Privacy policy

Privacy Policy

1. Who we are

This website, https://wellzenio.com, and the Wellzenio store (the "Services") are operated by Mochiberry Ltd, a company registered in Scotland under company number SC898210, with its registered office at 7 Buccleuch Lane, Glasgow, G3 6SG. "Wellzenio" is a trading name of Mochiberry Ltd.

Mochiberry Ltd is the data controller of the personal information collected through the Services. Because Mochiberry Ltd is established in the United Kingdom, this Privacy Policy is primarily governed by the UK GDPR and the Data Protection Act 2018. As we sell to customers in Australia, certain of our activities may also be subject to the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) — see clause 4A for what that means in practice.

You can contact us about privacy at support@wellzenio.com.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Personal information we collect

Depending on how you interact with us, we may collect:

  • Contact details — name, billing and shipping address, phone number, email address.

  • Order and payment information — items purchased, order value, transaction details, and payment confirmation. We do not store full card numbers; payments are handled by our payment providers.

  • Account information — username, password, preferences and settings (if you create an account).

  • Communications — information you include when you contact our support team.

  • Device and usage information — IP address, device and browser information, and how you interact with the Services (via cookies and similar technologies).

  • Marketing data — your preferences for receiving marketing from us.

3. Where we collect it from

  • Directly from you (when you order, create an account, or contact us).

  • Automatically through the Services (via your device and cookies).

  • From our service providers (e.g. payment, shipping and analytics providers).

  • From advertising and marketing partners.

4. How we use your information, and our lawful bases

Purpose

Lawful basis (UK GDPR)

Process, fulfil and deliver your orders; manage your account; provide customer service

Performance of a contract

Take payment and prevent fraud

Contract / legitimate interests / legal obligation

Send order and dispatch updates

Performance of a contract

Send marketing by email or SMS

Consent (or soft opt-in for existing customers, for similar products). Where you are in Australia, this is also subject to the Spam Act 2003 (Cth)

Personalise and measure advertising (including on Meta and Google)

Consent (via cookies)

Improve and secure the Services and analyse usage

Legitimate interests

Comply with legal, tax and accounting obligations

Legal obligation

You can withdraw marketing consent at any time using the unsubscribe link or by emailing us.

4A. A note for our Australian customers: the small business exemption

Wellzenio is a small business with annual turnover under AUD $3 million. Businesses of this size are generally exempt from the Australian Privacy Act 1988, so in most cases our handling of your personal information is governed by the UK GDPR framework described throughout this policy rather than the APPs directly.

However, this exemption has exceptions. The one most relevant to us: a small business loses the exemption for any activity that involves "trading in personal information" — broadly, disclosing personal information about an individual to another entity for a benefit. Sharing data with advertising platforms like Meta and Google for ad targeting may fall into this category. Where that's the case, we handle the relevant personal information consistently with the Australian Privacy Principles for that activity, in addition to our obligations under UK GDPR.

In practice, this means: whichever framework applies to a given activity, we apply the rights and protections described in clauses 8–10 below. Where you are in Australia, you can also raise a concern with the Office of the Australian Information Commissioner (OAIC) as well as, or instead of, the UK Information Commissioner's Office (ICO) — see clause 10.

5. Who we share your information with

We share personal information only as needed to run the store, with providers acting on our instructions or as required by law, including:

  • Shopify — our e-commerce and hosting platform.

  • Payment providers (including card processors e.g. PayPal and Klarna) — to take and verify payment.

  • Shipping and fulfilment partners — to deliver your order.

  • Email/SMS marketing platform (e.g. Klaviyo) — to manage communications you have consented to.

  • Advertising and analytics providers (e.g. Meta and Google) — where you have consented to the relevant cookies.

  • Our group companies, professional advisers, and authorities — where necessary for legitimate business, legal or regulatory reasons, or in connection with a business transaction.

Our partners use your information in accordance with their own privacy notices.

6. International transfers

As Mochiberry Ltd is based in the United Kingdom, and we sell to and use service providers in Australia and elsewhere, your personal information may be transferred to and processed outside the United Kingdom, including in Australia, the United States and other countries where our service providers operate. Where we do this, we put appropriate safeguards in place — such as a UK adequacy decision where one applies, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses. (Note: Australia does not currently hold UK adequacy status, so transfers there rely on these contractual safeguards rather than an adequacy finding.) You can request more detail by emailing us.

7. Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage non-essential cookies (including analytics and advertising cookies) through our cookie banner and settings.

8. How long we keep your information

We keep personal information only as long as necessary for the purposes above, including to meet legal, tax and accounting requirements (transaction records are typically kept for up to 6–7 years, in line with UK requirements). Marketing data is kept until you opt out.

9. Your rights

Under UK data protection law you have the right to: access your information; have it corrected; have it erased; restrict or object to processing; data portability; and to withdraw consent where we rely on it. To exercise any right, email support@wellzenio.com. We will respond within one month. We will not discriminate against you for exercising your rights and may need to verify your identity first.

If you are in Australia and clause 4A applies to a particular activity, you also have the right under the Australian Privacy Principles to access and correct the personal information we hold about you in relation to that activity, and to opt out of direct marketing at any time.

10. Complaints

If you have a concern about how we handle your personal information, please contact us first at support@wellzenio.com so we can try to resolve it.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. If you are in Australia, you may alternatively (or in addition) complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

11. Children

The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children.

12. Security

We use appropriate technical and organisational measures to protect your information. No method of transmission over the internet is completely secure, but we take reasonable steps to keep your data safe.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last updated" date above.

14. Contact

Mochiberry Ltd (trading as Wellzenio)
Registered in Scotland, company no. SC898210
Registered office: 7 Buccleuch Lane, Glasgow, G3 6SG
Email: support@wellzenio.com

For the purposes of the UK GDPR, Mochiberry Ltd is the data controller of your personal information. Mochiberry Ltd may also be subject to the Australian Privacy Principles under the Privacy Act 1988 (Cth) in relation to specific activities described in clause 4A.

 


Â