Privacy Notice
Last updated · 27 June 2026
src/lib/company-info.ts to fill in your registered name, address, company number and VAT number.[TODO: Registered company name, e.g. HolOrg Holistic Organic Ltd] (trading as "HolOrg") is the data controller for personal data collected through holorg.com. Registered in England & Wales, company number [TODO: Companies House number, e.g. 12345678], VAT [TODO: VAT number, e.g. GB123456789 — or set to null if not VAT-registered]. This notice explains what we collect, why, and the rights you have under UK GDPR and the Data Protection Act 2018.
1. Data we collect
You give us
Name, email, delivery and billing address, telephone (optional), order history, subscription preferences, account password (hashed), correspondence with our concierge team, and marketing preferences.
Collected automatically
Device, browser, IP, pages visited and basic interaction analytics — only where you have given consent via our cookie banner.
From third parties
Payment status from our payment processor, delivery status from our carriers, and email engagement from our email provider.
2. How and why we use it
- To fulfil and deliver your order (contract).
- To manage your account, subscription and renewals (contract).
- To provide concierge support (legitimate interest).
- To send transactional emails — order, shipping, renewal (contract).
- To send marketing emails where you have opted in (consent).
- To measure site performance and prevent fraud (legitimate interest / consent).
- To meet legal obligations such as tax and accounting (legal obligation).
3. Who we share with
We share the minimum personal data necessary with vetted processors: our payment processor (card details never reach our servers), our email and transactional mail provider, delivery carriers, our hosting and database provider, and where permitted, our analytics provider. Each is bound by a data processing agreement.
4. International transfers
Where data leaves the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses with appropriate supplementary measures.
5. Retention
We keep order records for 7 years to meet UK tax law. Account data is kept while your account is active and for 24 months after closure. Marketing data is kept until you unsubscribe. Analytics data is anonymised after 14 months.
6. Your rights
You can access, correct, delete, restrict, port and object to processing of your personal data, and withdraw consent at any time. Email privacy@holorg.co and we will respond within one month. You may also lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
7. Cookies
We use strictly necessary cookies to operate the site and remember your basket. Analytics and marketing cookies load only with your consent. You can change your choices at any time — .
8. Contact
[TODO: Registered company name, e.g. HolOrg Holistic Organic Ltd] · Registered in England & Wales No. [TODO: Companies House number, e.g. 12345678] · VAT [TODO: VAT number, e.g. GB123456789 — or set to null if not VAT-registered] · United Kingdom · privacy@holorg.co