Privacy Policy

1. Who is responsible for your data

The data controller is:

This policy applies when you visit this website, submit a distributor or business inquiry, communicate with us, or otherwise interact with SOTI Natural online.

2. Personal data we collect

Depending on how you use the website, we may process the following types of personal data:

• Identity and contact data: first name, last name, email address and phone number.
• Business data: company name, country or market, company website or social profile, business type, products distributed, retail chains supplied and annual revenue range.
• Inquiry data: information you provide when contacting us or asking about a distribution partnership.
• Technical data: IP address, browser and device information, page URL and similar technical information generated when you use the website.
• Traffic and attribution data: campaign parameters such as UTM values, click identifiers and information about how you arrived on the website.
• Cookie and consent data: your choices about analytics and marketing technologies.

3. How we collect your data

We collect personal data in three main ways:

• Directly from you when you complete a form, email us, speak with us or otherwise provide information.
• Automatically when you use the website, through necessary technical storage and, where you consent, analytics or marketing technologies.
• Through service providers that help us operate the website, process inquiries, manage customer relationships or provide embedded content.

4. Why we use your data and the legal basis

• To respond to inquiries and assess potential distribution partnerships: based on steps taken at your request before entering into a contract and our legitimate interest in managing business inquiries.
• To communicate with you about a submitted inquiry: based on your request, our legitimate interests, and where required, your consent.
• To operate and secure the website: based on our legitimate interest in keeping the website functional, safe and reliable.
• To comply with legal, tax, accounting or regulatory duties: based on legal obligations.
• To measure website usage and marketing performance: based on your consent where non-essential cookies or similar technologies are required.
• To show third-party social media content: based on your marketing consent where the third-party embed can place or read non-essential technologies.

5. Cookies and similar technologies

Necessary storage may be used so the website and your consent choices work correctly. Analytics and marketing technologies are optional and remain disabled until you choose to allow them through our cookie banner.

The website currently uses Google Tag Manager to control analytics or marketing tags and TikTok embeds for social video content. TikTok embed scripts are loaded only after marketing consent is granted.

You can accept all optional technologies, reject them, choose individual categories, or change your decision later.

6. Service providers and recipients

We may share personal data only where necessary with providers that help us operate the website and handle business inquiries. Based on the current website setup, these may include:

• GoHighLevel / LeadConnector: lead form processing, CRM and automation infrastructure.
• Google: Google Tag Manager and any analytics or advertising tags configured through it, subject to your consent where required.
• TikTok: embedded social media content, subject to marketing consent.
• Hosting, IT, professional advisers, accountants, legal advisers or authorities where this is necessary or legally required.

We do not sell your personal data.

7. International data transfers

Some technology providers may process personal data outside Poland or outside the European Economic Area. Where this happens, we use the safeguards required by GDPR, such as an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.

8. How long we keep your data

We keep personal data only for as long as necessary for the purpose for which it was collected, and longer only where required for legal, accounting, tax, dispute or record-keeping reasons.

Business inquiry data may be retained while the inquiry or commercial relationship remains active and for a reasonable period afterwards. Cookie consent records are retained so we can remember your choices until you change them or the consent version is updated.

9. Data security

We use appropriate technical and organisational safeguards intended to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people and service providers that need the information for legitimate business purposes.

10. Your GDPR rights

Subject to the conditions set by law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• request restriction of processing;
• object to processing based on legitimate interests or to direct marketing;
• receive certain data in a portable format;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of earlier processing;
• lodge a complaint with a supervisory authority.

To exercise your rights, contact [email protected]. We may need to verify your identity before completing a request.

11. Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:

You may also contact us first at [email protected] so we can try to resolve the issue directly.

12. Third-party links and embedded content

The website may link to or display content from third-party services. Those services have their own privacy practices and policies. We are not responsible for how an independent third party handles personal data after you leave our website or interact directly with that third party.

13. Children

This website is intended for business users and is not directed at children. We do not knowingly request personal data from children through our distributor inquiry process.

14. Changes to this policy

We may update this Privacy Policy when our website, services, providers or legal obligations change. The current version will be published on this page with its updated date.

If your contact details change, please let us know so we can keep relevant records accurate.