Privacy Policy

Who we are

Wellform Ltd is a UK registered company (company number: 07914179), operating under several trading styles including:

wellformuk.co.uk
prostaphytolonline.co.uk
helixonline.co.uk
shopvitalflex.co.uk

At Wellform Ltd, we are committed to handling your data responsibly and in accordance with the UK GDPR. This Privacy Policy outlines how we collect, use, and protect your personal information, including marketing preferences and secure payment handling.

This privacy policy applies to the trading styles under the same umbrella, listed above. Any new trading styles that may be added to the group in future will be included in this section.

Where your personal data may be processed

We are a UK based company and so we will transfer your data within the UK, which is outside of the EU. We may also need to share your personal data with third parties and suppliers outside the European Economic Area (EEA).

Protecting your data outside the UK

We may transfer personal data that we collect from you to third-party data processors in countries that are outside the UK. For example, this might be required to fulfil your order, process your payment details or provide support services. If we do this, we have procedures in place to ensure your data receives the same protection as if it were being processed in the UK. For example, our contracts with third parties stipulate the standards they must always follow. If you wish for more information about these contracts, please contact our Data Protection Officer using the details listed in our Contact Us section. Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.

Information We Collect and Use

To fulfil your order/enquiry, we may need to collect the following information directly from you

Your name
Your billing address
Your delivery address
Your date of birth (when buying items with legal age restrictions)
Your email address
Your contact telephone number(s)
Your payment card details (please note that these are not stored anywhere on our system and only used to process the payment for your order)

We collect data to:

Process your order and fulfil contractual obligations
Enhance and personalise your customer experience
Conduct fraud checks and verify identity
Measure the performance of campaigns and improve services
Send marketing communications, subject to your preferences

Data is collected when you place an order, interact with our sites, contact centres or marketing communications, or join our club or rewards services.

The information held on our database is used to process any orders to be delivered to your home, to record and store your details and marketing preferences, to arrange returns and store sales transaction data.

Sometimes we need your personal data to comply with our contractual obligations (for example, if you order an item from us online, we’ll collect your address details and pass your details to our courier so they can deliver your order.

If the law requires us to, we may need to collect and process your data for example, we can pass on details of people involved in fraud or other criminal activity to law enforcement.

In specific situations, we need to use your data to meet the legitimate interests of our business in a way which might reasonably be expected as part of running our business, and which does not materially impact your rights, freedom, or interests. For example, we will use your purchase history to send you personalised offers. We will also send you marketing emails and direct mail when you shop with us and we may introduce offers from other DRMG trading styles unless you choose to opt-out.

Marketing Preferences

We may contact you by post, telephone, email or SMS with offers and promotions related to the trading style you interacted with. You may also receive postal offers from trusted third parties unless you choose to opt out.

We do not share your data with third parties for telephone or email marketing.
You may, however, see a special offer introduced by the trading style you shopped or signed up with. E.g. If you are signed up to one our brand’s emails and we are running a travel feature we may include in that email a holiday offer that we have secured from a travel company.

We will always include an unsubscribe link in all marketing emails so you can be removed from future broadcasts for that trading style.

We combine activities from across our trading styles to understand who is shopping with us, across which trading styles and whether there are any patterns in this information that may mean you might want to shop with us again. We use statistical methods in our analysis to send the right offer to our customers in a timely manner.

You can update or withdraw your preferences at any time by contacting us or using the options provided in our communications or by using the contact details within this Privacy Policy.

Tokenisation and Secure Payments

Wellform Ltd uses checkout.com, a PCI DSS-compliant third-party payment processor, to handle all card transactions. We do not store your full card details on our own servers.

With your consent, checkout.com may generate a secure tokenised version of your card, which allows us to process follow-up offers, trials or club sign-ups associated with the same trading style.

This token cannot be used across different trading styles without additional, informed customer consent.

You may withdraw your consent for token reuse at any time by contacting our Data Compliance team.

To view the checkout.com Privacy Policy, please visit www.checkout.com/legal/privacy-policy

Sharing Data with Partners

We may share your data with carefully selected partners for the following purposes:

Postal marketing (unless you have opted out)
Identity validation, risk management and compliance checks
Market research and customer modelling (e.g. via Experian, Epsilon Abacus)

When you register with us, create an account or place an order, your postal data may be shared with trusted third parties in retail, lifestyle, charity, and financial sectors unless you tell us not to. You can opt out of this data sharing at any time by ticking the relevant box at checkout or on the registration form, or by contacting us directly using the contact details provided in this Privacy Policy.

We do not share your data with third parties for telephone, email or SMS marketing.

Third-party partners may include:

Retailers/Mail Order
Automotive
Fashion/Clothing
Household
Gardening
Gifts
Beauty
Collectibles
Food & Wine
Gadgets

Charities

Animal welfare
Arts & Culture
Children’s charities
Community support
Disability aid
Environmental
Elderly care
Emergency air ambulances
Health and medical research
Heritage and conservation
Housing
Overseas development
Veterans and armed forces support

Lifestyle

Health & Wellbeing
Leisure
Outdoor Activities
Entertainment
Home Interiors
Funeral Plans

Finance

Insurance (home, car, pet, personal)
Banking
Pensions
Investments
Claims/Legal Services (including Waterloo Solutions trading as Uclaim4Me)

Travel

Holidays
Hotels
Airlines
Travel Booking

Supporting Trustworthy Charities

We believe we have a legitimate interest to support the charity sector, both large and small organisations and ensure your information is kept under strict control, used only for postal direct marketing campaigns.

The UK charity sector relies on postal appeals as a cost-effective fundraising method.

You remain in control of your information. We will stop sharing your postal data if you request it. See the “Your Rights” section below for contact details.

Data Cooperatives

We may share your name, address, and details about what you’ve ordered from us with our data cooperative partners that use personal data for their own marketing purpose. Our partners are Abacus (“Epsilon”) and Experian. These partners manage prospect pools on behalf of UK retailers. Epsilon (registered as Epsilon International UK Ltd) is a company that manages the Abacus Alliance on behalf of UK retailers and charities. The participating retailers are active in the clothing, collectables, food & wine, gardening, gadgets & entertainment, health & beauty, household goods, home interiors and travel categories. Our partners analyse information about what our customers buy to help us understand your buying patterns. This helps us plan what we send you, based on what you like to buy. They also help us to ensure that you don’t hear from us if you don’t want to therefore if you’ve told us that you don’t want to receive another catalogue from us, we’ll share your information with them to ensure you’re added to a suppression list. In addition, the partners analyse what sort of products might interest you and pass your name and address to companies whose products are likely to appeal to you. You can opt out of your name, address and details about what you’ve ordered from being passed to other companies at any time by contacting us using the details provided in this Privacy Policy, you may also contact Epsilon and/or Experian using the details provided below.

• Epsilon : https://abacus.epsilon.com/services-privacy-policy/
• Email nomail@epsilon.com

• Experian : https://www.experian.co.uk/privacy/consumer-information-portal/
• Email customerservices@uk.experian.com

Please note that Epsilon Abacus may transfer data outside the EEA. Any such transfers are conducted with appropriate safeguards, including standard contractual clauses approved by the EU Commission.

Call Monitoring

We may randomly monitor and record your calls to ensure the highest level of customer service and to maintain quality standards. Your information may also be shared with agents, service providers and employees to carry out services on our behalf.

Marketing Service Providers

We may share your data with Marketing Services Providers listed below, who use it for direct marketing, research, and profiling. This may include combining your data with other sources to create predictive models that help organisations better tailor their marketing.

Such activity may result in:

Receiving tailored advertising by post or online
Improved relevance of marketing communications
Verified and corrected personal information

We rely on “legitimate interest” as our lawful basis for this processing.

To learn more or opt out, visit the provider’s privacy page:

Experian Ltd – https://www.experian.co.uk/privacy/consumer-information-portal/

How Long do we keep your data for?

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including any legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Rights

You have the right to:

Right to be informed:
Right of access:
Right to rectification:
Right to erasure:
Right to restrict processing:
Right to data portability:
Right to object:
Rights related to automated decision-making
Lodge a complaint with the ICO

To exercise any of these rights, email: enquiries@wellformuk.co.uk or write to the Data Protection Officer at: DRMG House, Sittingbourne, Kent, ME10 3US

The supervisory authority for data protection in the UK is the Information Commissioner’s Office (ICO) which you can contact on 0303 123 1113 or via their website at ico.org.uk.

In The Event of Sale

In the event that our business assets are sold to another company all of our data may be sold as part of our business.

Changes to This Policy

We may update this policy from time to time. This version was last updated in July 2025.

If you should have any further questions or queries relating to the use or processing of your personal data, then please write to:

Data Protection Officer
DRMG House,
Sittingbourne,
Kent,
ME10 3US

or email: enquiries@wellformuk.co.uk

Wellform Ltd is a company registered in England and Wales.
Company registered number: 07914179
Registered address: DRMG House, Sittingbourne, Kent, ME10 3US