Privacy Policy

Last updated October 20, 2026

This policy explains how Must Be Cotton (“we”, “us”), operated by Must Be Cotton, handles information when you visit mustbecotton.com.

Information we collect

Server and security logs. Our hosting and network provider (Cloudflare) processes technical data such as IP address, browser type and pages requested in order to deliver the site and protect it from abuse.
Analytics. We may use privacy-respecting analytics (such as Cloudflare Web Analytics) and/or Google Analytics 4 to understand which pages are useful. These tools may use cookies or similar technologies and collect information such as approximate location, device type and pages viewed.
Newsletter sign-ups. If you join our newsletter, we collect your email address, the date and time you signed up, the page you signed up on, and a record that you ticked the consent box (see Newsletter below).
Emails you send us. If you contact us, we keep your message and email address to reply.

We do not sell your personal information, and we do not ask you to create an account. The only personal information we actively collect is your email address, if you choose to join the newsletter.

What we store: your email address, the sign-up date and time, the page you signed up on, and the wording of the consent you agreed to. We don't store your name or IP address with your sign-up.
Why (legal basis): your consent, which you give by ticking the box on the sign-up form. We use your email address only to send you the Must Be Cotton newsletter (new verified 100% cotton products and research summaries, about twice a month).
Where it's stored: in a database run by Cloudflare, Inc., our hosting provider, which processes it on our behalf. Cloudflare may process data outside the UK and EU under its standard data-protection safeguards.
Who sees it: only us and our hosting provider. We never sell, rent or share your email address with advertisers, brands or affiliate partners.
How long we keep it: until you unsubscribe, or until we stop sending the newsletter. Then we delete it.
Unsubscribing: reply to any newsletter or email [email protected] and we'll remove you promptly. You can withdraw consent at any time.
Your rights: under UK GDPR and EU GDPR you can ask us for a copy of your data, or to correct or delete it, by emailing us. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data-protection authority.

Affiliate links and cookies set by others

When you click an affiliate link, you leave our site. The retailer or affiliate network (for example FlexOffers, Impact, ShopMy or Amazon, if we join their programs) may set cookies to record that you came from us. Their privacy policies, not ours, govern that data.

Advertising

We don’t show display ads today. If we add them later, ad partners may use cookies to show and measure ads, and we will update this policy and provide any required consent tools before ads go live.

Your choices

You can block or delete cookies in your browser settings.
You can opt out of Google Analytics with Google’s browser add-on.
Depending on where you live (for example California, or the EU/UK), you may have rights to access, correct or delete personal information. Email us to make a request.

Children

This site is intended for adults and isn’t directed to children under 13. We don’t knowingly collect information from children.

Changes and contact

We’ll post any changes here with a new “last updated” date. Questions: [email protected].