Privacy Policy
Contents
1. Who we are
This Privacy Policy explains how Bio Health Performance ("we," "us," "our") collects, uses, and protects your personal information when you visit this website, create an account, place an order, or subscribe to Restore & Grow.
Bio Health Performance Ltd (Companies House registration number 17106017), The Grey House, 3 Broad Street, Stamford, PE9 1PG. [ICO registration number to be inserted here before publication.]
2. Information we collect
We collect three categories of information:
| Category | What it includes |
|---|---|
| Device & browsing information | IP address, browser type, time zone, pages viewed, referring site, and cookies (see Section 5). |
| Order & account information | Name, delivery address, email, phone number, payment details (processed by our payment provider, not stored by us directly), order history, subscription and flavour preferences, and referral activity if you use our Refer a Friend program. |
| Optional survey information | At checkout, we ask an optional question about your reason for purchasing (e.g. general wellbeing, signs of ageing, premenopausal/menopausal, GLP-1 medication use, or other). This is never required to complete an order. |
A note on the optional purchase-reason question: two of its answer options (premenopausal/menopausal, GLP-1 medication use) reveal information about your health, which UK GDPR classifies as "special category data" and protects with additional safeguards beyond ordinary personal data. We only collect this with your active choice to answer — leaving the question blank is always an option and never affects your order, price, or delivery. This data is used in aggregate for product and marketing insight, is not used to target individual customers with health-related messaging, and is not shared with third parties beyond what's needed to operate this checkout question technically (e.g. our e-commerce platform).
3. How we use your information
- To process and fulfil your orders and subscriptions, including managing pauses, skips, flavour swaps, and "Get it now" requests from your account.
- To communicate with you about your order, account, or subscription — including delivery updates and service messages.
- To send marketing communications about offers and product news, where you've opted in — you can unsubscribe at any time.
- To administer the Refer a Friend program, including tracking referral links and crediting rewards.
- To detect and prevent fraud, including suspected abuse of discount or referral codes.
- To understand how the site is used, so we can improve it.
4. Legal basis for processing
Under UK GDPR, we rely on the following legal bases: contract (to fulfil an order or subscription you've entered into), consent (for marketing communications, which you can withdraw at any time), legitimate interests (for fraud prevention and improving our site), and legal obligation (for tax and accounting records). Where you choose to answer the optional purchase-reason question at checkout and select an option revealing health-related information, we rely on your explicit consent — the higher standard UK GDPR requires for special category data — given by your voluntary choice to answer.
5. Cookies
We use first-party cookies to keep you logged in, remember your basket, and understand site usage. We may also use third-party cookies from payment, analytics, or advertising partners, who may set their own cookies subject to their own privacy policies. You can control or delete cookies through your browser settings; blocking cookies may affect how parts of the site function, such as checkout.
6. Who we share data with
We share data only where necessary to run the business, including with:
- Our e-commerce platform (e.g. Shopify) and payment processor, to take and process payments.
- Our subscription management provider, to run pause/skip/swap/"Get it now" functionality.
- Couriers and delivery partners, to fulfil and track your order.
- Email and marketing platforms, where you've opted in to marketing.
- Our reviews and testing-record platforms, where relevant to your order.
We do not sell your personal data to third parties.
7. International transfers
Some of our service providers may process data outside the UK or EEA. Where this happens, we take steps to ensure your data is protected to UK standards, such as through Standard Contractual Clauses or an equivalent safeguard.
8. How long we keep your data
We keep account and order data for as long as your account is active, and for a reasonable period afterward to meet our legal, accounting, and dispute-resolution obligations. If you delete your account, we'll remove or anonymise your personal data except where we're required to retain it by law.
9. Your rights
If you're in the UK or EEA, you have the right to:
To exercise any of these rights, contact us using the details in Section 12.
10. Children's privacy
This site and our products are intended for adults. We don't knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we'll remove it.
11. Changes to this policy
We may update this policy from time to time; the current version will always be posted here with its last-updated date.
12. Contact us & complaints
To ask a question, exercise a data right, or raise a concern, email hello@biohealthperformance.com. [Data protection contact name and registered address to be added here.]
If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk. We'd appreciate the chance to resolve your concern directly first.