Privacy Policy

Last Updated: August 7, 2025

1. Introduction
Welcome to Bushtokta Heath Store (”we,” “us,” “our”). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website and purchase our products online.

2. Data Controller
Bushtokta Heath Store
Registered Address: Unit 10 OneStop Shopping Centre, Walsall Road, Perry Barr, B42 1st
Email: thecure@bushtokta.co.uk

3. Information We Collect
3.1. Personal Information You Provide:

  • Name, billing/shipping address, email address, telephone number, payment details (credit/debit card information).
  • Account credentials (username, password) if you register an account.
  • Communication preferences and marketing consents.

3.2. Automatically Collected Information:

  • IP address, browser type and version, operating system, device identifiers.
  • Pages visited, time and date stamps, referring URLs, clickstream data, and other usage data.

3.3. Cookies and Tracking:
We use cookies, web beacons, and similar technologies to enhance your experience and gather analytics. For more details, see Section 6 below.

4. How We Use Your Information
We process your personal data for the following purposes:

  • Order Fulfilment & Customer Service: To process purchases, deliver products, manage returns, and respond to inquiries.
  • Payment Processing: To verify and process payments through secure third-party payment processors.
  • Account Management: To provide you with an account to view past orders, save preferences, and facilitate re-orders.
  • Marketing & Communications: With your consent, to send newsletters, promotions, product updates, and special offers. You may opt out at any time.
  • Analytics & Site Improvement: To analyse website usage, perform troubleshooting, and enhance our offerings.
  • Legal Compliance & Safety: To comply with applicable laws (e.g., UK/EU GDPR, CCPA), respond to legal requests, and ensure product safety and regulatory compliance.

5. Legal Basis for Processing (UK/EU GDPR)

  • Contract: Processing is necessary to fulfil your orders and perform our sales agreement.
  • Consent: For marketing communications and non-essential cookies.
  • Legitimate Interests: For fraud prevention, site analytics, and product improvement, provided these interests aren’t overridden by your rights.
  • Legal Obligations: To comply with tax, accounting, and other statutory requirements.

6. Cookies & Tracking Technologies
6.1. Essential Cookies: Required for basic website functionality (e.g., shopping cart, account login).
6.2. Performance & Analytics Cookies: Collect aggregate data on site usage to help us improve our website.
6.3. Marketing Cookies: Track visitors across websites to deliver relevant advertising.

You can manage or disable cookies via your browser settings. Disabling certain cookies may affect website functionality.

7. Sharing Your Information
We may share your personal data with:

  • Service Providers: Payment processors, shipping companies, analytics platforms, email delivery services, and IT hosting providers.
  • Regulatory Authorities: If required by law or court order.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

We do not sell or rent your personal information to third parties for their own marketing purposes.

8. Third-Party Links & Services
Our website may contain links to third-party sites (e.g., social media, payment gateways). This Privacy Policy does not apply to those sites. We recommend reviewing their privacy policies before providing any personal data.

9. Data Security
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These measures include encryption (HTTPS/TLS), secure payment processing, and regular security assessments. However, no method of data transmission or storage is 100% secure.

10. Data Retention
We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations (e.g., tax records), resolve disputes, and enforce our agreements.

11. Your Rights
Under UK/EU GDPR and applicable privacy laws, you may have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate data.
  • Erasure: Request deletion of your data (“right to be forgotten”) where lawful.
  • Restriction: Request limitation of processing.
  • Objection: Object to processing based on legitimate interests or direct marketing.
  • Portability: Receive your data in a structured, commonly used format.
  • Withdraw Consent: At any time for processing based on consent.

To exercise any rights, contact us at thecure@bushtokta.co.uk. We will respond within applicable legal timeframes.

12. Children’s Privacy
Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors. If we learn of such data, we will delete it promptly.

13. International Data Transfers
We may transfer personal data to service providers located outside the UK/EEA (e.g., the United States). Any such transfers are protected by appropriate safeguards (e.g., Standard Contractual Clauses) in compliance with GDPR.

14. Changes to This Privacy Policy
We may update this policy to reflect changes in legal requirements or our practices. We will post the revised date at the top of this page and, where appropriate, notify you by email or via a prominent notice on our website.

15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Bushtokta LTD
Email: thecure@bushtokta.co.uk
Phone: +44 07800 6370362
Address: Unit 10 One Stop Shopping Centre, Walsall Road, Perry Barr, Birmingham, B42 1SF

Thank you for trusting Bushtokta LTD with your personal data. Your privacy is important to us.