Privacy Policy
This policy explains what personal information Natural Knows collects when you use naturalknows.com, why we collect it, who we share it with, how long we keep it, and the rights you have over your data.
What we do — and don't do — with your data.
- We collect what's needed to run the site, fulfil purchases, send our newsletter (only if you signed up), keep things secure, and improve what we publish.
- We use Google Analytics, Google AdSense, Mailchimp, WooCommerce, our payment processor, our hosting provider, and a small number of other tools listed below.
- We don't sell your personal information. We don't share it for anyone else's cross-context behavioural advertising.
- If you're in the EU/UK, you have GDPR rights. If you're in California, you have CCPA/CPRA rights. Both are explained below and both apply to all our readers regardless of where you live.
- You can unsubscribe from emails, delete your account, request a copy of your data, or have your data erased at any time — just email hello@naturalknows.com.
Who we are & what this covers
Natural Knows ("we", "us", "our") operates naturalknows.com and is the data controller for personal information collected through the site, our checkout, our newsletter, our member accounts, and any direct correspondence you send us.
This policy covers personal data we process when you visit the site, read articles, comment, subscribe to our newsletter, download a free resource, buy a digital product, hold an account or membership, or contact our team.
What we collect
Information you give us
- Newsletter / lead-magnet signup: email address, and (optional) first name.
- Order / checkout: name, billing address, email, phone (if requested), payment details (processed by our payment provider — we don't store full card numbers), order history.
- Account / membership: username, email, password (hashed), profile preferences, purchase and access history.
- Comments & submitted content: name and email you supply, the comment itself, IP address.
- Contact form / email: name, email, message contents, any attachments.
Information collected automatically
- Device & usage: IP address, approximate location (city/country level), browser type and version, device type, operating system, referring URL, pages viewed, time on page, links clicked, search terms used on the site.
- Cookies & similar technologies: see section 06 and our Cookie Policy.
- Server logs: access logs maintained by our hosting provider for security and diagnostics.
Information from third parties
- Payment confirmation and limited transaction metadata from our payment processor.
- Aggregated analytics data from Google Analytics.
- Bounce, open and click metrics from our email provider.
We don't intentionally collect special-category data (e.g. detailed health records, biometric data, political opinions). Please don't send sensitive personal health information in comments, reviews, or unsolicited emails — we can't safeguard data you push to us in formats not designed for it.
How we use your information
- To operate, maintain, secure and improve naturalknows.com.
- To deliver the products, downloads, member access and accounts you purchase or register for.
- To send you order confirmations, access details, receipts, and service messages about your account or purchase.
- To send our newsletter and marketing emails — only if you opted in.
- To respond to comments, support requests, and other correspondence.
- To measure and improve site performance (which articles are read, where readers come from, what content to publish next).
- To detect, prevent and respond to fraud, abuse, security incidents, and breaches of our Terms.
- To meet our legal, tax and accounting obligations.
- To serve advertising through Google AdSense (see section 06).
Lawful bases for processing (GDPR)
If you're in the EU, the UK or the EEA, GDPR requires us to identify a lawful basis for each purpose for which we process your personal data:
| Processing activity | Lawful basis (Art. 6 GDPR) |
|---|---|
| Fulfilling your order, providing account or membership access | Contract — Art. 6(1)(b) |
| Sending the newsletter and marketing emails | Consent — Art. 6(1)(a) |
| Setting non-essential cookies, behavioural advertising, third-party analytics | Consent — Art. 6(1)(a) |
| Security, fraud prevention, abuse detection, basic site analytics | Legitimate interests — Art. 6(1)(f) |
| Improving content and product range based on aggregate behaviour | Legitimate interests — Art. 6(1)(f) |
| Tax, accounting, and other legal obligations | Legal obligation — Art. 6(1)(c) |
| Defending or pursuing legal claims | Legitimate interests / legal claims — Art. 6(1)(f) / Art. 9(2)(f) |
Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, you can object — see section 08.
Who we share information with
We don't sell your personal information. We share it only with the service providers we need to run the site, and only for the purposes listed above. The main categories are:
- Hosting & infrastructure — Hostinger (web hosting), our CDN and caching layer.
- Security — Wordfence (firewall, malware scanning, login protection).
- eCommerce & payments — WooCommerce (cart and order processing) plus our payment processor (e.g. Stripe / PayPal), which handles card data under PCI-DSS.
- Email marketing — Mailchimp (newsletter, lead magnets, broadcast emails).
- Analytics — Google Analytics (audience and behaviour metrics), Google Search Console (search performance).
- Advertising — Google AdSense (display advertising, where enabled).
- Forms — SureForms (contact and lead capture).
- Social posting — WP to Buffer (scheduling posts to our social channels — no reader data shared).
- Professional advisers — accountants and legal counsel, where strictly necessary.
- Authorities — where we are legally required (subpoena, court order, statutory request) or where disclosure is necessary to protect our rights, safety, or those of our users.
- Business transfers — in connection with a merger, acquisition, sale of assets or restructuring, your data may transfer to a successor under equivalent protection.
Cookies & similar technologies
We use cookies, local storage and similar technologies to keep the site working, remember your preferences, measure traffic, secure the site, run our cart and checkout, and (where applicable) serve advertising. The categories we use:
- Strictly necessary — login, cart, checkout, security tokens.
- Functional — preferences, language, recently viewed.
- Analytics — Google Analytics (pageviews, sessions, sources, behaviour).
- Advertising — Google AdSense and DoubleClick cookies (see below).
Google's DART cookie & AdSense
As a third-party vendor, Google may use the DART cookie to serve ads to our users based on previous visits to naturalknows.com and other sites on the internet. Users may opt out of personalised advertising by visiting Google's Ads Settings or by visiting aboutads.info and networkadvertising.org/choices.
Data retention
We keep personal information only as long as we need it for the purpose it was collected for, or as long as the law requires.
| Data type | Retention period |
|---|---|
| Order & transaction records | 7 years (tax / accounting obligations) |
| Customer account & membership data | While the account is active, plus 12 months after closure |
| Newsletter subscriber data | Until you unsubscribe, plus 30 days for suppression-list purposes |
| Free-resource download leads | Until you unsubscribe, plus 30 days |
| Contact-form / support correspondence | Up to 3 years from last contact |
| Comments on articles | While the article is published (you can request removal at any time) |
| Server & access logs (security) | Up to 12 months |
| Analytics data (Google Analytics) | Per Google Analytics retention setting — currently 14 months for user / event data |
| Cookies | Per each cookie's expiration — see Cookie Policy |
| Anonymised / aggregated data | May be retained indefinitely (no longer personal data) |
Your rights — GDPR (EU / UK / EEA readers)
If GDPR or UK GDPR applies to you, you have the right to:
- Be informed about how we use your data (this policy).
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), where the legal grounds apply.
- Restrict our processing of your data in certain cases.
- Object to processing based on legitimate interests, and to direct marketing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, your national DPA in the EU).
To exercise any of these rights, email hello@naturalknows.com. We may ask you to verify your identity before acting on a request. We respond within one month and will tell you if more time is needed.
Your rights — CCPA / CPRA (California residents)
If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
- Right to know what personal information we collect, the sources, purposes, categories of recipients and the specific pieces we hold about you.
- Right to delete personal information we have collected from you, subject to legal exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the "sale" or "sharing" of personal information.
- Right to limit use of sensitive personal information (we don't intentionally collect any).
- Right to non-discrimination for exercising any of these rights.
Do we "sell" or "share" personal information?
We do not sell personal information for money. Where we display Google AdSense, the use of advertising cookies may qualify as "sharing" for cross-context behavioural advertising under California law. You can opt out of personalised advertising via the controls listed in section 06, and through our cookie banner. To make a "Do Not Sell or Share My Personal Information" request, email hello@naturalknows.com with that request in the subject line.
An authorised agent can submit a request on your behalf with appropriate written permission and identity verification.
International data transfers
Natural Knows operates in the United States, and several of our service providers (Google, Mailchimp, WooCommerce extensions, Hostinger infrastructure, payment processors) operate globally. If you're outside the US, your personal data will be transferred to and processed in countries that may not provide the same level of data protection as your home jurisdiction.
When personal data is transferred from the EU, UK or EEA to a country without an adequacy decision, we rely on appropriate safeguards — most commonly the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or equivalent mechanisms offered by the processor (for example, certifications under the EU-US Data Privacy Framework). You can request a copy of the safeguards in place for a particular transfer by emailing us.
Security
We use reasonable technical and organisational measures to protect personal data — including HTTPS encryption in transit, hashed account passwords, two-factor authentication on administrative accounts, web-application firewall and malware monitoring (Wordfence), access controls, and limited retention.
No system is perfectly secure. We can't guarantee absolute protection against unauthorised access. If a breach affects your personal data and we are legally required to notify you, we will do so without undue delay through the contact details we hold.
Children's privacy
Natural Knows is intended for adults. The site, the newsletter, member accounts and digital products are not directed to children under the age of 13 (or under the relevant age of consent in your jurisdiction — 16 in much of the EU). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe a child has provided personal data to us, email hello@naturalknows.com and we will delete it promptly. Articles in our Natural Pediatric Health category are written for caregivers, not children.
Do Not Track & Global Privacy Control
Browsers send "Do Not Track" signals inconsistently and there is no industry standard for how to interpret them. Natural Knows does not currently respond to DNT signals. Where it applies, we treat a recognised Global Privacy Control signal as a valid opt-out request for the sale or sharing of personal information under California law.
Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be flagged on the site and, where appropriate, by email to registered customers. Continued use of the site after a change indicates acceptance of the revised policy.
Contact us
Questions about this policy, requests to exercise your rights, or concerns about how we handle your data should be sent to:
Natural Knows — Privacy
hello@naturalknows.com
naturalknows.com/contact
Your data, your call.
Email us any time to access, correct, port, or delete the personal information we hold about you — we'll respond within 30 days.
Contact Natural Knows →