Privacy policy
About this policy
This Privacy Policy explains how Core Molecule collects, uses and protects your personal information when you visit coremolecule.co.uk, purchase a product, start or manage a subscription, contact us or otherwise interact with our online store.
Core Molecule is a trading name of Sussex Well Man Clinic Ltd. Sussex Well Man Clinic Ltd is the data controller responsible for the personal information described in this policy.
Personal information we collect
Depending on how you interact with us, we may collect:
- your name, email address, telephone number, billing address and delivery address;
- information about your orders, returns, refunds and subscriptions;
- payment and transaction information;
- account information and preferences, if you create a customer account;
- correspondence and information you provide when contacting us;
- marketing preferences;
- technical information, such as your IP address, browser, device and how you use our website; and
- information collected through cookies and similar technologies.
Payments are processed securely by Shopify and its payment providers. We do not normally receive or store your complete payment-card details.
We do not ask you to provide medical or health information when purchasing our products. Please avoid including unnecessary medical information in messages to us. If you voluntarily provide such information, we will use it only where necessary to respond to your enquiry and will not use it for marketing.
How we collect your information
We collect personal information:
- directly from you when you place an order, create an account, start a subscription, contact us or sign up for marketing;
- automatically when you visit or use our website, including through cookies and similar technologies; and
- from service providers that help us operate our store, process payments, manage subscriptions, deliver orders and provide customer support.
How and why we use your information
We use personal information to:
- process payments and fulfil, deliver and manage orders;
- create and manage customer accounts and subscriptions;
- process cancellations, returns, refunds and replacements;
- communicate with you about orders, subscriptions and enquiries;
- maintain the security of our website and help prevent fraud;
- comply with accounting, tax and other legal obligations;
- improve our website, products and customer service;
- send marketing communications where you have agreed to receive them or where the law otherwise permits us to do so; and
- understand how our website is used, where permitted by your cookie choices.
Our principal lawful bases under UK data-protection law are:
- Contract: where processing is necessary to provide products or subscription services you have requested.
- Legal obligation: where we need to keep records or comply with applicable law.
- Legitimate interests: where necessary to operate and protect our business, respond to customers, prevent fraud and improve our services, provided those interests are not overridden by your rights.
- Consent: where you choose to receive marketing or accept non-essential cookies. You may withdraw your consent at any time.
Marketing
If you have agreed to receive marketing communications, or where applicable law otherwise permits us to contact you, we may send you news and information about Core Molecule products and offers.
You can unsubscribe at any time by using the unsubscribe link in an email or by contacting hello@coremolecule.co.uk. Unsubscribing from marketing will not stop essential communications about your orders or subscriptions.
Cookies
Our website uses cookies and similar technologies to operate the store, remember preferences, understand website use and, where you consent, support analytics or advertising.
You can manage non-essential cookies through the cookie banner or privacy settings available on our website. Essential cookies are required for functions such as checkout, security and remembering the contents of your basket.
Who we share information with
We share personal information only where reasonably necessary to operate our business, provide our services or comply with the law. Recipients may include:
- Shopify, which hosts and operates our online store;
- payment processors;
- subscription and customer-account service providers;
- Royal Mail and other delivery providers;
- providers of website hosting, email, cloud storage, security, analytics and customer-support services;
- marketing providers, where applicable and subject to your choices;
- professional advisers such as accountants, insurers and legal advisers; and
- regulators, courts, law-enforcement bodies or other authorities where disclosure is required by law.
We do not sell your personal information.
Our store is hosted by Shopify. Shopify processes information needed to provide and improve its services. You can learn more in the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal where applicable.
International transfers
Some of our service providers, including Shopify and its subprocessors, may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we rely on appropriate legal safeguards, such as UK adequacy regulations or approved contractual protections, where required.
How long we keep information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy.
Order, payment and accounting records are generally retained for six years to meet legal, tax and accounting requirements. Other information, such as customer enquiries, account information and marketing preferences, is retained only for as long as it remains necessary or until you withdraw your consent, subject to any legal requirement to keep it.
We may retain a limited record of an unsubscribe request so that we can respect your marketing preference.
Security
We use appropriate technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
No method of online transmission or storage is completely secure, but we take reasonable steps appropriate to the nature of the information we process.
Your rights
Under UK data-protection law, depending on the circumstances, you may have the right to:
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to erase your information;
- ask us to restrict how we use your information;
- object to certain uses of your information, including direct marketing;
- receive certain information in a portable format;
- withdraw consent where we rely on consent; and
- complain to the Information Commissioner’s Office.
These rights are not absolute and may be subject to legal exceptions. We may need to confirm your identity before completing a request.
To exercise a right, email hello@coremolecule.co.uk.
You have the right to object at any time to the use of your personal information for direct marketing.
If you are unhappy with how we use your information, please contact us first so that we can try to resolve the matter. You may also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
Children’s information
Our online store is intended for adults. We do not knowingly collect personal information directly from children.
Third-party websites
Our website may contain links to third-party websites or services. Those organisations are responsible for their own privacy practices, and we recommend reviewing their privacy notices before providing personal information.
Changes to this policy
We may update this Privacy Policy when our practices, services or legal obligations change. The updated version will be published on this website with a revised “Last updated” date.
Contact us
For questions about this Privacy Policy or to exercise your data-protection rights, contact:
Core Molecule
Email: hello@coremolecule.co.uk
Core Molecule is a trading name of Sussex Well Man Clinic Ltd, a company registered in England and Wales under company number 15634694.
Registered office: Preston Park House, South Road, Brighton, East Sussex, England, BN1 6SB.