Skip to main content
You're A Natural
SIGN IN

Privacy Policy

Last updated: 23 July 2026

1. Who We Are

You're A Natural (youreanatural.com) is an AI-powered consumer intelligence platform operated by Palm & Pine Living Limited, a company registered in England and Wales (company number 16983434). Our registered office is 3/26 Craven Street, London WC2N 5NT.

We use artificial intelligence to cross-reference regulatory frameworks, scientific evidence, and publicly observable product information. We publish Insight Reports that map information gaps between what standards require, what science demonstrates, and what product labels claim. We also operate a marketplace for curated sustainable products and run Magic Wand petitions for systemic change.

Contact: [email protected]

Research and corrections: [email protected]

2. About This Policy

This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website. It is made under the UK General Data Protection Regulation (UK GDPR) as retained under the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

Palm & Pine Living Limited is the data controller for the personal data described in this policy.

3. What Data We Collect and Our Lawful Basis

Under Article 6 of the UK GDPR, we must have a lawful basis for each type of personal data we process. The table below sets out what we collect, why, and the legal basis we rely on.

DataPurposeLawful Basis
Newsletter subscription (email, optionally name)Intelligence briefingConsent (Article 6(1)(a))
Contact form (name, email, message)Respond to enquiryLegitimate interests (Article 6(1)(f))
Magic Wand petition signatures (email, optionally name)Record support, notify outcomes, demonstrate demandConsent (Article 6(1)(a))
Account and customer data (name, email, delivery address, phone)Fulfil orders, manage accountContractual necessity (Article 6(1)(b))
Analytics data (pages visited, time, location, device)Understand site usageConsent (Article 6(1)(a))
First-party site analytics (page order, scroll depth, section and call-to-action interactions, referrer domain and path, campaign tags, device category, and an anonymous same-visit identifier)Understand on-site journeys and improve the websiteLegitimate interests (Article 6(1)(f)); device storage under the DUAA 2025 statistical exception to PECR Regulation 6, with an opt-out available
Report engagement (views, likes, dislikes)Improve reportsLegitimate interests (Article 6(1)(f))

4. Cookies and Similar Technologies

We use cookies and similar technologies, including localStorage and sessionStorage, in accordance with PECR and ICO storage-and-access guidance. We ask for consent before using non-essential third-party analytics or marketing technologies. Our first-party site analytics use a statistical exception under PECR, remain available by default, and can be turned off at any time in Cookie Settings.

Our first-party analytics measure pages viewed in order, scroll depth, section views, call-to-action clicks, referrer domain and path without query strings, campaign and UTM tags, and device category. To count one visit as one visit, we store a random anonymous identifier in sessionStorage for that browser tab. We do not collect a name, email address, IP address, payment data, or raw advertising click identifiers through this layer. We do not use it for advertising, share it with third parties, or track anyone across sites, devices, or browser tabs. The records are pseudonymous and are not linked to an account or identity. You can turn Privacy-first Analytics off in Cookie Settings; doing so removes the identifier and stops collection.

Cookies and Similar Technologies Inventory

Storage NameProviderPurposeDurationCategory
yan_cookie_consentYAN (localStorage)Cookie preferencesPersistentEssential
yan_customer_sessionYANLogin session30 daysEssential
yan_cart_idYANShopping basketSessionEssential
yan_first_party_journey_sessionyoureanatural.com (sessionStorage)Anonymous same-visit journey measurementSession (tab close, or 30 minutes idle)Analytics — first-party, exempt (no consent required), opt-out available
_gaGoogle AnalyticsUnique visitors2 yearsAnalytics
_gidGoogle AnalyticsUnique visitors24 hoursAnalytics
Meta Pixel cookies (_fbp, _fbc)Meta Platforms, Inc.Advertising90 daysMarketing
Clarity cookies (_clck, _clsk, MUID, ANONCHK, SM)Microsoft CorporationUsability analysisUp to 12 monthsAnalytics

Essential storage does not require consent. First-party site analytics are used under the PECR statistical exception and remain subject to a free opt-out. Third-party analytics and marketing technologies are only used with your consent. You can manage all preferences at any time via the "Cookie Settings" link in our footer. For full details, see our Cookie Policy.

5. Third-Party Services

6. International Data Transfers

ServiceLocationSafeguard
Google AnalyticsUnited StatesUK-US Data Bridge and SCCs
Meta PixelUnited StatesUK-US Data Bridge and SCCs
Microsoft ClarityUnited StatesSCCs
SendPulseUnited States / otherSCCs
HetznerGermany (EEA)UK adequacy decision for EEA

Where we rely on SCCs, these are approved by the ICO under the UK IDTA or EU SCCs with UK addendum.

7. Data Retention

  • Newsletter: until you unsubscribe
  • Contact form: 2 years or until resolved
  • Petition signatures: duration of the petition plus 12 months
  • Account and customer data: while your account is active plus 6 years after your last purchase
  • First-party site analytics (arrivals and journey records): 30 days
  • Analytics: 14 months (Google Analytics), 13 months (Microsoft Clarity), Meta per their retention policy
  • Report engagement: aggregated indefinitely

8. Your Rights Under the UK GDPR

You have the following rights under the UK GDPR:

  • Access (Article 15) — request a copy of the personal data we hold about you
  • Rectification (Article 16) — request correction of inaccurate data
  • Erasure (Article 17) — request deletion of your personal data
  • Restriction (Article 18) — request restriction of processing
  • Data portability (Article 20) — request your data in a portable format
  • Object (Article 21) — object to processing of your personal data
  • Withdraw consent — withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

9. Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. ICO helpline: 0303 123 1113.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmission is encrypted using HTTPS/TLS.

11. Children's Privacy

We do not knowingly collect personal data from children under 16. Our website is not directed at children. If you believe we have collected data from a child, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be posted on our website. We encourage you to review this policy periodically.