Privacy Policy

Last updated: 16 July 2026

Nurture by Nature respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it and the rights available to you under the General Data Protection Regulation, commonly known as the GDPR, and applicable Irish data protection law.

This policy applies when you visit our website, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with Nurture by Nature.

Who We Are

For the purposes of data protection law, Nurture by Nature is the data controller responsible for the personal information collected through this website.

Business name: Nurture by Nature
Website: nurturebynaturecbd.ie
Address: Mount Street Commons, Mullingar, Co. Westmeath, N91 Y0R1, Ireland
Email: nurturebynature25@gmail.com

Questions about this Privacy Policy or the way we handle personal information can be sent to the email address above.

Personal Information We Collect

The information we collect depends on how you use our website and services.

Information You Provide Directly

We may collect information including:

  • Your name

  • Billing and delivery address

  • Email address

  • Telephone number

  • Account username and password

  • Order and purchase information

  • Products added to your basket or wishlist

  • Messages sent through our contact form

  • Product reviews and comments

  • Marketing preferences

  • Information supplied when requesting support, making a complaint or arranging a return

Where an age-restricted product is purchased, we may also request information needed to confirm that the customer meets the applicable age requirement.

Payment Information

Payments may be processed by third-party payment providers.

Nurture by Nature does not normally receive or store your complete credit or debit card details. Payment providers may collect your card number, expiry date, security code, billing information and other information required to authorise the transaction.

The payment provider processes this information under its own privacy policy and security procedures.

Information Collected Automatically

When you use our website, certain technical information may be collected automatically, including:

  • Internet Protocol address

  • Browser type and version

  • Device type and operating system

  • Approximate location based on your IP address

  • Pages viewed

  • Links clicked

  • Date and time of visits

  • Referring website

  • Shopping basket activity

  • Login and account activity

  • Cookie identifiers

  • Website performance and error information

Some of this information is collected through cookies and similar technologies. More information is available in our Cookie Policy.

How We Use Personal Information

We may use your personal information to:

  • Process and deliver orders

  • Take and verify payments

  • Create and manage customer accounts

  • Provide order confirmations and delivery updates

  • Respond to enquiries and support requests

  • Process returns, refunds and complaints

  • Maintain shopping baskets and wishlists

  • Publish customer reviews where submitted

  • Detect fraud, misuse and suspicious transactions

  • Protect the security of our website and customers

  • Maintain financial, tax and transaction records

  • Improve website performance and usability

  • Understand how visitors use our website

  • Send marketing communications where permitted

  • Personalise advertising where consent has been provided

  • Comply with legal and regulatory requirements

  • Establish, exercise or defend legal claims

We will not use your personal information for purposes that are incompatible with the reasons for which it was originally collected unless permitted by law.

Our Legal Bases for Processing

We rely on one or more of the following legal bases.

Performance of a Contract

We process personal information where it is necessary to:

  • Accept and fulfil an order

  • Take payment

  • Deliver products

  • Manage an account

  • Process a return or refund

  • Provide customer support connected with a purchase

Without this information, we may be unable to process or complete an order.

Legal Obligation

We may process and retain information to meet legal obligations relating to:

  • Taxation

  • Accounting

  • Consumer protection

  • Product safety

  • Fraud prevention

  • Law enforcement requests

  • Regulatory compliance

Legitimate Interests

We may process information where it is necessary for our legitimate business interests and those interests do not override your rights.

These interests may include:

  • Operating and improving our website

  • Preventing fraud and misuse

  • Protecting our systems and customers

  • Keeping appropriate business records

  • Responding to general enquiries

  • Understanding business performance

  • Defending legal claims

Consent

We may rely on your consent for activities such as:

  • Email marketing

  • Non-essential cookies

  • Analytics cookies

  • Personalised advertising

  • Certain social media tracking technologies

Consent can be withdrawn at any time. Withdrawing consent does not affect processing that took place before it was withdrawn.

Marketing Communications

We will only send promotional emails where we have a lawful basis to do so.

Marketing emails will contain an unsubscribe option. You may also ask us to stop sending marketing communications by contacting nurturebynature25@gmail.com.

Service messages relating to an order, account, payment, delivery, return or security issue are not marketing communications and may still be sent where necessary.

Product Reviews and Public Content

Information submitted as part of a product review may be displayed publicly on our website.

A published review may include your chosen display name, rating, review text and submission date. Your email address will not normally be displayed publicly.

Please avoid including private, sensitive or unnecessary personal information in a review.

Sharing Personal Information

We may share personal information with trusted service providers where necessary to operate our business.

These providers may include:

  • Website hosting companies

  • Website developers and IT support providers

  • Payment processors

  • Banks and financial institutions

  • Delivery and courier companies

  • Email and communication providers

  • Accounting and professional advisers

  • Fraud prevention and security providers

  • Analytics providers

  • Advertising and social media platforms

  • Customer service providers

  • Government bodies, regulators or law enforcement agencies where required

These organisations may act as data processors, independent controllers or joint controllers depending on the service they provide.

We only share information reasonably required for the relevant service.

We may also disclose personal information where necessary to protect our rights, investigate suspected fraud, comply with a legal obligation or respond to a valid request from a public authority.

International Data Transfers

Some service providers may process personal information outside Ireland or the European Economic Area.

Where information is transferred outside the European Economic Area, we take reasonable steps to ensure that an appropriate legal safeguard is in place.

Safeguards may include:

  • An adequacy decision issued by the European Commission

  • European Commission Standard Contractual Clauses

  • Additional technical and contractual protections

  • Another transfer mechanism permitted under data protection law

Further information about relevant transfer safeguards may be requested by contacting us.

How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Typical retention considerations include:

  • Order and transaction records may be retained for the period required under Irish tax and accounting law

  • Account information may be retained while the account remains active

  • Enquiries may be retained for a reasonable period after the matter has been resolved

  • Complaint, refund and legal records may be retained while a claim could reasonably arise

  • Marketing information may be retained until consent is withdrawn or an objection is received

  • Cookie information is retained according to the duration stated in our Cookie Policy or cookie consent tool

  • Security logs may be retained for a limited period for fraud prevention and system protection

Information may be anonymised so that it no longer identifies an individual. Anonymised information may be retained for statistical or business analysis purposes.

Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access

  • Accidental loss

  • Alteration

  • Disclosure

  • Destruction

  • Misuse

These measures may include secure website connections, access controls, account authentication, software updates, backups and restrictions on who can access customer information.

No website, payment system or internet transmission can be guaranteed to be completely secure. Customers should use a strong, unique password and keep their account details confidential.

Your Data Protection Rights

Depending on the circumstances, you may have the right to:

Access

You may request a copy of the personal information we hold about you.

Rectification

You may ask us to correct inaccurate or incomplete personal information.

Erasure

You may ask us to delete your personal information where there is no lawful reason for us to continue retaining it.

Restriction

You may ask us to restrict the way personal information is processed in certain circumstances.

Objection

You may object to processing based on legitimate interests. You may object to direct marketing at any time.

Data Portability

You may request certain information in a structured, commonly used and machine-readable format where the legal requirements for data portability apply.

Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Lodge a Complaint

You have the right to make a complaint to the Irish Data Protection Commission.

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

Website: dataprotection.ie

We would appreciate the opportunity to address a concern directly before a complaint is submitted.

Exercising Your Rights

Requests can be sent to:

Email: nurturebynature25@gmail.com

Please provide enough information for us to identify you and understand the request.

We may need to request proof of identity before releasing information or carrying out certain instructions. This is intended to prevent personal information from being disclosed to someone who is not authorised to receive it.

We normally respond within one month. A longer period may be required for complex or numerous requests, as permitted by law.

Children’s Privacy

Our online shop is not directed at children.

We do not knowingly collect personal information from a child without an appropriate lawful basis. Where we become aware that personal information has been submitted by a child improperly, we may delete the information and cancel any related account or transaction.

Third-Party Websites

Our website may contain links to other websites, social media platforms or external services.

We do not control the privacy practices of third-party websites. Visitors should review the privacy notice of each external service before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our website, services, technology or legal obligations.

The latest version will be published on this page with an updated revision date.

Contact Us

Questions, concerns or data protection requests can be sent to:

Nurture by Nature
Mount Street Commons
Mullingar
Co. Westmeath
N91 Y0R1
Ireland

Email: nurturebynature25@gmail.com