Privacy Policy

Last updated: 11 August 2026

This Privacy Policy explains how Litmus Organics (“Litmus Organics”, “we”, “us” or “our”) collects, uses, stores and shares your personal information when you visit our website, make a purchase, create an account, subscribe to marketing communications or contact our customer support team.

By using our website, you acknowledge that your personal information will be handled as described in this Privacy Policy.

1. Personal information we collect

Personal information means information that identifies you or can reasonably be linked to you.

Depending on how you use our website, we may collect the following categories of information.

Contact information

This may include:

• Your full name

• Email address

• Telephone number

• Billing address

• Delivery address

Order and payment information

This may include:

• Products purchased

• Order number

• Order value

• Billing and delivery details

• Payment status

• Refund and return information

• Subscription information

• Discount codes used

Payments are processed by authorised payment providers. Litmus Organics does not directly store your complete payment-card details.

Account information

If you create an account, we may collect:

• Your name

• Email address

• Login information

• Order history

• Saved preferences

• Subscription settings

Device and website information

When you visit our website, certain information may be collected automatically, including:

• IP address

• Device type

• Browser type and version

• Operating system

• Time zone

• Cookie identifiers

• Pages and products viewed

• Search terms

• Referring website

• Interactions with our website

• Approximate location based on your IP address

This information may be collected through cookies, pixels, tags, log files and similar technologies.

Customer-support information

When you contact us, we may collect:

• Your contact information

• Your order number

• The contents of your message

• Photographs or videos you submit

• Information about returns, refunds or product issues

Please do not send us medical records or other sensitive personal information unless it is specifically necessary to resolve your request.

Marketing information

If you subscribe to marketing communications or interact with our advertisements, we may collect:

• Your marketing preferences

• Email and SMS engagement

• Advertisement interactions

• Products or categories that may interest you

• Information about how you reached our website

2. How we collect personal information

We collect personal information:

• Directly from you when you place an order, contact us or create an account.

• Automatically when you use our website.

• From service providers that help operate our online store.

• From payment, delivery, analytics and advertising partners.

• From publicly available sources where permitted by law.

3. How we use personal information

We may use your personal information to:

• Process and fulfil orders.

• Process payments and refunds.

• Arrange shipping and provide tracking information.

• Manage returns, replacements and guarantee claims.

• Create and manage customer accounts.

• Manage product subscriptions.

• Communicate about orders and customer-service requests.

• Detect and prevent fraud, misuse and security incidents.

• Improve our website, products and customer experience.

• Analyse website traffic and sales performance.

• Personalise website content and advertising.

• Send marketing emails or messages where permitted.

• Comply with legal, accounting and tax obligations.

• Enforce our Terms of Service and other policies.

• Protect Litmus Organics, our customers and other parties.

4. Legal bases for processing

Where the UK GDPR, EU GDPR or similar privacy laws apply, we process personal information under one or more of the following legal bases:

Performance of a contract

We process information needed to:

• Accept and fulfil your order.

• Process your payment.

• Deliver your products.

• Manage returns and refunds.

• Provide customer support.

• Manage your subscription.

Consent

We may rely on your consent for:

• Non-essential cookies.

• Certain marketing communications.

• Personalised advertising where consent is required.

You may withdraw your consent at any time. Withdrawing consent does not affect processing that occurred before it was withdrawn.

Legitimate interests

We may process information where reasonably necessary for our legitimate business interests, including:

• Preventing fraud.

• Improving our website and services.

• Protecting our business.

• Understanding customer behaviour.

• Providing relevant marketing where legally permitted.

We will not rely on legitimate interests where your rights and freedoms override those interests.

Legal obligations

We may process and retain information to comply with tax, accounting, consumer-protection and other legal requirements.

5. How we share personal information

We may share personal information with trusted service providers that help us operate our business, including:

• Shopify and e-commerce providers

• Payment processors

• Warehouses and fulfilment providers

• Delivery and postal companies

• Customer-support providers

• Email and SMS providers

• Subscription-management providers

• Analytics providers

• Advertising and social-media platforms

• Fraud-prevention and security providers

• Professional advisers, accountants and legal advisers

• Government authorities where legally required

These parties may only receive information reasonably necessary to provide their services or fulfil their legal responsibilities.

We may also share information:

• To comply with a lawful request or legal obligation.

• To investigate fraud, security incidents or policy violations.

• To protect our rights, customers or other parties.

• In connection with a merger, acquisition, financing, reorganisation or sale of business assets.

6. Advertising and analytics

We may use analytics and advertising services to understand how visitors use our website and measure the effectiveness of our marketing.

Subject to your location and cookie preferences, these services may collect information about:

• Pages and products you view

• Purchases and checkout activity

• Your device and browser

• Advertisement interactions

• Website visits and referral sources

We may use services provided by platforms such as Google and Meta where these have been enabled on our website.

Where required by law, advertising and analytics cookies will only be used after you have provided consent through our cookie banner.

You can change your preferences through our cookie settings and through the privacy or advertising settings offered by the relevant platform.

7. Marketing communications

We may send you information about products, offers and updates where you have given consent or where otherwise permitted by law.

You can unsubscribe from email marketing at any time by selecting the unsubscribe link at the bottom of an email.

You may still receive essential messages relating to an existing order, payment, refund, subscription or customer-service request.

8. Cookies

We use cookies and similar technologies to:

• Keep the website functioning.

• Remember your cart and preferences.

• Enable secure checkout and account access.

• Understand website performance.

• Measure marketing campaigns.

• Show relevant advertisements where permitted.

Essential cookies are required for the operation of the website. Non-essential cookies, including certain analytics and advertising cookies, will be managed according to your consent where required.

For more information, please review our Cookie Policy or open the cookie settings available on our website.

9. International transfers

Litmus Organics and its service providers may process personal information in countries outside your country of residence.

For example, Shopify and other service providers may process information in the United States, Canada, the European Economic Area or other locations.

Where required, we use recognised safeguards for international transfers, such as adequacy decisions, approved contractual clauses or other legally permitted transfer mechanisms.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period may depend on:

• The duration of our relationship with you.

• Legal, tax and accounting requirements.

• The need to resolve disputes.

• Fraud-prevention and security requirements.

• Whether you have an active account or subscription.

• Whether information is needed to establish or defend legal claims.

When information is no longer required, we will delete or anonymise it where reasonably possible.

11. Security

We use reasonable administrative, technical and organisational measures to protect personal information.

However, no online system or electronic transmission is completely secure. You are responsible for keeping your account credentials confidential and should contact us if you believe your account has been accessed without permission.

12. Your privacy rights

Depending on where you live, you may have the right to:

• Request access to your personal information.

• Request correction of inaccurate information.

• Request deletion of your information.

• Request restriction of certain processing.

• Object to certain processing.

• Withdraw consent.

• Request a portable copy of certain information.

• Opt out of direct marketing.

• Complain to an applicable data-protection authority.

• Appeal a decision relating to a privacy request where applicable.

Some rights are subject to legal limitations. For example, we may need to retain order information for tax, fraud-prevention or legal purposes.

To submit a privacy request, contact us through the Litmus Organics Contact Us page. We may need to verify your identity before completing the request.

13. Automated decision-making

We do not use customer information to make solely automated decisions that produce legal or similarly significant effects.

Our service providers may use limited automated systems to detect and prevent fraudulent transactions. For example, suspicious payment activity, IP addresses or payment cards may be temporarily blocked for security purposes.

14. Children’s privacy

Our website and products are not directed at children.

We do not knowingly collect personal information from children who are not legally able to provide valid consent in their country.

If you believe a child has provided personal information to us without appropriate permission, please contact us so we can investigate and delete it where required.

15. Third-party websites

Our website may contain links to websites operated by other organisations.

Litmus Organics is not responsible for the privacy, security or content of third-party websites. You should review the privacy policy of any external website before providing personal information.

16. Do Not Track signals

Some browsers allow users to send a “Do Not Track” signal.

Because there is currently no universally accepted standard for responding to these signals, our website may not automatically respond to every Do Not Track request. You can manage cookies using our cookie settings and your browser controls.

Where legally required and technically supported, we may recognise other valid opt-out preference signals.

17. Complaints

If you have concerns about how we process personal information, please contact us first so we can try to resolve the issue.

You may also have the right to submit a complaint to the data-protection authority in the country where you live or work.

18. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our business, services, technology or legal obligations.

The latest version will be published on this page with an updated revision date.

19. Contact us

For questions about this Privacy Policy or to exercise your privacy rights, please contact the Litmus Organics customer support team through our Contact Us page.

Please clearly state that your request relates to privacy and provide enough information for us to identify and respond to your request.