Privacy Policy

Last updated: 28 July 2026 · Governed by UK GDPR and the Data Protection Act 2018

1. Who We Are

The data controller is The Larkfield Wellness Ltd, a company registered in England and Wales (Company No. 14287631, VAT GB412 8836 09), with its registered office at 12 Larkfield Road, London, SE9 2EF.

2. The Data We Collect

We collect and process the following categories of personal data:

Identity data: full name provided when placing an order or submitting an enquiry.
Contact data: telephone number and/or email address.
Transaction data: details of orders placed, including product, price, and delivery address.
Technical data: IP address, browser type and version, time zone, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage data: information about how you use our website, products, and services.
Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.

We do not collect any Special Categories of Personal Data (such as data about your health, race, religion, or sexual orientation) through this website.

3. How We Collect Your Data

We collect data through:

Direct interactions - when you complete the order form or contact form on our website.
Automated technologies - cookies, server logs, and similar technologies when you browse our website. See our Cookie Policy for full details.
Third parties - analytics providers (Google Analytics) and advertising networks, subject to your consent choices.

4. Legal Bases for Processing

Purpose	Type of data	Lawful basis
To process and fulfil your order	Identity, Contact, Transaction	Performance of a contract (Article 6(1)(b) UK GDPR)
To respond to your enquiry	Identity, Contact	Legitimate interests (Article 6(1)(f) UK GDPR)
To operate and improve our website	Technical, Usage	Legitimate interests (Article 6(1)(f) UK GDPR)
Analytics and advertising cookies	Technical, Usage	Consent (Article 6(1)(a) UK GDPR)
To comply with legal obligations	All relevant categories	Legal obligation (Article 6(1)(c) UK GDPR)

5. How We Use Your Data

To process and confirm your order for Alpha Drive and arrange delivery.
To respond to enquiries or complaints you submit via our contact form or email.
To improve our website, products, and services through aggregated analytics data.
To comply with our legal and regulatory obligations.
To send you marketing communications where you have consented or where we have a legitimate interest to do so, with a clear option to opt out at any time.

6. Cookies and Consent Mode

We use Google Consent Mode v2 on this website. By default, all analytics and advertising cookies are denied until you explicitly accept them via the cookie banner. You may withdraw consent at any time by clearing your browser cookies or revisiting our Cookie Policy page. Functionality and security cookies operate on the basis of legitimate interests and are not subject to consent withdrawal.

7. Sharing Your Data

We do not sell your personal data to third parties. We may share your data with:

Service providers: third-party companies that process data on our behalf (e.g. hosting, payment processing, delivery). These processors are bound by data processing agreements.
Google LLC (Google Analytics, Google Ads) - subject to your consent choices. Data may be transferred to the United States under Google's Standard Contractual Clauses.
Law enforcement or regulators - where we are legally required to do so.

8. International Transfers

Where we transfer your personal data outside the UK, we ensure an equivalent level of protection is afforded by using one of the following safeguards: UK adequacy decisions, Standard Contractual Clauses approved for use in the UK, or the UK International Data Transfer Agreement (IDTA).

9. Data Retention

Order and transaction data: retained for 7 years to comply with HMRC requirements.
Enquiry and contact data: retained for 2 years from last contact, then securely deleted.
Analytics data: retained in aggregated form per Google Analytics' default retention settings (26 months by default), subject to your consent.

10. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to request correction of inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restrict processing - to request that we limit how we use your data.
Right to data portability - to receive your data in a structured, machine-readable format.
Right to object - to object to processing based on legitimate interests or for direct marketing.
Rights relating to automated decision-making - we do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact us at info@glowthnew.world. We will respond within one calendar month. We may need to verify your identity before processing the request.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:

Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first.

12. Security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include TLS encryption, access controls, and regular security assessments.

13. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of external sites and encourage you to read their privacy notices.

14. Children

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Material changes will be notified via a prominent notice on our website.