Privacy Policy

1. General Information

This Privacy Policy explains how SUPLIFY LTD (Company No. 16723622) (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website suplify-supplements.com, purchase our products, create an account, or otherwise interact with us. For the purposes of applicable data-protection law, SUPLIFY LTD is the data controller responsible for your personal data.

We process your personal data in accordance with the UK GDPR, the Data Protection Act 2018, and other applicable privacy laws. Please read this Privacy Policy together with any other privacy notices we may provide on specific occasions, so that you are fully aware of how and why we use your data.

2. Types of Personal Data We Collect

Depending on how you interact with our website and services, we may collect and process the following categories of personal data:

• Identity & Contact Data – name, company name, address, email address, and telephone number.
• Financial Data – the reference details of your bank transfer, so that we can match your payment to your order. We do not accept card payments and never collect or store card numbers.
• Transaction Data – details of purchases, invoices, returns, refunds, and payment confirmations.
• Technical Data – IP address, browser type and version, device identifiers, operating system, and time-zone settings.
• Usage Data – browsing behaviour, products viewed, clickstream data, session length, and interactions with our site.
• Account Data – login details, stored addresses, order history, favourites, reviews, and preferences.
• Marketing & Communications Data – your preferences regarding newsletters and promotional offers.
• Customer Support Data – information you provide when contacting us via forms, email, or telephone.

We also process aggregated and anonymised data for analytics, which cannot directly identify you. We do not intentionally collect special categories of data (sensitive information such as health data, religious beliefs, ethnicity, or criminal records).

3. How We Collect Your Personal Data

We may collect your personal data in the following ways:

• Direct interactions – when you register, place an order, subscribe to newsletters, or contact our support team.
• Automated technologies – through cookies and analytics tools that record how you use our website.
• Third-party sources – such as logistics companies and analytics platforms.

4. Legal Bases for Processing

We rely on the following legal grounds to process your personal data:

• Consent – when you subscribe to marketing communications or accept non-essential cookies.
• Performance of a contract – when processing is necessary to fulfil your order and provide our services.
• Legal obligations – to comply with accounting, tax, fraud-prevention, and regulatory requirements.
• Legitimate interests – to improve our services, secure our systems, and understand customer behaviour, provided these interests are not overridden by your rights.

5. Purposes of Processing

We process your personal data in order to:

• process and deliver your orders;
• confirm receipt of your payment and reconcile it against your order;
• provide and manage your account;
• deliver customer support and respond to your enquiries;
• send service notifications and important updates;
• improve and secure our website and services;
• send marketing communications, where you have consented;
• detect, investigate, and prevent fraud or misuse; and
• comply with our legal obligations.

6. Disclosure of Personal Data

We do not sell your personal data. We may share it with:

• Logistics and shipping partners – to fulfil deliveries.
• IT and hosting providers – to operate our website securely.
• Analytics and advertising partners – for performance and marketing purposes (only where you have consented).
• Professional advisers – such as lawyers, accountants, or auditors.
• Our bank – in connection with receiving and reconciling your payment.
• Authorities and regulators – when required by law, court order, or regulation.

As we accept bank transfers only, we do not use online payment processors and no payment data is shared with card networks or payment gateways.

In the event of a business reorganisation, merger, or sale, your personal data may be transferred to the new owner under equivalent safeguards.

7. International Data Transfers

Some of our service providers may be located outside the UK or EU. Where such transfers occur, we ensure your data is protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or other legally approved mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including any legal, accounting, or reporting obligations. Transaction records are retained for up to 6 years in compliance with UK tax law. Marketing data is retained until you opt out or withdraw your consent. Once your data is no longer required, it will be securely deleted or anonymised.

9. Security of Your Data

We apply appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption across our website;
• encryption of stored sensitive data;
• restricting access to personal data to authorised staff only;
• fraud monitoring and suspicious-activity alerts; and
• regular monitoring of our systems for vulnerabilities.

Because we do not process card payments, no card details are ever collected or stored on our servers. Bank transfers are made directly to our account through your own bank’s secure systems.

While we take every reasonable step to protect your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Cookies

Our website uses cookies and similar tracking technologies to:

• enable core website functionality, such as your shopping cart and login session;
• collect analytics to improve our services;
• personalise your shopping experience; and
• deliver relevant advertising, where you have consented.

You can control or disable cookies through your browser settings, and you can change your consent choices at any time using the cookie preferences link on our website. Please note that some features of the site may not function correctly if cookies are disabled. For the full list of cookies we use, see our Cookie Policy.

11. Your Rights

Under the UK GDPR, you have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure of your data (the “right to be forgotten”);
• request restriction of processing in certain circumstances;
• object to processing, including for direct marketing;
• request the transfer of your data (data portability);
• withdraw your consent at any time, where processing is based on consent; and
• lodge a complaint with a supervisory authority – in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk.

You may exercise any of these rights by contacting us using the details in Section 14. We will respond within the timeframes required by law.

12. Children’s Privacy

Our website and services are not intended for individuals under the age of 18, and we do not knowingly collect personal data from minors. If you believe we have unintentionally collected personal data from a child, please contact us and we will delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or business changes. Any updates will be posted on this page with a revised “Last updated” date. Where changes are significant, we may notify you directly.

14. Contact Information

If you have any questions or concerns about this Privacy Policy, or wish to exercise your data-protection rights, please contact us:

SUPLIFY LTD

Company number: 16723622

Registered address:
182-184 High Street North, Office 14700, London, E6 2JA, United Kingdom

Email: info@suplify-supplements.com