1. Who We Are
This Privacy Policy explains how Nutrisport (“we“, “us“, “our“) collects, uses, and protects your personal data when you visit [www.nutrisport.co.uk] (the “Site“) or place an order with us.
We are the “data controller” of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- Company name: Nutrisport
- Company number: 03766636
- Registered address: Great George Street,Wigan WN3 4DL
- Contact email: info@nutrisport.co.uk
- Data Protection lead: xxx
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. What Personal Data We Collect
Depending on how you interact with the Site, we may collect:
- Account and order data: name, delivery address, billing address, email address, phone number, order history, and payment confirmation details (we do not store full card numbers — these are handled by our payment processor).
- Marketing data: your email address and marketing preferences, if you sign up to our newsletter or mailing list.
- Technical and usage data: IP address, browser type and version, device information, pages viewed, time spent on the Site, referral source, and general location (country/city level), collected automatically via cookies and similar technologies.
- Communications: any information you provide when you contact us, e.g. via email, contact form, or customer service enquiry.
We do not knowingly collect personal data from anyone under the age of 18, in line with Section 3 of our Terms and Conditions.
3. How We Use Your Personal Data
We use your personal data for the following purposes, and on the following legal bases under UK GDPR:
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, including payment and customer service | Performance of a contract |
| Sending order confirmations, delivery updates, and responding to enquiries | Performance of a contract / legitimate interests |
| Sending marketing emails and promotional offers (e.g. via Mailchimp) | Consent (you can withdraw this at any time) |
| Understanding how visitors use the Site, improving performance and content (e.g. via Google Analytics) | Legitimate interests / consent (via cookie banner) |
| Monitoring and improving our Site’s presence and performance in search results (e.g. via Google Search Console) | Legitimate interests |
| Preventing fraud and complying with legal obligations (e.g. tax and accounting records) | Legal obligation / legitimate interests |
4. Cookies and Similar Technologies
4.1 The Site uses cookies and similar tracking technologies to operate correctly, remember your preferences, and understand how visitors use the Site. When you first visit the Site, you will be asked to consent to non-essential cookies via our cookie banner. You can change your preferences at any time through [the cookie settings link/tool] or via your browser settings.
4.2 The main categories of cookies we use are:
- Strictly necessary cookies – required for the Site to function (e.g. keeping items in your basket, remembering you’re logged in). These do not require consent.
- Analytics cookies – used by Google Analytics to help us understand how visitors use the Site (see Section 5).
- Functional/marketing cookies – used by tools such as Mailchimp to recognise returning subscribers and measure email campaign performance (see Section 6).
4.3 You can disable cookies through your browser settings, but doing so may affect how the Site functions.
5. Google Analytics
5.1 We use Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), to help us understand how visitors use the Site — for example, which pages are viewed, how long visitors stay, and what device or browser they use.
5.2 Google Analytics uses cookies to collect this information, which is then transmitted to and processed by Google. We have configured Google Analytics to anonymise/pseudonymise data where possible and do not use it to identify you personally.
5.3 Data collected by Google Analytics may be transferred to and processed in the United States or other countries outside the UK. Google is certified under the UK Extension to the EU-US Data Privacy Framework (or relevant successor mechanism) and/or relies on Standard Contractual Clauses / the UK International Data Transfer Addendum to provide adequate protection for such transfers.
5.4 You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by declining analytics cookies via our cookie banner.
5.5 For more information, see Google’s Privacy Policy and how Google uses data from sites that use its services.
6. Google Search Console (Webmaster Tools)
6.1 We use Google Search Console (formerly Google Webmaster Tools) to monitor and maintain the Site’s presence in Google Search results — for example, tracking search performance, indexing issues, and site errors.
6.2 Google Search Console primarily provides us with aggregated data about how the Site performs in search results (such as search queries, click-through rates, and page rankings). It does not identify individual visitors to us.
6.3 As with Google Analytics, any data processed through this tool is subject to Google’s Privacy Policy.
7. Mailchimp
7.1 If you subscribe to our newsletter or marketing emails, we use Mailchimp, an email marketing platform provided by The Rocket Science Group LLC (“Mailchimp”, part of Intuit Inc.), to manage our mailing list and send you emails.
7.2 When you sign up, we share your email address (and name, if provided) with Mailchimp. Mailchimp also collects data on email opens, link clicks, and engagement so we can understand which content is useful to you and improve our communications.
7.3 Mailchimp may transfer and process data in the United States. Mailchimp relies on Standard Contractual Clauses and/or the UK International Data Transfer Addendum to safeguard such transfers.
7.4 You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link at the bottom of any email, or by contacting us directly. Unsubscribing will not affect transactional emails (e.g. order confirmations), which are necessary for fulfilling your order.
7.5 For more information, see Mailchimp’s Privacy Policy.
8. Sharing Your Personal Data
We do not sell your personal data. We may share it with:
- Service providers who help us run the Site and business, including payment processors, delivery couriers, Google (Analytics and Search Console), and Mailchimp (email marketing), each acting under their own privacy terms and, where required, a data processing agreement with us.
- Professional advisers such as accountants, auditors, or solicitors, where necessary.
- Regulators and law enforcement, where required by law.
- A buyer, if we sell or transfer all or part of our business, subject to the same protections set out in this policy.
9. International Data Transfers
Some of our third-party providers (including Google and Mailchimp) may process data outside the UK, including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Addendum, Standard Contractual Clauses, or an adequacy decision recognised by the UK government.
10. Data Retention
We keep your personal data only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. As a general guide:
- Order and transaction data is typically retained for [6 years] to meet tax and accounting obligations.
- Marketing data is retained until you unsubscribe or withdraw consent.
- Analytics data is retained according to Google Analytics’ default retention settings, or as configured by us.
11. Your Rights
Under UK GDPR, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data in certain circumstances;
- object to or restrict certain processing (including marketing);
- withdraw consent at any time, where processing is based on consent;
- request a copy of your data in a portable format; and
- lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data properly.
To exercise any of these rights, please contact us at [privacy/contact email].
12. Data Security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting, encrypted payment processing, and restricted access to customer data.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised “last updated” date.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
- Email: info@nutrisport.co.uk
- Post: Nutrisport, Great George Street,Wigan WN3 4DL