Eēsē Health

Privacy Policy

At Eēsē Health, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website or purchase from us. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using our website or placing an order, you confirm that you have read and understood how we handle your personal data.

1. Who We Are

Eēsē Health is the data controller responsible for your personal data.

Company name: Easy Health Ltd

Registered address: 277 279 Chiswick High Road, W4 4PU London, United Kingdom

VAT Registration Number: 508 3620 06

Contact email: hello@eesehealth.com

2. What Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Data You Provide to Us

Identity data: your first and last name.

Contact data: email address, postal address, and telephone number.

Order and purchase data: items purchased, order history, billing and delivery details.

Marketing preferences: your choices regarding whether you wish to receive marketing communications from us.

Communications: any messages or enquiries you send to us via email or contact forms.

2.2 Data We Collect Automatically

When you visit our website, we automatically collect certain technical data, including:

• Browsing and usage data: pages viewed, time spent on the website, links clicked, and referring URLs.

• Device and technical data: IP address, browser type and version, operating system, and device identifiers.

• Cookie data: information stored via cookies and similar tracking technologies (see Section 8 for full details).

2.3 Payment Data

We do not store your full payment card details. Payment information is collected and processed securely by our payment service providers (including Stripe, PayPal, Klarna, and others). Please refer to their respective privacy policies for details of how they handle your payment data.

3. How We Use Your Personal Data

We use your personal data for the following purposes, and rely on the following legal bases under the UK GDPR:

3.1 To Fulfil Your Order (Legal basis: Contract)

Processing and dispatching your order.

Sending order confirmation, dispatch notification, and tracking information.

Handling returns, refunds, and complaints.

Issuing VAT invoices upon request.

3.2 To Comply with Legal Obligations (Legal basis: Legal obligation)

Maintaining transaction records for tax and accounting purposes.

Complying with requests from regulatory or law enforcement authorities where required.

3.3 To Run Our Business (Legal basis: Legitimate interests)

Preventing fraud and ensuring the security of our website and customer accounts.

Improving our website, products, and customer experience through analytics.

Managing and responding to customer service enquiries and complaints.

3.4 Marketing Communications (Legal basis: Consent)

With your explicit consent, we may send you marketing communications by email about our products, promotions, and news. You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email, or by contacting us directly at hello@eesehealth.com.

We will not send you marketing messages by SMS or share your data with third parties for their own direct marketing purposes without your separate, explicit consent.

Note: If you also consent to targeted advertising (e.g. via Meta or Google), this will be managed through our cookie consent tool. See Section 8.

4. Who We Share Your Data With

We do not sell your personal data. We only share it with third parties where necessary to operate our business and deliver your order, or where required by law.

4.1 Service Providers and Data Processors

We share your data with the following categories of trusted third-party service providers, who process data only on our instructions:

E-commerce platform: Shopify — to manage our online store, orders, and customer accounts.

Payment processors: Stripe, PayPal, Klarna, Apple Pay, Google Pay — to process transactions securely.

Delivery and logistics: DHL, Yodel — to fulfil and track your delivery.

Email and marketing platforms: to send transactional and (where consented) marketing emails.

Analytics providers: Google Analytics and others — to understand how our website is used (anonymised and aggregated where possible).

Advertising platforms: Meta (Facebook/Instagram) — only where you have consented via our cookie settings.

Accounting software: to maintain financial records in compliance with our legal obligations.

4.2 Legal Disclosure

We may disclose your personal data to regulatory authorities, law enforcement agencies, or courts if required to do so by applicable law, or to protect the rights, property, or safety of Eēsē Health, our customers, or others.

5. International Data Transfers

Some of our service providers are based outside the United Kingdom.. If we transfer your personal data to countries that do not provide an equivalent level of data protection, we ensure appropriate safeguards are in place, such as the use of the UK International Data Transfer Agreement (IDTA) or binding corporate rules, in accordance with UK GDPR requirements.

In particular, Shopify and Google may process data in the United States and other jurisdictions. Both maintain Standard Contractual Clauses and other transfer mechanisms recognised under UK data protection law.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Our general retention periods are as follows:

Order and transaction records: retained for 7 years in line with HMRC requirements.

Customer account data: retained for the duration of your account, plus a reasonable period after closure.

Marketing consent records: retained until you withdraw consent, plus a reasonable period to demonstrate compliance.

Customer service and complaints correspondence: retained for up to 3 years following resolution.

Website analytics data: retained in accordance with the settings of the relevant analytics platform (typically 26 months for Google Analytics).

When your data is no longer required, we will securely delete or anonymise it.

7. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access: you may request a copy of the personal data we hold about you (a 'Subject Access Request').

Right to rectification: you may ask us to correct inaccurate or incomplete data.

Right to erasure ('right to be forgotten'): you may ask us to delete your personal data in certain circumstances.

Right to restriction of processing: you may ask us to pause processing of your data in certain circumstances.

Right to data portability: you may request your data in a structured, machine-readable format in certain circumstances.

Right to object: you may object to processing based on legitimate interests or for direct marketing purposes.

Rights related to automated decision-making: you have the right not to be subject to decisions made solely by automated means that significantly affect you.

To exercise any of these rights, please contact us at hello@eesehealth.com. We will respond within one calendar month. We may need to verify your identity before actioning your request.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at www.ico.org.uk or by calling 0303 123 1113.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function correctly, remember your preferences, and provide analytics and advertising insights.

8.2 Types of Cookies We Use

Strictly necessary cookies: essential for the website to function (e.g. shopping basket, login session). These cannot be disabled.

Analytics cookies: help us understand how visitors use our site (e.g. Google Analytics). These are only set with your consent.

Marketing and advertising cookies: used to deliver relevant ads and measure their effectiveness (e.g. Meta Pixel, Google Ads). These are only set with your explicit consent.

Functional cookies: remember your preferences to improve your experience (e.g. currency, language). These are set with your consent.

8.3 Managing Your Cookie Preferences

When you first visit our website, you will be shown a cookie consent banner allowing you to accept or decline non-essential cookies. You can update your preferences at any time via the cookie settings link in the footer of our website.

You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Children's Privacy

Our website and products are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These include:

Secure, encrypted connections (HTTPS/TLS) across our website.

Access controls limiting who within our organisation can access personal data.

Use of PCI-DSS compliant payment processors for all financial transactions.

No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data. This Privacy Policy applies only to data collected by Eēsē Health.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the 'effective date' at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: hello@eesehealth.com