Privacy Policy

Last updated: 22/06/2025

Crea Health Ltd ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or purchase our products.

1. Who We Are

Crea Health Ltd is the data controller responsible for your personal data. Our registered address is:

Crea Health Ltd
86-90 Paul Street
London
EC2A 4NE
Email: laura@crea.health

2. What Personal Data We Collect

We may collect, use, store and transfer the following types of personal data:

Full name
Email address
Postal address
Phone number
Payment details (processed via Apple Pay, PayPal, and Wix Payments)
Purchase history
Testimonials including references to wellbeing or health
Social media handles or user-generated content (UGC) you submit
Communication history and marketing preferences

We do not knowingly collect data from individuals under the age of 13.

3. How We Collect Your Data

We collect data when you:

Make a purchase via our website
Sign up to our newsletter or register interest
Contact us via our website forms
Participate in influencer or affiliate campaigns
Submit a testimonial or user-generated content
Interact with our marketing emails (via Klaviyo)

4. How We Use Your Data

We use your personal data for the following purposes:

To fulfil and deliver your orders
To provide customer support
To manage your account and purchase history
To send marketing communications (with your consent)
To invite feedback, testimonials, or reviews
To analyse sales and improve our website and product offering
To comply with legal and regulatory obligations

5. Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

Consent – for email marketing and testimonials
Contractual necessity – to fulfil your purchases and deliver goods
Legitimate interests – for business analytics, product improvement, and customer service

6. Third Parties We Work With

To operate our business, we may share your data with trusted third parties who process it on our behalf:

Wix – our website and e-commerce platform
Klaviyo – our email marketing provider

All third-party service providers are based in the UK or store data in compliance with UK GDPR.

We do not sell your data to any third party.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal or accounting obligations.

As a general rule:

Order and account data: 6 years
Marketing data (with consent): until you unsubscribe
Testimonials and user content: until you request removal

You can request deletion at any time by emailing laura@crea.health.

8. Your Data Protection Rights

You have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Request the deletion of your data
Object to or restrict certain types of processing
Withdraw consent at any time for marketing
Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact laura@crea.health.

9. Cookies

We currently do not use cookies on our website for tracking, analytics, or advertising purposes.

If this changes, we will update this policy and provide a cookie banner for your control and consent.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the "last updated" date clearly shown.

11. Contact Us

If you have any questions or concerns about this policy or how we handle your data, contact:

Email: laura@crea.health