Privacy and Cookies PolicyUpdated 4 hours ago

PRIVACY AND COOKIE POLICY (EU CUSTOMERS)

Version number: 5.1

Effective date: 05th February 2026

WHO ARE WE?
We are Gutology Limited. Registered Office: Minerva Mill Innovation Centre, Station Road, Alcester, B49 5ET. We are the data controller for the purposes of the General Data Protection Regulation (GDPR). We are based in the United Kingdom. Our headquarters and customer support services are located in the UK. For privacy queries, including data subject rights requests, please contact us directly at [email protected]. 

For individuals located in the European Union, our appointed EU Representative under Article 27 of the GDPR is Advanced Development & Safety Laboratories (Ireland) Ltd. While we have appointed this representative to fulfil our GDPR obligations, all customer queries - including from EU residents - should be directed to our UK team.

WHAT'S THE PURPOSE OF THIS POLICY?
This policy explains what to expect when we collect personal information from users of our services or website. If you do not agree with this policy, please do not use our services.

Generally, this policy applies only to personal information collected by us. If you provide personal information directly to third parties (such as payment providers, delivery partners, or social media platforms), their own privacy policies will apply and we encourage you to review them separately.

WHAT DO WE COLLECT? 
We may collect the following categories of personal information:

your name and contact details;

• Your name and contact details.
• Information submitted during registration or otherwise, including health-related information (special category data), your birthday, or payment details.
• Account-related data: usernames, passwords, preferences.
• Transaction data relating to your purchases.
• Referral data (e.g., friend's contact details if using a referral feature).
• Communications (e.g., customer service interactions, feedback, surveys).
• Marketing and newsletter preferences.
• Automated browsing data (IP address, device data, session logs, location, browser/device metadata).
• Social login or third-party data (if applicable).

Where we process special category data (such as health-related information), we apply additional technical and organisational safeguards and only process such data where permitted under Article 9 GDPR, including where you have provided your explicit consent or where processing is necessary for the provision of our services.

LEGAL BASIS FOR PROCESSING YOUR INFORMATION (EU USERS)
We process your data under the following legal bases:

• Contractual necessity: For processing orders and account administration.
• Legitimate interests: For improving our services, preventing fraud, ensuring network and information security, and marketing similar products to existing customers, where these interests are not overridden by your fundamental rights and freedoms.
  
• Consent: For special category data (e.g., health information), specific marketing activities, and cookie usage where required.
• Legal obligation: To comply with applicable law.

You have the right to withdraw your consent at any time.

WHERE DO WE PROCESS YOUR DATA?

• For EU customers, order fulfilment is handled within the EU via Amazon’s distribution services. Our stock is shipped from the UK to Amazon’s EU fulfilment centres. Accordingly, your personal data (e.g., delivery name, address, and order details) is processed within the EU.
• Our customer service and data support operations are based in the UK, and we can access customer information for both UK and EU orders from our UK systems.
• Some support, analytics, or IT services may involve transfers outside the EU/EEA (e.g., to the UK or US). Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions adopted by the European Commission or Standard Contractual Clauses approved under Article 46 GDPR.
  

WHO DO WE SHARE YOUR DATA WITH?
We may share your data with:

• Fulfilment and delivery providers (e.g., Amazon for EU-based orders).
• Customer service platforms.
• IT, hosting, and analytics providers (e.g., Shopify, Google).
• Regulators, legal authorities, or insurers where required.
• Actual or potential buyers, investors, or advisers, but only where reasonably necessary in connection with a proposed or completed sale, merger, or business reorganisation involving all or part of our business.
  

HOW LONG DO WE RETAIN YOUR DATA?

• Transactional and account data: 6 years after end of customer relationship.
• Marketing data: Until you unsubscribe.
• Automated browsing data: Up to 14 months.

YOUR RIGHTS UNDER GDPR (EU USERS)
If you are located in the EU, you have the right to:

• Access your personal data.
• Rectify inaccuracies.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Object to the processing of your personal data where we rely on legitimate interests as our legal basis.
  
• Lodge a complaint with your national supervisory authority in the EU, in particular in the Member State of your habitual residence, place of work, or where an alleged infringement has occurred (for example, CNIL in France, the DSK in Germany, or the DPC in Ireland).your national supervisory authority (e.g., CNIL in France, DSK in Germany, or the DPC in Ireland).

To exercise your rights, please contact [email protected].

COOKIES:
We use cookies and tracking technologies for:

• Functionality and navigation.
• Remembering preferences and login.
• Analytics (e.g. via Google Analytics).
• Advertising and affiliate tracking.
• Security and fraud prevention.

Where required by law (e.g., under the EU ePrivacy Directive), we obtain your consent before setting non-essential cookies. You may adjust cookie preferences in your browser or via our cookie management tool.
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

You may withdraw or change your cookie consent at any time through our cookie management tool or by adjusting your browser settings.

CHANGES TO THIS POLICY
We may update this policy from time to time. You will be notified via our website or direct communications where appropriate.

CONTACT INFORMATION
If you have any questions or concerns about this policy or how we handle your personal data, please contact us:

Gutology Limited
Email: [email protected]
Head Office: Minerva Mill Innovation Centre, Alcester, B49 5ET, United Kingdom
EU Representative (for regulatory purposes only): Advanced Development & Safety Laboratories (Ireland) Ltd, Ireland