Privacy Policy

Last updated: 11 November 2026

1. Who we are
This policy explains how Roshni Clinic ("we", "us"), the business behind roshniclinic.co.uk, collects and uses personal information. We are the controller of the information described here. For any question about your data, use the Contact page at https://roshniclinic.co.uk/contact/, or call +44 7345 099569.

2. What we collect
- When you order: your name, email address, phone number, delivery address, the products you order and your order history.
- When you pay: payment is handled by our payment providers. We receive confirmation that a payment succeeded; we never receive or store your full card or bank details.
- When you contact us: the details you give in our contact form (such as your name, email, phone number and message), or in a WhatsApp chat if you choose to message us there.
- When you leave a review: the name, rating and text you submit.
- When you track an order or check a batch: the order number or batch code you enter.
- Technical information: like any website, our servers record basic technical data such as your IP address, browser type and the pages requested, to keep the site running and secure.

3. Why we use it, and our lawful basis
- To take, process, dispatch and track your order and to give you customer support: to perform our contract with you.
- To answer your messages: our legitimate interest in responding to enquiries.
- To keep records for accounting, tax and legal purposes: our legal obligations.
- To protect the website and our customers against fraud and misuse: our legitimate interests.
- To publish reviews you submit: your consent, which you can withdraw at any time.
We do not use your information for automated decision-making, and we never sell it.

4. Who we share it with
We share only what each needs to do their job:
- PepFlow, the order and fulfilment platform that processes and dispatches orders on our behalf;
- payment providers, such as Stripe or an open-banking provider, to take your payment;
- delivery carriers, to deliver your parcel;
- hosting and IT providers that run this website, such as Amazon Web Services;
- WhatsApp (Meta), only if you choose to contact us there;
- public authorities, where the law requires it.
Some of these providers may process data outside the UK. Where they do, it is protected by appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Agreement.

5. Cookies and browser storage
We do not use advertising or tracking cookies. The website keeps a few items in your browser that it needs in order to work: your basket, your progress through checkout, and whether you have closed the welcome message. These stay on your device and are not used to track you. Because they are strictly necessary, they do not need your consent.

6. How long we keep it
- Order and payment records: six years, as required for tax and accounting.
- Messages: up to two years after the conversation ends.
- Reviews: for as long as they are published.
- Technical logs: a short period, normally no more than 90 days.

7. Your rights
Under UK data protection law you can ask us for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, ask us to transfer it, and withdraw consent where we rely on it. Contact us through our Contact page and we will reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk), although we would appreciate the chance to help first.

8. Security
We protect your information with encrypted connections (HTTPS), restricted access and reputable service providers.

9. Children
Our products are for adult researchers. We do not knowingly collect information from anyone under 18.

10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.