Privacy policy
Last updated: 6 November 2026
SAMA Wellbeing respects your privacy and is committed to handling personal information transparently and in accordance with applicable data protection law, including the EU General Data Protection Regulation (GDPR).
This policy explains how personal data is collected, used, shared and protected when you visit www.sama-wellbeing.com, place an order or communicate with us.
Who we are
The business responsible for personal data collected for SAMA Wellbeing's own purposes is Copper & Cedar Ltd (Company No. C 114539), trading as SAMA Wellbeing, 23 Triq Felic Borg, San Gwann SGN 2043, Malta.
Email: hello@sama-wellbeing.com
Telephone: +44 7488 847890
Personal information we collect
Depending on how you interact with our website, we may collect: your name, email address and telephone number; billing and delivery addresses; order details, purchase history and customer-service correspondence; payment-related information processed through our payment providers; technical information such as IP address, device information, browser type and website usage; marketing preferences and newsletter subscriptions; and information you voluntarily provide when contacting us.
We do not require you to provide sensitive personal information to purchase our physical wellness products.
How we use personal information
Processing and fulfilling orders (performance of a contract): to accept payments, arrange delivery, communicate about orders and provide customer support.
Accounting and legal compliance (legal obligation): to maintain required business, tax and transaction records and meet applicable legal obligations.
Customer service, fraud prevention and website security (legitimate interests or legal obligations, as applicable): to respond to enquiries, protect our business and customers, and maintain a secure service.
Marketing communications (consent or another applicable lawful basis): to send promotional emails where legally permitted. You may unsubscribe from marketing emails at any time.
Analytics and optional website technologies (consent where required): to understand website performance and improve the shopping experience, subject to applicable cookie and privacy rules.
Shopify and service providers
Our online store is powered by Shopify. Personal information may be processed by Shopify and by service providers supporting payment processing, order fulfilment, delivery, customer communications, website hosting and other essential business operations. These providers may process information only as permitted under their applicable roles, contracts and legal obligations.
Cookies and tracking technologies
Our website may use cookies and similar technologies for essential functions such as maintaining your shopping cart, securing checkout and remembering preferences. Optional analytics, advertising or other non-essential tracking technologies will be used in accordance with applicable consent requirements. Where consent is required, you should be able to make an informed choice and withdraw or change that choice.
International data transfers
Some service providers may process personal information outside Malta or the European Economic Area. Where the GDPR requires safeguards for international transfers, we will rely on an applicable lawful transfer mechanism, such as an adequacy decision or appropriate contractual safeguards. You may contact us for further information about applicable safeguards.
How long we retain personal information
We retain personal information only for as long as necessary for the purposes for which it was collected, including order fulfilment, customer support, applicable accounting and tax obligations, dispute resolution and legal compliance. Marketing information is retained until consent is withdrawn or the information is no longer needed, subject to any applicable legal requirements.
Your data protection rights
Subject to applicable law, you may have the right to access your personal information, request correction of inaccurate information, request deletion, restrict or object to certain processing, receive certain personal data in a portable format, withdraw consent where processing relies on consent, and lodge a complaint with the relevant data protection supervisory authority. In Malta, the supervisory authority is the Office of the Information and Data Protection Commissioner.
To exercise your rights, contact hello@sama-wellbeing.com.
Marketing preferences
If you subscribe to marketing communications, you may unsubscribe using the link provided in promotional emails or by contacting us directly. Unsubscribing from marketing does not prevent us from sending essential order-related communications.
Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. No internet-based service can guarantee absolute security.
Children
Our website is intended for customers who are legally able to enter into purchases. We do not knowingly seek to collect personal information from children for independent purchasing or marketing purposes.
Changes to this policy
We may update this Privacy Policy to reflect changes to our operations, service providers or legal requirements. The latest version will be published on this website with an updated revision date.
Contact
Copper & Cedar Ltd, trading as SAMA Wellbeing
23 Triq Felic Borg, San Gwann SGN 2043, Malta
hello@sama-wellbeing.com
+44 7488 847890