Privacy policy

Code Natura (codenatura.shop) | Last updated: 19 October 2026

1. Who we are

HT inc LTD, trading as Code Natura (“we”, “us”, “our”), operates the website codenatura.shop and all related content, features, tools, products and services (the “Services”). Our store is built on Shopify, which allows us to provide the Services to you.

HT inc LTD is a company registered in England and Wales, company number . Our registered 15601307 office is 27 Heathcote, Tadworth, Surrey, KT20 5TH.

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the controller of your personal data.

This Privacy Policy explains how we collect, use and share personal data when you visit or use the Services, make a purchase, or communicate with us. If there is a conflict between our terms and conditions and this Privacy Policy, this Privacy Policy prevails with regard to the collection, processing and sharing of your personal data.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read it.

2. What personal data we collect

“Personal data” means information that identifies you or can be linked to you. It does not include information that has been anonymised so that you can no longer be identified. Depending on how you interact with the Services, we may collect the following categories of personal data, including inferences drawn from it:

Contact details: name, postal address, billing address, delivery address, telephone number and email address.
Payment details: transaction details, payment method and payment confirmation. Card details are handled by our payment providers; we do not store full card numbers.
Account information: username, password, security questions, preferences and settings.
Transaction information: items you view, add to your basket or wishlist, buy, return, exchange or cancel, and your past orders.
Communications with us: information you give us when you contact customer support.
Device information: information about your device, browser or network connection, your IP address and other unique identifiers.
Usage information: how and when you interact with and browse the Services.

3. Where we get personal data from

Directly from you: for example when you create an account, place an order, use the Services or contact us.
Automatically through the Services: from your device, and through cookies and similar technologies.
From our service providers: when they collect or process personal data on our behalf.
From our partners and other third parties.

4. How we use your personal data, and our legal basis

Under UK data protection law we must have a lawful basis for using your personal data. We rely on the following:

To provide and improve the Services (contract and legitimate interests). This includes processing payments, fulfilling and delivering your orders, managing your account, sending order and account notifications, handling returns, refunds and exchanges, and personalising and improving the Services, for example by recommending products based on your purchases.
Marketing and advertising (consent, or legitimate interests where the law allows). We may send you marketing by email or SMS where you have agreed, or, in the case of existing customers, where we are allowed to under the Privacy and Electronic Communications Regulations (PECR) for similar products. We may also show you advertising online, including based on items you viewed or added to your basket. You can opt out at any time.
Security and fraud prevention (legitimate interests). We use personal data to authenticate your account, provide a secure shopping and payment experience, detect and investigate fraudulent, illegal or malicious activity, and keep the Services secure. If you register an account, you are responsible for keeping your login details safe, and we strongly recommend that you do not share them.
Communicating with you (contract and legitimate interests). We use personal data to provide customer support, respond to your enquiries and manage our relationship with you.
Legal reasons (legal obligation and legitimate interests). We use personal data to comply with the law, respond to lawful requests from authorities, keep accounting and tax records, deal with legal claims or disputes, and enforce our terms and policies.

We may share your personal data for legitimate purposes with:

Service providers who act on our behalf, such as Shopify and providers of IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and delivery.
Our fulfilment partner in Germany: We use KPS MARKETING MANAGEMENT - FZCO, which operates codenatura.com. We share the personal data they need for this, such as your name, delivery address, phone number, email address and order details. They may only use it on our instructions and for these purposes, and we have a written agreement with them that protects your data.
Business and marketing partners who provide marketing services for us and show you advertising. For example, Shopify can support personalised advertising by third parties based on your online activity across different merchants and websites. Our partners use your data in accordance with their own privacy policies. You have the right to object to your data being used for targeted advertising, and you can do so by contacting us or using the opt-out options these partners provide.
Others, with your instruction or consent: for example, to deliver products to you, or if you use social media widgets or login integrations.
Businesses in our corporate group, if we have any.
In connection with a business transaction such as a merger, sale or insolvency; to comply with legal obligations (including responding to court orders and similar requests); to enforce our terms and policies; and to protect or defend the Services and our rights and the rights of our users or others.

We do not sell your personal data.

6. Our relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal data about your access to and use of the Services in order to provide and improve them. Data you submit through the Services is shared with Shopify and with third parties that may be located in countries other than the one where you live.

We also use certain advanced Shopify features to protect and improve our business. These features use data from your interactions with our store, with other merchants and with Shopify. In those circumstances, Shopify is responsible for processing your personal data, including responding to your requests to exercise your rights for those purposes.

For more information about how Shopify uses your personal data and your rights, see Shopify’s Privacy Policy for Consumers and the Shopify privacy portal at https://privacy.shopify.com/en.

7. Cookies and similar technologies

We and our providers use cookies and similar technologies to make the Services work, remember your basket, understand how the Services are used and, where you agree, to measure and personalise advertising. Cookies that are not strictly necessary are only used with your consent. You can change your cookie choices at any time through the cookie banner or your browser settings.

8. Third-party websites and links

The Services may contain links to websites and platforms run by third parties. If you follow those links, please check their privacy and security policies and terms. We are not responsible for the privacy or security of such sites, or for the accuracy, completeness or reliability of their content. Information you share in public or semi-public places, including on third-party social media platforms, may be viewed by other users without restrictions on how it is used by us or by anyone else. Including a link does not mean we endorse the content or its owners or operators, unless we expressly say so.

9. Children’s data

The Services are not intended for children, and we do not knowingly collect personal data from children under 18. If you are the parent or guardian of a child who has given us their personal data, please contact us using the details below and we will delete it.

10. Security and how long we keep your data

No security measure is perfect, so we cannot guarantee absolute security. Information you send to us may also be at risk during transmission. Please avoid using insecure channels to send us sensitive or confidential information.

How long we keep your personal data depends on why we hold it, for example whether we need it to manage your account, provide the Services, comply with legal obligations (such as keeping accounting and tax records, which UK law generally requires us to keep for at least six years), resolve disputes or enforce our agreements and policies. When we no longer need your personal data, we delete or anonymise it.

11. Your rights

Under UK data protection law you have the following rights, subject to the exceptions and limits that apply:

Right of access: to ask for a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete personal data.
Right to erasure: to ask us to delete your personal data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your personal data in certain circumstances.
Right to object: to object to processing based on our legitimate interests, and to object at any time to the use of your data for direct marketing.
Right to data portability: to receive your personal data in a structured, commonly used format and to ask us to send it to another organisation, in certain circumstances.
Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before you withdrew it.
Marketing preferences: you can stop receiving marketing emails at any time by using the unsubscribe link in them. We may still send you non-marketing emails, such as messages about your account or your orders.

To exercise any of these rights, contact us using the details in section 14. You will not suffer any disadvantage for exercising your rights. We may need to verify your identity before dealing with your request. You can also appoint an authorised agent to make a request on your behalf; we may ask for proof that you have given them permission to act for you. We will respond to your request without undue delay and in any event within one month, as the law requires.

12. Complaints

If you have a complaint about how we handle your personal data, please contact us first using the details in section 14 and we will do our best to resolve it.

You also have the right to complain to the UK data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113.

13. International transfers

We, and our service providers (including Shopify), may transfer, store and process your personal data outside the United Kingdom, including in countries that do not have the same data protection laws as the UK.

We share personal data with our fulfilment partner in Germany (see section 5). Germany is in the European Economic Area, which the UK recognises as providing an adequate level of data protection.

Where we transfer your personal data to other countries outside the UK, we rely on recognised transfer mechanisms, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, or equivalent safeguards approved under UK law.

14. Contact us

If you have any questions about our privacy practices or this Privacy Policy, or you wish to exercise any of your rights, please contact us:

HT inc LTD (trading as Code Natura) 27 Heathcote, Tadworth, Surrey, KT20 5TH Email: support@codenatura.shop

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or for operational, legal or regulatory reasons. We will publish the updated policy on this website, update the “Last updated” date and give any notice that the law requires.