Legal & customer care
Privacy Policy
This policy explains what personal information we collect when you visit worthymolecules.com, reserve or buy Core49, or contact us. It also covers how we use it, who we share it with, and your rights. We collect only what we need to run your subscription and tell you about Worthy Molecules, and we never sell your data. Last updated: 30 October 2026.
Pre-launch information. Final policies must be approved before orders are accepted.
Worthy Molecules
1. Who we are
Worthy Molecules Labs Ltd is the controller of your personal information, meaning we decide how it’s used. We are registered in England and Wales under company number 17281203, with our registered office at 61 Grosvenor Street, London W1K 3JE, United Kingdom. We are registered with the Information Commissioner’s Office (ICO) under number C2073730.
Our parent company, Worthy Molecules Limited, is registered in Ireland. It acts as our representative in the European Union for data protection, so EU customers can contact it at 18 Mallow Street, Limerick V94 N12Y, Ireland.
For any privacy question or request, email hello@worthymolecules.com or write to us at the address above.
2. What we collect
Information you give us
- Contact and account details: your name, email address, phone number, delivery and billing addresses, and your account login.
- Order and subscription details: what you’ve bought or reserved, your plan, delivery dates, skips, pauses, cancellations, returns and refunds.
- Payment details: our payment provider, Stripe, handles your card details. We see only the card type, its last four digits and its expiry date, never the full number.
- Messages: emails, chats, reviews, survey answers and feedback you send us, including from product trials.
- Marketing choices: whether you’ve agreed to hear from us, and how.
- Partner or referral link: if you join through one, which partner or member referred you.
Information we collect automatically
- Device and usage data: IP address, browser and device type, pages viewed, and how you arrived at our website, collected through cookies and similar technologies (section 6).
- Email engagement: whether you open our emails and click their links, if you’ve agreed to this.
Health information
We don’t ask for health information to sell you Core49. Sometimes you might choose to share it, for example by telling customer service about a reaction, or describing how you feel during a product trial. Health information is a special category of data, so we use it only to deal with your message (including any safety report we must make) or, with your explicit consent, to improve our products. We keep it separate from our marketing.
3. How we use your information
| What we do | Why we’re allowed to (legal basis) |
|---|---|
| Take pre-launch reservations and run the founding member counter | To perform our contract with you |
| Process orders and subscriptions, take payments, deliver your bags and welcome box, and handle returns and refunds | To perform our contract with you |
| Send service emails: order confirmations, dispatch and tracking, reminders before each subscription charge, and changes to prices or terms | To perform our contract with you, and our legal obligations under subscription and consumer law |
| Complete customs forms and pay import duties for deliveries outside the UK | To perform our contract with you, and our legal obligations |
| Keep accounting and tax records, and handle legal claims | Our legal obligations, and our legitimate interests |
| Answer your questions and complaints | To perform our contract with you, and our legitimate interests |
| Record and report product safety issues | Our legal obligations; for health information, explicit consent or public interest in public health |
| Send marketing emails and texts | Your consent. For existing customers, we may email about similar products under the “soft opt-in” rule, and you can opt out at any time |
| Show you our ads on social media and other websites, and measure how well they work | Your consent, given through our cookie banner |
| Understand how our website is used and improve it, our products and our service | Our legitimate interests; your consent where cookies are involved |
| Track partner and referral sign-ups, and pay partners their commission | Our legitimate interests, and to perform our contract with you (partner pricing) |
| Prevent fraud and keep our website and systems secure | Our legitimate interests, and our legal obligations |
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for more detail.
4. Marketing
We will only send marketing emails or texts if you have opted in, or if you are a customer and we are telling you about similar products (you can opt out at any time). Every marketing email has an unsubscribe link, and you can also change your preferences in your account or by emailing us. Unsubscribing doesn’t affect service emails about your orders and subscription.
If you’ve accepted advertising cookies, we may use what we know about your visit to show you our ads on social media and elsewhere. With your consent, we may also share a scrambled (hashed) version of your email address with advertising platforms such as Meta and Google, to reach you or people like you.
5. Who we share it with
We share personal information only with companies that help us run Worthy Molecules, and only what they need. They must keep it secure and use it only on our instructions. These include:
- Payment providers, and shipping and fulfilment partners
- Review platforms, and affiliate and referral partners
- Email and marketing platforms, and customer support tools
- Subscription management tools, and website and e-commerce platform providers
- Fraud prevention and security providers, and delivery carriers
- Customs and import authorities
- Analytics and advertising providers
- Our group company, professional advisers, authorities, and a buyer of our business
6. Cookies
Cookies are small files stored on your device. We use:
- Essential cookies: needed for the website, your basket and checkout to work. These are always on.
- Analytics cookies: tell us how the website is used, so we can improve it.
- Advertising cookies: let us and our advertising partners show you relevant ads and measure them.
Apart from essential cookies, we only set cookies once you’ve agreed through our cookie banner. You can change your choices at any time through the cookie settings at the bottom of every page. A full list of cookies is in our Cookie Policy.
7. Transfers outside the UK
Some of our suppliers, such as Stripe, Klaviyo, Meta and Google, are based in the United States or store data there. Our group company is in Ireland. When your information leaves the UK, we make sure it is protected by one of the following:
- a UK adequacy decision, which covers transfers to the EU, including Ireland;
- the UK-US Data Bridge, for US companies certified under it; or
- the UK’s International Data Transfer Agreement or Addendum, with additional safeguards where needed.
You can ask us for details of the safeguards for a particular transfer.
8. How long we keep it
| Information | How long |
|---|---|
| Orders, payments and invoices | 6 years after the end of the financial year, as UK tax law requires |
| Your account | While it is open, plus 2 years after your last order or login, then deleted or anonymised |
| Pre-launch waitlist sign-ups that don’t go on to buy | Until 12 months after launch |
| Customer service messages | 2 years after the conversation ends |
| Product safety reports | As long as the law requires |
| Marketing preferences | Until you unsubscribe, plus a suppression record so we don’t email you again |
| Cookie data | As set out in the cookie banner, up to 13 months |
9. Keeping it safe
We use trusted providers with strong security, encrypted connections (HTTPS), and access limited to the people who need it. Card payments are handled by Stripe, which meets the industry security standard (PCI DSS). If a breach is likely to put your rights at risk, we will tell you and the ICO as the law requires.
10. Your rights
You have the right to:
- access the personal information we hold about you;
- correct anything inaccurate or incomplete;
- delete your information, where we have no legal reason to keep it;
- restrict how we use it while a concern is looked into;
- object to how we use it for our legitimate interests, and to direct marketing, at any time;
- portability: receive the information you gave us in a common format, or have it sent to another company; and
- withdraw consent at any time, wherever we rely on it.
To use any of these rights, email privacy@worthymolecules.com. It’s free, and we will reply within one month, or tell you if we need longer for a complicated request. We may ask you to confirm your identity first.
11. Children
Our website and products are for adults. We don’t knowingly collect information from anyone under 18. If you think a child has given us their details, contact us and we will delete them.
12. Complaints
If you’re unhappy with how we’ve used your information, please contact us first at hello@worthymolecules.com and we will look into it and reply. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). If you live in the EU, you can complain to your national data protection authority; in Ireland, that’s the Data Protection Commission.
13. Changes to this policy
We may update this policy, for example when we add a new supplier or feature. We will post the new version here with its date, and email you if a change significantly affects how we use your information.
