Privacy Policy
Privacy Policy

Privacy Policy

Last updated: 30th September 2025

Cymbiotika UK (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share your personal data when you visit our site, make purchases, or interact with our services on cymbiotika.co.uk.

What Information We Collect

  • Account & Order Information: Name, email address, postal and billing address, phone number, order history, and payment details (handled securely via Shopify).
  • Marketing & Preferences: Newsletter subscriptions, opt-ins, email engagement, and communication preferences.
  • User-Generated Content: Reviews, ratings, feedback you submit (e.g. via Okendo).
  • Technical & Usage Data: IP address, device & browser type, pages visited, referring/exit pages, timestamp, traffic source, and cookies/tracking data.

How We Use Your Information

  • To process orders, fulfil and ship products, manage subscriptions, and provide customer support.
  • To operate, maintain, and improve our site, services, and customer experience.
  • To send marketing communications (email, SMS) if you’ve opted in, reminding you of offers, new products, promotions, or subscription updates.
  • To personalise content, product recommendations, and offers based on your behaviour and preferences.
  • To run advertising campaigns and retargeting via Facebook Ads, Google Ads, TradeTracker, TripleWhale, and measure their performance.
  • To collect analytics, insights, and track site performance through Google Analytics 4, Google Tag Manager, and related tools.
  • To prevent fraud, enforce our policies, and comply with legal obligations (e.g. tax, accounting, regulatory requirements).

Third-Party & Service Providers

We share your data with trusted third parties who assist us in operations. These include, but are not limited to:

  • Shopify: eCommerce platform, payment processing, order/fulfilment systems.
  • Klaviyo: email marketing, segmentation, automation.
  • Okendo: reviews, ratings, user feedback collection.
  • Google Tag Manager (GTM): tag management and data layer control.
  • Google Analytics 4: traffic and usage analytics.
  • Facebook & Google Ads: advertising, conversion tracking, targeting.
  • TripleWhale: attribution modeling and performance analytics.
  • TradeTracker: affiliate tracking and campaign monitoring.

These providers process data strictly to perform their services and under data protection obligations that safeguard your privacy.

Cookies & Tracking

  • We and our partners use cookies and similar tracking technologies to provide and personalise our services, analyse engagement, and display relevant advertising.
  • You may control or disable cookies via your browser settings, but doing so may impair certain site functions.
  • You can opt out of interest-based advertising via browser settings or by visiting tools such as Your Online Choices.

Your Rights Under UK/EU Law

If you are in the UK or EU, you have rights regarding your personal data, including:

  • The right to access personal data we hold about you.
  • The right to correct or update inaccurate or incomplete data.
  • The right to request erasure (under certain conditions).
  • The right to restrict or object to processing (especially for marketing or profiling).
  • The right to data portability — to receive your data in a usable format.
  • The right to withdraw consent to marketing at any time.
  • The right to lodge a complaint with a data protection authority (e.g. ICO in the UK).

To exercise these rights, please contact us at sales@cymbiotika.co.uk. We may request verification of your identity before processing a request.

Data Retention

  • We retain your personal data only as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
  • Order and financial records will be kept for the period required by UK tax and accounting laws.
  • Marketing and communication preferences are stored until you withdraw consent or unsubscribe.

Security

  • We employ industry-standard security measures (e.g. SSL/TLS, secure servers, access control) to protect your data.
  • Our service providers are required to maintain appropriate security practices.
  • No system is 100% foolproof — we cannot guarantee absolute security of your data during transmission, though we take steps to protect it.

International Transfers

Your data may be transferred to and processed in countries outside the UK/EEA (for example, the USA). Where this occurs, we ensure appropriate safeguards (such as standard contractual clauses or equivalent protections) are in place to protect your rights and privacy.

Children & Minors

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor’s information was collected, please contact us, and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. Your continued use of the site after changes means you accept the revised policy.

Contact Us

If you have questions, concerns, or requests about this policy or your data, please reach out:

Email: sales@cymbiotika.co.uk
Phone: 0121 809 7312