Privacy Policy
Effective Date: December 11, 2025
This Privacy Policy explains how Swap The Toxins (“we,” “us,” or “our”) collects, uses, and protects your personal data when you use our website. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Important Information and Who We Are
Data Controller: Swap The Toxins
Governing Law: England and Wales
If you have any questions about this Privacy Policy or our data protection practices, please contact us.
2. The Data We Collect About You
Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, including:
- Identity Data: Name or username (if you leave a comment).
- Contact Data: Email address (if you subscribe to a newsletter or leave a comment).
- Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
- Usage Data: Information about how you use our website, including pages viewed, time spent on pages, and navigation paths.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
We do not collect sensitive personal data (e.g., health information, political opinions) on this website.
3. How We Collect Your Personal Data
We use different methods to collect data from and about you:
- Direct Interactions: You may provide us with your Identity and Contact Data by filling in forms or corresponding with us by email (e.g., when you subscribe to a newsletter, submit a contact form, or leave a comment).
- Automated Technologies or Interactions (Cookies): As you interact with our website, we automatically collect Technical and Usage Data about your equipment and browsing patterns using cookies and similar technologies. Please see our separate Cookie Policy for more details.
- Third Parties: We receive data from third-party services, such as analytics providers (like Google Analytics) and affiliate marketing networks, which provide us with pseudonymised data about your purchasing journey.
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you (e.g., sending you a requested newsletter).
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., for running our business, preventing fraud, and ensuring network security).
- Where we need to comply with a legal or regulatory obligation.
A. Purposes for Processing Data:
| Purpose | Type of Data Used | Lawful Basis for Processing |
| To manage comments and user interactions. | Identity, Contact, Usage | Legitimate interests (to improve our content). |
| To administer and protect our business and site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). | Identity, Technical | Legitimate interests (for running our business, provision of administration and IT services, network security). |
| To send you marketing communications (if you have opted in). | Identity, Contact, Marketing | Consent or Legitimate interests (to grow our business). |
| To track the source of affiliate purchases. | Usage, Technical | Legitimate interests (to receive due commissions). |
5. Sharing Your Personal Data
We may share your personal data with third parties in the following situations:
- Service Providers: We use third-party service providers (e.g., website hosting, email services, analytics providers) who process data on our behalf.
- Affiliate Networks: We share certain anonymised tracking data with affiliate networks to attribute sales and receive commissions.
- Legal Compliance: If we are under a duty to disclose or share your personal data to comply with any legal obligation.
6. International Transfers
We do not intentionally transfer your personal data outside the UK or the European Economic Area (EEA). However, some of our third-party service providers (such as Google Analytics) may be based outside the UK/EEA, meaning their processing of your personal data will involve a transfer of data outside the UK/EEA. Where we transfer your data, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government.
- Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to employees, agents, and contractors who have a business need to know.
8. Your Legal Rights (UK GDPR)
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:
- Request access to your personal data (commonly known as a “data subject access request”).
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request the transfer of your personal data to you or a third party.
- Withdraw consent at any time where we are relying on consent to process your personal data.
If you wish to exercise any of the rights set out above, please contact us. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
9. Third-Party Links
This website may include links to third-party websites, including affiliate links. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.