Free tracked delivery to the UK, Ireland, Europe & USAStimulant-free, drug-free LipNutrixDispatched from London · every order trackedUse code MYJOURNEY10 for 10% offFree tracked delivery to the UK, Ireland, Europe & USAStimulant-free, drug-free LipNutrixDispatched from London · every order trackedUse code MYJOURNEY10 for 10% off

Legal

Privacy policy

How TopNew Wellness collects, uses and protects your personal data when you visit our website, buy from us or contact us, and the rights you have over your data.

Last updated: 11 October 2026 · Questions? Email [email protected]

Who we are

This privacy policy explains how TopNew Wellness (also trading as TopNew UK), operated by Hill Davenport Limited, collects, uses and protects your personal data when you visit topnew.uk, buy from us or contact us.

We are the data controller for your personal data. Our address is Unit 19, Millmead Business Centre, Millmead Road, London N17 9QU, United Kingdom. You can contact us about privacy at [email protected] or on +44 20 4577 0234.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). For customers in the Republic of Ireland and the EU, we also respect your rights under the EU GDPR.

The personal data we collect

Identity and contact details: your name, email address, phone number, and billing and delivery addresses.
Order details: the products you buy, order history, delivery information and any returns or refunds.
Payment details: payments are processed securely by our payment providers. We do not see or store your full card details.
Account details: if you create an account, your login details, saved addresses and wishlist.
Messages: anything you send us through our contact form, email, phone or WhatsApp, including any order number you give us.
Technical data: your IP address, browser and device type, approximate location (country), and how you use our website, collected through cookies and similar technologies.
Marketing preferences: whether you have agreed to receive marketing emails from us.

We do not knowingly collect personal data from anyone under 18. Our products are for adults only.

We do not ask for health information. If you choose to tell us about a health condition, medication or pregnancy when you contact us, we will only use it to answer your question and will not keep it for longer than we need to.

How we use your data and our lawful basis

We only use your personal data when the law allows us to. The table below explains why we use it and our lawful basis.

What we use it for	Lawful basis
Processing and delivering your order, taking payment, and handling returns and refunds	Performance of a contract
Sending order confirmations, dispatch and tracking emails	Performance of a contract
Answering your questions and providing customer service	Legitimate interests (helping our customers), or contract if it relates to an order
Managing your account and wishlist	Performance of a contract
Reminding you about items left in your basket at checkout	Legitimate interests (helping you complete your purchase). You can opt out at any time
Sending marketing emails about offers and new products	Consent, or for existing customers our legitimate interests under the PECR “soft opt-in”. You can unsubscribe at any time
Website analytics to understand how our site is used and improve it	Consent (for non-essential cookies)
Measuring the performance of our Google advertising	Consent (for non-essential cookies)
Showing prices in your local currency based on your country	Legitimate interests (a better shopping experience)
Protecting our website against spam, fraud and attacks	Legitimate interests (security)
Keeping accounting and tax records	Legal obligation

Basket reminder emails

If you enter your email address at checkout but don’t complete your order, we may send you up to a few emails reminding you about the items in your basket. Each email includes a link to stop these reminders. We delete this information if you don’t complete your purchase within a reasonable period.

Marketing

We will only send you marketing emails if you have agreed to receive them, or if you have bought from us before and have not opted out. Every marketing email includes an unsubscribe link, and you can also ask us to stop by emailing [email protected]. We never sell your personal data.

We share your personal data only with trusted service providers who help us run our business, and only as much as they need. They act on our instructions and must keep your data secure.

Payment providers: PayPal (including card payments, Apple Pay, Google Pay and local payment methods) and Stripe (including Klarna and Clearpay/Afterpay). These providers may carry out fraud checks and, for buy-now-pay-later options, their own credit checks under their own privacy policies.
Delivery companies: Royal Mail and other courier partners, who receive your name, delivery address and contact details to deliver your order and send tracking updates.
Website and e-commerce services: our website hosting provider, WordPress and WooCommerce services, our checkout and email tools, and Cloudflare, which protects our website from attacks.
Google: Google Analytics and Google Ads (to understand website use and measure advertising, with your consent), Google Merchant Center (to list our products), and Google reCAPTCHA (to protect our forms from spam).
WhatsApp (Meta): if you contact us or join our support group on WhatsApp, your messages and phone number are handled under WhatsApp’s own privacy policy.
Professional advisers and authorities: accountants, legal advisers, HMRC, the police or regulators where we are required to by law.

International transfers

Some of our service providers, such as Google, PayPal, Stripe, Cloudflare and Meta, may process data outside the UK, including in the United States and the European Economic Area. When this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework.

If you are in the Republic of Ireland or the EU, please note that we are based in the UK, which has an EU adequacy decision.

Cookies

Cookies are small text files stored on your device when you visit a website. We use:

Essential cookies: needed for the website to work, such as keeping items in your basket, logging in, checkout, security and remembering your currency. These do not need your consent.
Analytics cookies: Google Analytics helps us understand how visitors use our website so we can improve it.
Advertising cookies: Google Ads helps us measure whether our adverts lead to visits and orders.
Third-party content: embedded content and links, such as WhatsApp, Facebook and Instagram, may set their own cookies.

When you first visit our website, a cookie banner asks whether you accept analytics and advertising cookies. These only run if you agree. Until then, Google receives only limited, cookieless signals under Google Consent Mode. Your choice is stored in a cookie called tn_consent for 6 months. You can change your choice at any time using the Cookie settings link in our website footer.

You can also block or delete cookies in your browser settings at any time, though some parts of our website may not work properly without essential cookies. You can opt out of Google Analytics across websites using Google’s browser add-on.

How long we keep your data

Order and payment records: 6 years after the end of the financial year, to meet tax and accounting rules.
Customer account: until you ask us to close it, or after 3 years without activity.
Customer service messages: up to 2 years after your last contact.
Basket reminder data: deleted after a short period if you don’t complete your order.
Marketing: until you unsubscribe. We then keep a record so we don’t contact you again.
Analytics data: in line with our Google Analytics retention settings, usually up to 14 months.

How we keep your data secure

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure payment processing by regulated providers, access controls, and security protection from Cloudflare. Only people who need your data to do their job can access it. No website can be 100% secure, but we take care to protect your information and will tell you and the regulator about a data breach where the law requires.

Your rights

Under data protection law you have the right to:

Access the personal data we hold about you
Correct data that is wrong or incomplete
Delete your data in certain circumstances
Restrict how we use your data
Object to us using your data based on legitimate interests, and to direct marketing at any time
Data portability: receive your data in a commonly used format
Withdraw consent at any time, where we rely on consent

To use any of these rights, email [email protected]. We will reply within one month. There is usually no charge. We may ask you to confirm your identity before we act on your request.

Complaints

If you have a concern about how we use your data, please contact us first and we will do our best to help. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. If you live in the Republic of Ireland, you can contact the Data Protection Commission at dataprotection.ie.

Links to other websites

Our website links to other websites, such as social media, Google and WhatsApp. We are not responsible for their privacy practices, so please read their privacy policies.