The Cornish Apothecary

Privacy Policy

Last updated: 26 April 2026

The Cornish Apothecary, operated by Hedgerow & Honey ("we," "us," "our"), respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

This policy is compliant with the UK GDPR, EU GDPR, and applicable US consumer privacy laws (including CCPA where relevant).

1. What We Collect

When you visit the Site or purchase from us, we may collect:

Information you provide:

  • Name
  • Email address
  • Billing address (where required for payment processing)
  • Payment information (processed by our payment provider — we do NOT store full payment card details)

Information collected automatically:

  • IP address
  • Browser type and device information
  • Pages visited, time spent, and referral source (via cookies and analytics tools)
  • Email engagement (open rates, click-throughs) if you join our mailing list

2. How We Use Your Information

We use your data to:

  • Deliver the Guide you purchased
  • Send you transactional emails (download links, receipts, refund confirmations)
  • Send you marketing emails about new guides, content, or community updates (only if you opted in — you can unsubscribe at any time)
  • Improve the Site and our products
  • Comply with legal obligations
  • Prevent fraud and protect the security of our systems

We do NOT sell, rent, or trade your personal data to third parties.

3. Legal Basis for Processing (UK/EU GDPR)

We process your data under the following legal bases:

  • Contract: to deliver the Guide you purchased
  • Consent: for marketing emails (you can withdraw at any time)
  • Legitimate interest: for improving our products and preventing fraud
  • Legal obligation: for tax, accounting, and compliance records

4. Third Parties We Share Data With

We share limited data with trusted service providers only as needed to operate the business:

  • Payment processor (e.g. Stripe, PayPal) — handles your payment
  • Email service provider (e.g. ConvertKit, MailerLite) — delivers your guide and emails
  • Hosting and analytics (e.g. Lovable / Framer hosting, Google Analytics, Meta Pixel) — runs the Site and tracks performance
  • Community platform (e.g. Circle, Skool, Discord) if applicable — delivers community access

All providers are bound by their own privacy and data protection obligations.

5. Cookies

We use cookies to:

  • Make the Site work (essential cookies)
  • Understand how visitors use the Site (analytics)
  • Show you relevant ads on social platforms (marketing pixels)

You can disable non-essential cookies via your browser settings or the cookie banner on the Site.

6. Data Retention

We retain your data only for as long as needed:

  • Order records: 7 years (for tax compliance)
  • Email subscribers: until you unsubscribe
  • Analytics data: 26 months (Google Analytics default)

7. Your Rights

Under GDPR and applicable laws, you have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to processing of your data
  • Request a copy of your data in a portable format
  • Withdraw consent at any time
  • Lodge a complaint with a data protection authority (e.g. the ICO in the UK)

To exercise any of these rights, contact us at hello@cornishapothecary.com. We will respond within 30 days.

8. Data Security

We use industry-standard security measures (SSL encryption, secured payment processing, password-protected systems) to protect your data. However, no system is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

If you are based outside the United Kingdom, your data may be transferred internationally to our service providers. We ensure adequate safeguards (e.g. Standard Contractual Clauses) are in place where required.

10. Children's Privacy

The Site and the Guide are not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

11. Changes to This Policy

We may update this policy. The most current version will always be posted on the Site with the "Last updated" date.

12. Contact

For any questions about this Privacy Policy or to exercise your rights, contact us at hello@cornishapothecary.com.

© The Cornish Apothecary 2026. The Cornish Apothecary is operated by Hedgerow & Honey. All rights reserved.