an order you place. You can remove the stored visitor code at any time by clearing site data in your browser. Third-party services you choose to use, such as the Flutterwave payment window or the Calendly booking calendar, may set their own cookies under their own policies.
You can clear or block cookies in your browser settings at any time.
7. How long we keep it
| Data | Retention |
|---|---|
| Order and transaction records | For as long as tax and accounting law requires |
| Correspondence | Only as long as needed to answer you, or until you ask us to delete it |
| Marketing list | Until you unsubscribe |
| Adverse reaction reports | For as long as needed for product safety |
| Server logs | A short period only |
8. International transfers
Some of our providers are outside Nigeria. Where data is transferred abroad we rely on Standard Contractual Clauses and require appropriate safeguards by contract.
9. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, withdraw consent, and opt out of marketing at any time.
To exercise any of these, email priscilliaherbsandhealth@gmail.com. We reply as soon as we can, within any time limit the law sets, and never charge for it. We may ask you to confirm your identity first so we do not hand your data to someone else.
10. Security
The site is served over HTTPS. Card details go directly to our payment processor and never touch our servers. Access to order data is limited to people who need it. No system is perfectly secure, but if a breach occurs that is likely to put you at risk, we will tell you and notify the regulator within the required timeframe.
11. Children
This site is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
12. Marketing
We only send marketing email if you asked for it. Every email has an unsubscribe link that works immediately. Order confirmations and delivery updates are service messages and will still be sent.
13. Changes
We may update this policy. The current version and its date are always at the top of this page. Material changes will be announced on the site or by email.
14. Complaints
Please raise it with us first at priscilliaherbsandhealth@gmail.com. If you are not satisfied, you can complain to your data protection authority — the Nigeria Data Protection Commission (NDPC).