Privacy Policy

Last updated: 30 August 2026

At Nura Wellness Co., privacy is part of earning and keeping your trust. This policy explains what personal information we collect, why we use it, who we may share it with and the choices available to you.

This policy applies when you visit our website, place an order, create an account, start a subscription, join our mailing list, submit a review or contact us.

1. Who We Are

TRM GROUP LTD, trading as Nura Wellness Co., is responsible for the personal information described in this policy and is the data controller for the purposes of UK data-protection law.

Company name: TRM GROUP LTD
Company number: 14668851
Registered office: 4th Floor, Silverstream House, Fitzroy Street, Fitzrovia, London, England, W1T 6EB

You can contact us about privacy through our Contact Us page or by writing to the registered office above. Please mark postal correspondence “Data Protection”.

2. Personal Information We Collect

The information we collect depends on how you use our store. It may include:

• Identity information, such as your name.
• Contact information, such as your delivery address, billing address, email address and telephone number.
• Order and transaction information, including products purchased, order values, payment status, discounts, refunds and delivery information.
• Account and subscription information, including account details, subscription frequency, status and preferences.
• Limited payment information, such as the payment method used, payment status, authorisation result and payment-token references. Complete card details entered through a secure payment form are handled by the relevant payment provider.
• Communications, including customer-service enquiries, complaints, reviews and other information you choose to send us.
• Marketing preferences, including records of consent, subscription, unsubscribe or objection.
• Technical and usage information, such as your IP address, browser, device identifiers, pages viewed, referring links and interactions with the store.
• Cookie and similar-technology information, as explained in our Cookie Policy.
• Security and fraud-prevention information, such as transaction or device signals used to identify potentially suspicious activity.

3. Health and Other Sensitive Information

We do not ask customers to provide medical records or unnecessary information about their health. Please do not include sensitive health information in an order note, review or general enquiry.

If you voluntarily provide sensitive information, we will only use it where there is a valid legal reason to do so and only to the extent reasonably necessary to respond to the matter concerned.

4. How We Receive Your Information

Most personal information comes directly from you when you:

• browse or interact with the store;
• place or manage an order;
• create an account;
• start or manage a subscription;
• join our mailing list;
• submit a review; or
• contact us.

We may also receive information from Shopify, payment providers, delivery and fulfilment providers, subscription services, fraud-prevention services and marketing or analytics providers, depending on the services used by the store and the choices you make.

5. How and Why We Use Your Information

Processing and Fulfilling Orders

We use your information to accept payment, confirm your order, arrange delivery, provide service updates and deal with cancellations, returns or refunds.

Lawful basis: Entering into and performing our contract with you.

Managing Subscriptions

Where you start a subscription, we use account, payment-token and order information to create and manage recurring orders, take authorised payments and communicate about the subscription.

Lawful basis: Performing the subscription contract.

Providing Customer Support

We use contact, order and communication information to answer questions, investigate problems and resolve complaints.

Lawful basis: Performing our contract with you and our legitimate interest in providing effective customer support.

Protecting the Store and Preventing Fraud

We may use account, device and transaction information to detect fraud, misuse, payment risk and security threats.

Lawful basis: Our legitimate interests, the legitimate interests of our customers and, where applicable, compliance with a legal obligation.

Meeting Legal and Regulatory Requirements

We use and retain information where necessary for tax, accounting, consumer-protection, product-safety, data-protection and other legal requirements.

Lawful basis: Compliance with a legal obligation.

Improving Our Store

We may analyse how visitors use the store to understand its performance, identify problems and improve the customer experience.

Lawful basis: Your consent where non-essential cookies or similar technologies are involved, or our legitimate interest in maintaining and improving the store where consent is not required.

Sending Marketing

We may send marketing where you have consented or where the law allows us to contact an existing customer about similar Nura products and we provided a clear opportunity to opt out when the details were collected.

Every electronic marketing message will provide a way to unsubscribe. You can also change your preferences by contacting us.

Lawful basis: Consent or our legitimate interest in communicating with existing customers, together with the permissions required by electronic-marketing law.

Establishing or Defending Legal Rights

We may use relevant records to establish, exercise or defend legal claims.

Lawful basis: Our legitimate interest in protecting the business and our legal rights.

6. When Information Is Required

Some information is required to enter into and fulfil a contract with you. This normally includes your name, contact details, delivery address and payment authorisation.

If this information is not provided, we may be unable to accept, process or deliver your order. Providing information for marketing purposes is optional.

7. Who We Share Information With

We only share personal information where reasonably necessary. Recipients may include:

• Shopify and providers that host or support the online store;
• payment processors and fraud-prevention providers;
• warehouses, fulfilment providers, postal operators and couriers;
• subscription, customer-support, review and email-service providers;
• analytics and advertising providers where the necessary consent has been given;
• IT, cybersecurity and website-support providers;
• professional advisers, insurers, accountants and auditors;
• courts, regulators, law-enforcement bodies and public authorities where disclosure is required or legally permitted; and
• a prospective buyer, investor or successor if the business or its assets are reorganised, financed or sold, subject to appropriate safeguards.

These organisations may act as our service providers, data processors or independent controllers, depending on the service and the circumstances.

8. Shopify

Our store is powered by Shopify. Shopify processes personal information required to provide its ecommerce platform and related services. For certain Shopify consumer services, including services such as Shop or Shop Pay where enabled, Shopify may process information for its own purposes.

You can read more in Shopify’s Privacy Policy.

9. International Transfers

Shopify and some of our other service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps intended to provide the protection required by UK data-protection law. Depending on the destination and provider, these measures may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the approved UK Addendum to standard contractual clauses;
• approved binding corporate rules; or
• another lawful transfer mechanism accompanied by any required transfer-risk assessment.

Contact us if you would like further information about the safeguards relevant to a particular transfer.

10. How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected. We consider legal, accounting, product-safety, fraud-prevention and dispute requirements when deciding how long information should be retained.

Order, payment and accounting records are generally retained for up to six years after the relevant accounting period where needed for tax, accounting or legal purposes. They may be retained for longer if required by law or while a complaint, investigation or legal claim remains active.

Account and subscription information is normally retained while the account or subscription remains active and for an appropriate period afterwards.

Marketing information is retained until you unsubscribe, withdraw consent or object. We may retain a limited suppression record afterwards so that we can continue to respect your choice.

Information that has been permanently anonymised may be retained because it no longer identifies an individual.

11. Cookies and Similar Technologies

We use cookies and similar technologies for essential functions such as maintaining the shopping basket, securing the store and completing checkout.

With your consent where required, we may also use optional cookies for analytics, personalisation and advertising. You can accept, reject or change optional-cookie preferences using the store’s cookie settings.

Further information is available in our Cookie Policy.

12. Marketing Preferences

You can unsubscribe from marketing at any time using the link provided in an email or by contacting us.

Unsubscribing from marketing will not prevent us from sending necessary service communications about an order, subscription, account, product-safety matter or legal issue.

13. Automated Tools

Shopify, payment providers and fraud-prevention services may use automated signals to identify transactions or activity that could present a security or fraud risk. These tools may flag an order for further review.

If we use solely automated decision-making that produces legal or similarly significant effects, we will provide the information and safeguards required by law, including applicable rights to request human involvement and challenge the decision.

14. Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

• be informed about how your personal information is used;
• request access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for personal information to be erased;
• ask us to restrict how information is used;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent at any time where processing relies on consent;
• request applicable safeguards relating to significant automated decisions; and
• raise a complaint about how your information has been handled.

These rights are not absolute. The right that applies will depend on the information, purpose, lawful basis and surrounding circumstances.

You have an absolute right to object to the use of your personal information for direct marketing.

To exercise a right, use our Contact Us page and state that your request concerns data protection. We may need to request enough information to verify your identity and locate the relevant records.

There is normally no fee for exercising a data-protection right, although the law permits a reasonable fee or refusal in limited circumstances. We will respond within the period required by law.

15. How to Make a Data-Protection Complaint

If you are concerned about how we have collected, used or protected your personal information, please contact us through our Contact Us page. Include “Data protection complaint” in the subject or opening line.

Please explain what has happened and what outcome you are seeking. Do not include passwords, complete payment-card details or unnecessary sensitive information.

We will acknowledge a data-protection complaint within 30 days, investigate it appropriately and communicate the outcome to you.

16. Complaining to the ICO

You also have the right to complain to the Information Commissioner’s Office, the UK’s independent data-protection regulator.

Further information is available through the ICO’s data-protection complaints service.

We would appreciate the opportunity to investigate your concern first, but contacting us does not affect your right to approach the ICO.

17. Security

We use appropriate organisational and technical measures intended to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

No online system can be guaranteed to be completely secure. Please use a strong, unique password for your account and contact us promptly if you believe an account or transaction has been accessed without permission.

18. Children

Our store is not directed at children, and our food supplements are intended for adults unless a product label expressly states otherwise.

We do not knowingly collect personal information from children through the store. If you believe a child has provided personal information to us inappropriately, please contact us.

19. Third-Party Links

Our store may contain links to websites or services that we do not control. Their collection and use of personal information are governed by their own privacy policies.

20. Changes to This Policy

We may update this policy when our store, service providers, legal obligations or use of personal information changes.

The latest version will be published on this page with a revised “Last updated” date. Where a change materially affects how we use personal information, we will take any additional steps required by law.