Privacy policy.

1. Introduction

Welcome to BarbellBites. This Privacy Policy explains how BARBELLBITES LTD ("we", "us" or "our") collects, uses, shares and protects your personal information when you use our website, mobile application and services (together, the "Service").

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

2.1 Information you provide

• Your name and email address when you buy something or contact us
• Payment information (processed securely through Stripe)
• Order history and purchase information
• Email list sign-ups (your email address, and a record of when and how you agreed to hear from us)
• Communications with us (support requests, feedback)

2.2 Information collected automatically

• Device information (device type, operating system, browser type)
• Log data (IP address, access times, pages viewed)
• Usage data (features used, interactions within the Service)
• Cookies and similar technologies

3. How we use your information

We use the information we collect for the following purposes:

• To provide and maintain our Service
• To process transactions and send related information
• To send you product updates and marketing communications (with your consent)
• To respond to your comments, questions and support requests
• To analyse usage patterns and improve our Service
• To detect, prevent and address technical issues or fraud
• To comply with legal obligations

4. Legal basis for processing (UK GDPR)

We process your personal data based on the following legal grounds:

• Contract: processing necessary to perform our contract with you
• Consent: where you have given clear consent for specific purposes
• Legitimate interests: processing necessary for our legitimate business interests
• Legal obligation: processing necessary to comply with the law

5. Data sharing and disclosure

We may share your information with:

• Service providers: third parties that perform services on our behalf (for example, Stripe for payment processing)
• Analytics partners: to help us analyse and improve our Service (for example, Google Analytics)
• Legal requirements: when required by law or to protect our rights
• Business transfers: in connection with a merger, acquisition or sale of assets

We do not sell your personal data to third parties.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Account data is retained while your account is active and for a reasonable period afterwards. Transaction records may be retained for up to 7 years for tax and legal purposes.

7. Your rights under UK GDPR

Under the UK GDPR, you have the following rights:

• Right of access: request access to your personal data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data (the "right to be forgotten")
• Right to restrict processing: request limitation of processing
• Right to data portability: request transfer of your data
• Right to object: object to processing of your data
• Right to withdraw consent: withdraw consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month.

8. Cookies and similar technologies

We use cookies and similar technologies to run the Service and, with your permission, to understand how it is used. You can change your choice at any time with the Cookie settings link at the bottom of every page, or through your browser settings.

Essential cookies: required for the Service to function, including session management and security. These are always active.

Analytics cookies: we use Google Analytics to understand how visitors interact with our website. These cookies collect information in an anonymous form, including the number of visitors, where visitors have come from and the pages they visited. They are only set if you accept them.

You may refuse the use of cookies by selecting the appropriate settings in your browser. However, if you do this, you may not be able to use the full functionality of our website.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. International data transfers

Your data may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

11. Children's privacy

Our Service is not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Please review this Privacy Policy from time to time for any changes.

13. Contact information

• Company: BARBELLBITES LTD
• Company number: 17042421 (registered in England and Wales)
• Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
• ICO registration: ZC096081
• Email and data protection enquiries: [email protected]

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed: ico.org.uk.