Privacy policy

PRIVACY POLICY

Last updated: August 27, 2026

Cheeky Cherry Wellness ("Cheeky Cherry Wellness", "we", "us" or "our") operates this website and online store, including the products, services, experiences, trips, features and other functionality available through the website (the "Services").

Our online store is powered by Shopify, which provides the ecommerce platform through which we offer our products and services.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, use our Services, purchase a product, book a service or experience, contact us, or otherwise interact with us.

For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Cheeky Cherry Wellness is the data controller of the personal information we collect and use, except where another organisation acts as an independent controller for particular processing activities.

Please read this Privacy Policy carefully. If you have questions about how we handle your personal information, please contact us using the details at the end of this policy.

1. Who We Are

Cheeky Cherry Wellness

4 Oakleigh Road South
London N11 1GN
United Kingdom

Email: hello@cheekycherrywellness.com

For data protection purposes, Cheeky Cherry Wellness is the organisation responsible for determining how and why your personal information is processed, except where another organisation is independently responsible for its own processing.

2. Personal Information We Collect

"Personal information" means information that identifies you or can reasonably be linked to you.

Depending on how you interact with us, we may collect the following information.

Contact and identity information

This may include:

  • Name

  • Email address

  • Telephone number

  • Billing address

  • Delivery address

  • Other contact information you provide

Order and transaction information

This may include:

  • Products purchased

  • Services, experiences or trips booked

  • Order and booking numbers

  • Purchase history

  • Payment status

  • Delivery information

  • Cancellation information

  • Refund information

  • Information relating to customer service enquiries

Payment information

Payments made through our online store are generally processed through payment providers and Shopify's payment infrastructure or other payment providers made available through our store.

We may receive information such as payment confirmation, transaction identifiers, payment status and limited payment details.

Where payment information is processed directly by a third-party payment provider, that provider may process your personal information in accordance with its own privacy notice.

We do not intend to store your full payment card number or security code ourselves.

Account information

If you create an account, we may collect:

  • Username or account identifier

  • Password information

  • Account preferences

  • Saved addresses

  • Account settings

  • Other information associated with your account

Communications

If you contact us, we may collect information contained in your communications, including emails, messages, enquiries, reviews and customer support requests.

Device and technical information

When you visit or use our website, we may automatically receive information such as:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Network information

  • Approximate location derived from IP address

  • Website pages visited

  • Referring website

  • Date and time of access

  • Other technical identifiers

Usage information

We may collect information about how you interact with our website, including products viewed, products added to your cart, searches, pages visited and other interactions with the Services.

The information actually collected depends on the features, apps, cookies and services enabled on our website.

3. How We Collect Personal Information

We may collect personal information:

  • Directly from you when you place an order, make a booking, create an account, contact us or otherwise provide information;

  • Automatically when you use our website through cookies and similar technologies;

  • From Shopify and other service providers that help us operate the store;

  • From payment providers;

  • From shipping and fulfilment providers;

  • From booking, scheduling or experience-management providers where applicable;

  • From marketing, analytics or advertising providers where applicable; and

  • From other third parties where permitted by law.

Where we obtain personal information from a third party, we will provide the privacy information required by applicable law.

4. How We Use Your Personal Information

We use personal information only where we have a lawful basis to do so.

Depending on how you interact with us, we may use your information for the following purposes.

Providing products, services and experiences

We use your information to:

  • Process and fulfil orders;

  • Process payments;

  • Arrange delivery;

  • Coordinate bespoke or custom-made products;

  • Arrange services, experiences and trips;

  • Send booking and order confirmations;

  • Communicate with you about your purchases or bookings;

  • Process cancellations and refunds;

  • Provide customer support; and

  • Manage your account.

Lawful basis: Performance of a contract with you, or taking steps at your request before entering into a contract.

Operating and improving our website

We may use technical and usage information to operate, maintain, troubleshoot, secure and improve our website and Services.

Lawful basis: Where appropriate, legitimate interests in operating and improving our business, subject to your rights and interests. Where cookies or similar technologies require consent, we will obtain consent as required by applicable law.

Fraud prevention and security

We may use personal information to:

  • Detect and prevent fraud;

  • Protect our website and systems;

  • Authenticate accounts;

  • Investigate suspicious activity;

  • Protect customers and our business; and

  • Prevent misuse of our Services.

Lawful basis: Legitimate interests in protecting our business, customers and systems, and where applicable compliance with a legal obligation.

Legal and regulatory purposes

We may use personal information where necessary to:

  • Comply with applicable laws and regulations;

  • Respond to lawful requests from authorities;

  • Establish, exercise or defend legal claims;

  • Enforce our Terms of Service and other policies; and

  • Maintain appropriate business and financial records.

Lawful basis: Compliance with legal obligations and, where appropriate, our legitimate interests in establishing, exercising or defending legal claims.

Marketing

Where permitted by applicable law, we may use your contact information to send information about our products, services, experiences, events and promotions.

We will only send electronic direct marketing where we have an appropriate lawful basis and have complied with applicable electronic marketing rules.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the relevant communication or by contacting us.

You may still receive non-marketing communications that are necessary to fulfil an order or booking, such as order confirmations, delivery updates, booking confirmations or important service communications.

Lawful basis: Consent where consent is required, or another lawful basis where permitted by applicable law.

Personalised advertising and online tracking

If we use advertising, retargeting, analytics or similar technologies that require consent, we will seek your consent before using those technologies where required by law.

You can manage your preferences through our cookie consent mechanism where available.

We will not treat acceptance of our Terms of Service as consent to non-essential cookies or online tracking.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are necessary for the operation, security and functionality of the website, such as enabling shopping-cart and checkout functionality.

Other cookies may be used for purposes such as analytics, advertising, personalisation or measuring website performance.

Where consent is required for a cookie or similar technology, we will ask for your consent before placing or accessing the relevant technology on your device.

You can change or withdraw your cookie preferences using our cookie consent mechanism where available.

The exact cookies used on our website may change over time depending on the Shopify features, apps and third-party services we use.

For this reason, we may provide additional information about specific cookies through our cookie banner or a separate Cookie Policy.

UK rules generally require consent for non-essential cookies and similar technologies, including many analytics and advertising technologies.

6. Who We Share Personal Information With

We may disclose personal information to organisations that help us operate our business, including:

  • Shopify;

  • Payment processors;

  • Shipping and delivery providers;

  • IT and hosting providers;

  • Ecommerce and technology providers;

  • Customer support providers;

  • Email and communications providers;

  • Booking and scheduling providers;

  • Analytics providers;

  • Advertising and marketing providers, where applicable;

  • Professional advisers, such as lawyers, accountants and insurers;

  • Government authorities, regulators and law enforcement where legally required; and

  • Other service providers where necessary to provide the Services.

Where a third party processes personal information on our behalf, we will require appropriate contractual and security arrangements where required by applicable law.

Some third parties may act as independent controllers of personal information. In those circumstances, their own privacy policies may also apply.

7. Shopify

Our online store is hosted and powered by Shopify.

Shopify processes personal information in connection with providing its ecommerce platform and related services. Depending on the circumstances, Shopify may act as our processor or as an independent controller for certain processing activities.

Shopify may process information about your interaction with our store and may process information in connection with Shopify's own services and features.

You can find further information about Shopify's processing of personal information in the:

Shopify Consumer Privacy Policy

You can also access Shopify's privacy portal where applicable:

Shopify Privacy Portal

8. International Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where we transfer personal information outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your information receives an appropriate level of protection.

Depending on the circumstances, we may rely on:

  • An adequacy decision or adequacy regulations;

  • The UK International Data Transfer Agreement ("IDTA");

  • The UK Addendum to the EU Standard Contractual Clauses; or

  • Another lawful transfer mechanism recognised under applicable UK data protection law.

Where required, we will implement appropriate safeguards for international transfers.

9. How Long We Keep Your Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

  • Provide products, services and experiences;

  • Maintain customer and transaction records;

  • Comply with legal, accounting and tax requirements;

  • Resolve disputes;

  • Prevent fraud and abuse;

  • Enforce our agreements; and

  • Establish, exercise or defend legal claims.

Different categories of information may therefore be retained for different periods.

For example, transaction and financial records may need to be retained for longer periods to comply with legal, accounting or tax requirements.

When personal information is no longer required, we will delete it, anonymise it or securely dispose of it, subject to any legal or operational requirements to retain it.

10. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You should take reasonable precautions when communicating sensitive information online and should not share your account credentials with others.

11. Your Privacy Rights

Depending on your circumstances and applicable law, you may have rights including:

  • Right to be informed about how your personal information is used;

  • Right of access to personal information we hold about you;

  • Right to rectification of inaccurate or incomplete personal information;

  • Right to erasure of personal information in certain circumstances;

  • Right to restrict processing in certain circumstances;

  • Right to object to certain processing, including direct marketing;

  • Right to data portability in certain circumstances; and

  • Right to withdraw consent where we rely on consent as our lawful basis.

These rights are subject to legal conditions and exceptions and may not apply in every circumstance.

The ICO states that UK privacy information should explain purposes, lawful bases, recipients and retention periods, among other information.

12. Direct Marketing

You can opt out of promotional communications from us at any time.

For email marketing, you can use the unsubscribe link included in our marketing emails.

You can also contact us at:

hello@cheekycherrywellness.com

Opting out of marketing does not prevent us from sending transactional or service-related communications, including information relating to your orders, bookings, payments, deliveries or other Services you have requested.

Where consent is required for electronic marketing, we will obtain and record consent in accordance with applicable law.

13. How to Exercise Your Rights

To exercise your privacy rights, please contact:

Email: hello@cheekycherrywellness.com

Postal address:
Cheeky Cherry Wellness
4 Oakleigh Road South
London N11 1GN
United Kingdom

We may need to verify your identity before completing a request in order to protect your personal information and prevent unauthorised access.

We will respond to valid requests within the timeframe required by applicable law.

14. Complaints

If you have concerns about how we process your personal information, please contact us first at:

hello@cheekycherrywellness.com

We will make reasonable efforts to investigate and resolve your concern.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

You can find information about making a complaint on the ICO's website:

Information Commissioner's Office (ICO)

If you are located in another jurisdiction, you may also have the right to complain to the relevant data protection authority in that jurisdiction.

15. Children's Privacy

Our Services are not directed at children.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe that a child has provided us with personal information in circumstances where it should not have been collected, please contact us at hello@cheekycherrywellness.com.

If we become aware that we have collected personal information from a child in circumstances where collection was not permitted, we will take reasonable steps to delete it.

16. Third-Party Websites and Services

Our website may contain links to websites, applications, social media platforms or other services operated by third parties.

If you follow a link to a third-party website, that website's own privacy policy and terms will apply.

We are not responsible for the privacy practices, security or content of third-party websites or services.

Where third-party services are integrated into our website, those providers may independently process certain information in accordance with their own privacy policies.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, Services, technology, legal requirements or data-processing practices.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

Where required by law, we will provide additional notice of material changes before they take effect.

We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact us:

Cheeky Cherry Wellness
4 Oakleigh Road South
London N11 1GN
United Kingdom

Email: hello@cheekycherrywellness.com

For the purposes of applicable UK data protection law, Cheeky Cherry Wellness is the data controller of the personal information described in this Privacy Policy, except where another organisation acts as an independent controller.