Privacy Policy
Last updated: 22 July 2026
1. Who We Are
Coventry Nutrition Review Ltd ("we", "us", "our") is the data controller for personal data collected through this website (powerherbdyn.world). We are registered in England and Wales.
Registered address: 14 Bayley Lane, Coventry, CV1 5RN, United Kingdom.
Company No. / VAT: 14285739.
Contact email: privacy@powerherbdyn.world
2. What Data We Collect
We collect personal data in the following circumstances:
- Order form: full name, telephone number, and consent record. We do not collect payment card data online - payment is taken on delivery by the courier.
- Contact form: full name, email address, and the content of your message.
- Cookies and analytics: IP address (anonymised), browser type, device type, pages visited, and session duration - only where you have given consent via our cookie banner.
- Technical data: server logs (IP address, timestamp, page requested) retained for security purposes for up to 30 days.
We do not collect special category data (health, biometric, financial) and do not knowingly collect data from persons under 18.
3. Legal Basis for Processing
- Contract performance (Article 6(1)(b) UK GDPR): processing your order and delivery confirmation call.
- Legitimate interests (Article 6(1)(f) UK GDPR): responding to contact enquiries, fraud prevention, server security logging.
- Consent (Article 6(1)(a) UK GDPR): analytics and marketing cookies - only after you click "Accept All" on the cookie banner. You may withdraw consent at any time via the Manage Cookies link in the footer.
- Legal obligation (Article 6(1)(c) UK GDPR): retaining transaction records for VAT and accounting purposes.
4. How We Use Your Data
- To process and fulfil your order, including confirming delivery details by telephone.
- To respond to enquiries submitted via the contact form.
- To operate and improve the website using aggregated, anonymised analytics data (only where consent is given).
- To maintain records required by UK tax and company law.
- To detect and prevent fraudulent or abusive use of our services.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
5. Data Sharing
We may share your data with the following categories of recipient, strictly as necessary:
- Delivery partners: your name and address are passed to our courier to fulfil your order.
- IT and hosting providers: our website is hosted on servers within the UK/EEA. Hosting providers act as data processors under a Data Processing Agreement.
- Analytics providers: where consent is given, anonymised usage data is shared with Google Analytics (operated under a Data Processing Agreement, with IP anonymisation enabled).
- Legal authorities: we will disclose data where required to do so by law or by order of a competent court or regulator.
6. Retention Periods
- Order records: 7 years from the date of transaction (UK statutory accounting requirement).
- Contact enquiries: 12 months from the date of last correspondence, then deleted.
- Analytics data: aggregated and anonymised; raw session data deleted after 14 months by Google Analytics default retention settings.
- Server logs: 30 days, then automatically purged.
- Cookie consent records: 12 months, then renewed at next visit.
7. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to request correction of inaccurate or incomplete data.
- Right to erasure: to request deletion of your data, subject to our legal retention obligations.
- Right to restriction: to request that we restrict processing of your data in certain circumstances.
- Right to data portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract.
- Right to object: to object to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at privacy@powerherbdyn.world. We will respond within 30 days.
8. Right to Lodge a Complaint
If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk
We would, however, appreciate the opportunity to address your concerns before you approach the ICO - please contact us first at privacy@powerherbdyn.world.
9. Cookies
We use cookies to operate the website and, where consent is given, to measure analytics performance. For a full breakdown of the cookies we use, their purpose, and how to manage them, see our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the website after a material change constitutes acceptance of the revised policy. For significant changes, we will display a notice on the website.