1. Who We Are
You're A Natural (youreanatural.com) is an AI-powered consumer intelligence platform operated by Palm & Pine Living Limited, a company registered in England and Wales (company number 16983434). Our registered office is 3/26 Craven Street, London WC2N 5NT.
We use artificial intelligence to cross-reference regulatory frameworks, scientific evidence, and publicly observable product information. We publish Insight Reports that map information gaps between what standards require, what science demonstrates, and what product labels claim. We also operate a marketplace for curated sustainable products and run Magic Wand petitions for systemic change.
Contact: [email protected]
Research and corrections: [email protected]
2. About This Policy
This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website. It is made under the UK General Data Protection Regulation (UK GDPR) as retained under the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
Palm & Pine Living Limited is the data controller for the personal data described in this policy.
3. What Data We Collect and Our Lawful Basis
Under Article 6 of the UK GDPR, we must have a lawful basis for each type of personal data we process. The table below sets out what we collect, why, and the legal basis we rely on.
| Data | Purpose | Lawful Basis |
|---|
| Newsletter subscription (email, optionally name) | Intelligence briefing | Consent (Article 6(1)(a)) |
| Contact form (name, email, message) | Respond to enquiry | Legitimate interests (Article 6(1)(f)) |
| Magic Wand petition signatures (email, optionally name) | Record support, notify outcomes, demonstrate demand | Consent (Article 6(1)(a)) |
| Account and customer data (name, email, delivery address, phone) | Fulfil orders, manage account | Contractual necessity (Article 6(1)(b)) |
| Analytics data (pages visited, time, location, device) | Understand site usage | Consent (Article 6(1)(a)) |
| Report engagement (views, likes, dislikes) | Improve reports | Legitimate interests (Article 6(1)(f)) |
4. Cookies and Similar Technologies
We use cookies and local storage in accordance with PECR and ICO Cookie Guidance. We ask for your consent before placing any non-essential cookies.
| Cookie | Provider | Purpose | Duration | Category |
|---|
| yan_cookie_consent | YAN (localStorage) | Cookie preferences | Persistent | Essential |
| yan_customer_session | YAN | Login session | 30 days | Essential |
| yan_cart_id | YAN | Shopping basket | Session | Essential |
| _ga | Google Analytics | Unique visitors | 2 years | Analytics |
| _gid | Google Analytics | Unique visitors | 24 hours | Analytics |
| Meta Pixel cookies (_fbp, _fbc) | Meta Platforms, Inc. | Advertising | 90 days | Marketing |
| Clarity cookies (_clck, _clsk, MUID, ANONCHK, SM) | Microsoft Corporation | Usability analysis | Up to 12 months | Analytics |
Essential cookies do not require consent. Analytics and marketing cookies are only placed with your consent. You can manage your preferences at any time via the "Cookie Settings" link in our footer. For full details, see our Cookie Policy.
- Google Analytics (Google LLC) — website analytics, consent required. Google Privacy Policy
- Meta Pixel (Meta Platforms, Inc.) — advertising measurement, consent required, if enabled. Meta Privacy Policy
- Microsoft Clarity (Microsoft Corporation) — session recording, consent required, if enabled. Microsoft Privacy Statement
- SendPulse (SendPulse Inc.) — email delivery. SendPulse Privacy Policy
- Hetzner (Hetzner Online GmbH) — hosting. Hetzner Privacy Policy
6. International Data Transfers
| Service | Location | Safeguard |
|---|
| Google Analytics | United States | UK-US Data Bridge and SCCs |
| Meta Pixel | United States | UK-US Data Bridge and SCCs |
| Microsoft Clarity | United States | SCCs |
| SendPulse | United States / other | SCCs |
| Hetzner | Germany (EEA) | UK adequacy decision for EEA |
Where we rely on SCCs, these are approved by the ICO under the UK IDTA or EU SCCs with UK addendum.
- Newsletter: until you unsubscribe
- Contact form: 2 years or until resolved
- Petition signatures: duration of the petition plus 12 months
- Account and customer data: while your account is active plus 6 years after your last purchase
- Analytics: 14 months (Google Analytics), 13 months (Microsoft Clarity), Meta per their retention policy
- Report engagement: aggregated indefinitely
8. Your Rights Under the UK GDPR
You have the following rights under the UK GDPR:
- Access (Article 15) — request a copy of the personal data we hold about you
- Rectification (Article 16) — request correction of inaccurate data
- Erasure (Article 17) — request deletion of your personal data
- Restriction (Article 18) — request restriction of processing
- Data portability (Article 20) — request your data in a portable format
- Object (Article 21) — object to processing of your personal data
- Withdraw consent — withdraw consent at any time where we rely on consent
To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.
9. Right to Complain
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. ICO helpline: 0303 123 1113.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmission is encrypted using HTTPS/TLS.
11. Children's Privacy
We do not knowingly collect personal data from children under 16. Our website is not directed at children. If you believe we have collected data from a child, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be posted on our website. We encourage you to review this policy periodically.