Privacy policy

Privacy Policy

Metabolique ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit metabolique.co.uk or make a purchase from us.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller:
Metabolique, Trading name of [GoodHeathUK]
Registered in England and Wales
Company No: [45782169]
Email: [Metabolique@gmail.com]
Website: metabolique.co.uk

2. What Data We Collect

We collect the following personal data when you interact with us:

When you place an order:

  • Name, email address, phone number
  • Billing and shipping address
  • Payment information (processed securely — we do not store card details)
  • Order history and purchase details

When you browse our website:

  • IP address and device/browser information
  • Pages visited, time spent, referral source
  • Cookies and similar tracking technologies (see Section 7)

When you contact us:

  • Name, email address, and the contents of your message

When you subscribe to marketing:

  • Email address and marketing preferences

3. How We Use Your Data

We use your personal data for the following purposes:

  • Processing and fulfilling your order — Performance of a contract
  • Sending order confirmations and shipping updates — Performance of a contract
  • Providing customer support — Legitimate interests
  • Preventing fraud and ensuring payment security — Legitimate interests / Legal obligation
  • Sending marketing emails (if opted in) — Consent
  • Improving our website and user experience — Legitimate interests
  • Complying with legal obligations — Legal obligation

4. Who We Share Your Data With

We share your data only where necessary, with trusted third parties who help us run our business:

  • Shopify — our e-commerce platform (processes orders and stores customer data). Shopify Privacy Policy
  • Payment processors (e.g. Stripe, PayPal) — to securely process transactions
  • Shipping and fulfilment partners — to deliver your order
  • Email marketing platforms (e.g. Klaviyo / Mailchimp) — to send transactional and marketing emails
  • Analytics providers (e.g. Google Analytics, Meta/Facebook Pixel) — to understand website traffic and ad performance
  • Legal/regulatory authorities — where required by law

We do not sell your personal data to third parties.

5. International Data Transfers

Some of our service providers operate outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as Standard Contractual Clauses or adequacy decisions.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

  • Order records: 7 years (UK tax and legal compliance)
  • Customer accounts: Until account deletion is requested
  • Marketing email lists: Until you unsubscribe or withdraw consent
  • Website analytics: As per the third-party provider's retention policy (typically 14–26 months)

7. Cookies

We use cookies and similar technologies to improve your experience on our site. These include:

  • Essential cookies — required for the site to function (e.g. shopping cart, checkout)
  • Analytics cookies — help us understand how visitors use the site (e.g. Google Analytics)
  • Marketing cookies — used to show you relevant ads (e.g. Meta Pixel, Google Ads)

You can manage or disable cookies through your browser settings. Disabling cookies may affect some site functionality.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right to access — request a copy of the data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your data ("right to be forgotten")
  • Right to restrict processing — request that we limit how we use your data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at [Metabolique@gmail.com]. We will respond within 30 days.

9. Marketing Communications

If you opted in to receive marketing emails, we'll send you updates about products, offers, and news. You can unsubscribe at any time by clicking the unsubscribe link in any email, or by emailing [Metabolique@gmail.com].

We will never send you marketing emails without your consent.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses SSL encryption, and payment data is handled exclusively by PCI-DSS compliant payment processors.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you review their individual policies.

12. Changes to This Policy

We may update this policy from time to time. When we do, we'll revise the "last updated" date at the top. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact & Complaints

For any privacy-related queries, contact us at:
Email: [Metabolique@gmail.com]

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113