Privacy Policy

Policy version & metadata

This privacy policy applies to Simply Enjoy It Ltd ("SEI", "we", "us", "our") and all brands and services operating under the SEI business ecosystem ("SEI brands").

Legal entity: Simply Enjoy It Ltd (Company No: 16641437)
Registered contact email: hello@simplyenjoyit.co.uk
Policy version: v1.0
Effective date: 2025-11-10
Last updated: 2025-11-10
Document ID / Audit hash: SEI-PRIV-v1-20251110

This page is the master privacy policy for SEI; our individual brands link to this master policy and any brand-specific deviations will be clearly noted on the brand site.

Note: This is a template policy prepared for SEI. Please consult legal counsel for regulatory compliance tailored to your exact processing activities.

Scope

This policy covers processing of personal data by Simply Enjoy It Ltd and its operating brands across all domains and services, including but not limited to: websites, mobile applications, newsletters, marketing, user accounts, e-commerce transactions, analytics, and third-party integrations.

What personal data we collect

We collect and process the following categories of personal data where necessary to provide services, meet legal obligations, and improve our products:

Identity: name, username, title
Contact: email address, phone number, postal address
Account: login credentials, preferences, profile data
Transaction data: purchase history, order details, billing & delivery addresses
Payment information: processed by third-party payment providers (we do not store full payment card details on our systems)
Usage & analytics: IP address, device and browser info, interaction and engagement data, cookies and similar technologies
Content: user-generated content, reviews, comments, messages
Special categories (where applicable and only with explicit consent): health-related information required for nutrition/features (e.g., dietary preferences, allergies) — collected only where the service requires it

Why we process personal data & legal bases

We process personal data for the following purposes and rely on these lawful bases (UK GDPR):

Performance of a contract: to provide services, deliver orders, manage accounts and subscriptions.
Legal compliance: to meet regulatory or tax obligations.
Legitimate interests: for fraud prevention, improving products, analytics, security, marketing (subject to balancing tests and opt-outs).
Consent: where we ask for explicit consent (e.g., for direct marketing, special category data or optional features). You may withdraw consent at any time.

Affiliates, partners and third-party processors

SEI operates in partnership with a range of affiliates and third-party providers including affiliate brands, webstore partners, payment processors, analytics providers, hosting providers and marketing platforms. These partners may process personal data as either:

Data Controllers: where the partner determines purposes and means (e.g., affiliate brand operating a separate service).
Data Processors: where SEI determines purposes and the partner acts on our instructions (e.g., payment gateways, email delivery providers).

Examples of processing by partners include delivering orders, running analytics, delivering marketing, processing payments, and enabling cross-brand promotions. Where we share data with partners for marketing or product analytics (for example, an affiliate brand wanting aggregate campaign performance), we will:

only share the minimum necessary data;
use aggregated/anonymised reports where possible;
ensure appropriate contractual safeguards (data processing agreements, confidentiality and technical controls); and
where required by law or contract, obtain user consent before sharing special categories of data.

If an affiliate brand acts as a separate controller and wants to access identifiable user records (for example to see which users engaged with their brand content), we will only do so when there is a lawful basis and a clear contractual arrangement in place, and users are informed (via links or brand notices) of that sharing.

International data transfers

SEI operates globally and data may be transferred to, stored, and processed in countries outside the UK. Where transfers occur to jurisdictions without an adequacy decision, we rely on appropriate safeguards such as the UK-approved Standard Contractual Clauses, binding corporate rules, or other lawful mechanisms. Contact hello@simplyenjoyit.co.uk for details of safeguards used for a particular transfer.

Data retention

We retain personal data for as long as is necessary to fulfil the purposes outlined in this policy, including to meet legal, tax or accounting obligations. Where specific retention periods are required by law, we will retain data for the minimum legally-required period. Where no specific legal requirement exists, retention is based on the purposes for which the data was collected and the lawful basis for processing.

Examples:

Account records: retained while the account exists and for a reasonable period thereafter to support legal claims or regulatory requirements.
Transaction & billing data: retained in accordance with tax and accounting rules.
Marketing consents: retained until consent is withdrawn and subject to lawful retention limits.

Your rights

Under UK GDPR and other applicable laws (including California's CCPA/CPRA), you have rights in relation to your personal data. These may include:

Access: obtain confirmation whether we process your data and request a copy.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion where there is no lawful reason to retain data.
Restriction: request limitation of processing in certain circumstances.
Portability: obtain a machine-readable copy of data you provided.
Objection: object to processing based on legitimate interests or direct marketing.
Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at hello@simplyenjoyit.co.uk. We will respond to requests within the statutory timeframe (normally one month) or inform you where an extension is required.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA/CPRA). See the dedicated section below.

California residents (CCPA/CPRA)

SEI respects the rights of California residents. In addition to the rights listed above, California residents have the right to:

Know the categories of personal information collected, sold, or disclosed for a business purpose during the 12 months prior to the request.
Request deletion of personal information we collected from them (subject to exceptions).
Opt-out of the sale of personal information. SEI does not sell personal information for monetary consideration. Where partner promotions involve sharing data, we will provide opt-outs where required.
Not be discriminated against for exercising their privacy rights.

To submit a CCPA request, contact hello@simplyenjoyit.co.uk. We will verify requests and respond as required by law.

Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. Measures include access controls, encryption, monitoring, vulnerability management and regular security reviews. However, no internet service is 100% secure; report concerns immediately to hello@simplyenjoyit.co.uk.

Children

Our services are not intended for children under 16 without parental or guardian consent. If we become aware that we have collected personal data from a child under the applicable age without appropriate consent, we will take steps to delete this data.

Cookies & tracking

We use cookies and tracking technologies (including analytics and advertising pixels). You can manage cookie preferences via the cookie banner on our sites. For details, see our Cookie Policy (link coming soon).

Monetisation, affiliates and analytics

We may run affiliate promotions, sponsored content and third-party offers. When you interact with such promotions we may share limited data with advertisers or affiliate partners (for example: anonymised engagement metrics or purchase referrals), subject to appropriate safeguards and contractual controls. We will not sell sensitive personal data and will seek consent where required by law before sharing special category data.

How to complain

If you have concerns about our processing, please contact us first at hello@simplyenjoyit.co.uk. If you remain unsatisfied, you have the right to lodge a complaint with the relevant supervisory authority (in the UK, the Information Commissioner's Office — ICO).

Changes to this policy & versioning

We keep this policy under regular review. Material changes will be published on this page with an updated version number and effective date. For auditing, each published version includes a document ID and timestamp shown at the top of this policy.

Contact us

Data protection enquiries, requests and concerns: hello@simplyenjoyit.co.uk