Privacy policy

Soulful Mind & Body Ltd
Trading as Soulful Shrooms

Last updated: 27.02.26


1. Introduction

Soulful Mind & Body Ltd (“we”, “us”, “our”) is committed to protecting your personal data.

This Privacy Policy explains how we collect, use and protect your information when you visit our website or purchase from us.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


2. Company Information

Soulful Mind & Body Ltd
Trading as Soulful Shrooms
Registered in England & Wales
Company number: 16869661

Email: info.shrooms@soulfulmindandbody.co.uk


3. Information We Collect

We may collect the following personal information:

• Name
• Billing and delivery address
• Email address
• Phone number
• Payment details (processed securely via payment providers)
• Order history
• IP address and browser/device information
• Website usage data (via cookies and analytics)

We do not collect sensitive medical information.


4. How We Use Your Information

We use your information to:

• Process and fulfil orders
• Communicate about your order
• Provide customer support
• Send marketing emails (only if you opt in)
• Improve our website and services
• Prevent fraud or misuse

We do not sell your personal data.


5. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contractual necessity – to fulfil your order
• Legal obligation – for tax and accounting records
• Legitimate interest – to improve services and prevent fraud
• Consent – for marketing communications

You may withdraw consent for marketing at any time.


6. Payment Processing

Payments are processed securely via Shopify Payments, PayPal, or other selected providers.

We do not store full card details on our servers.


7. Data Sharing

We may share data with:

• Payment providers
• Delivery couriers
• Shopify (our ecommerce platform)
• Email marketing providers (if subscribed)
• Analytics providers (e.g., Google Analytics)

All third parties are required to process data securely.


8. Data Retention

We retain personal data only as long as necessary for:

• Fulfilling orders
• Accounting and tax obligations
• Legal requirements

You may request deletion of your data, subject to legal obligations.


9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Data portability

To exercise these rights, contact: support@soulfulmindandbody.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.


10. Cookies

We use cookies to:

• Enable essential website functions
• Improve website performance
• Analyse site traffic
• Support marketing and advertising (where applicable)

You can manage cookies through your browser settings.

 


11. Data Security

We implement appropriate technical and organisational measures to protect your personal data.

However, no online transmission is completely secure.


12. International Transfers

Some service providers (e.g., Shopify or analytics tools) may process data outside the UK.

Where this occurs, appropriate safeguards are in place in accordance with UK GDPR.


13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page.