Depending on how you interact with us, we may collect: contact details (name, address, phone, email), financial information (payment card details and transaction records — handled securely by our payment processor, not stored by us), account information (username, password, preferences), transaction information (what you've viewed, added to cart, purchased or returned), communications you send us, and device/usage information (IP address, browser, how you use the site). We only collect what we need to run the store and serve you well.

Mostly directly from you — creating an account, checking out, or messaging us. Some is collected automatically as you browse (cookies and similar technology), and some comes from service providers who support the store on our behalf (like Shopify, our payment processor, and email tools).

To run the Services — processing orders, payments, subscriptions, returns and account management; to market to you if you've opted in (emails, offers, personalised recommendations); for security and fraud prevention; to provide customer support; and where required, to comply with the law.

With service providers who help run the store (payment processing, order fulfilment, analytics, customer support, email marketing); with marketing partners if you've consented to targeted advertising; when you ask us to (e.g. shipping to a delivery address); and where legally required (such as responding to a valid legal request). We don't sell your personal information.

Our store runs on Shopify, which hosts the site and processes data on our behalf to provide and improve the Services (for example, checkout and fraud prevention). To learn more about how Shopify handles data, see the Shopify Consumer Privacy Policy.

Our Services aren't intended for children, and we don't knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you believe a child has provided us with personal information, please contact us and we'll remove it.

We take reasonable steps to protect your information, though no method of transmission or storage is ever 100% secure. We keep personal information only as long as we need it — to maintain your account, provide the Services, meet legal obligations, or resolve disputes.

Depending on where you live, you may have the right to: access the data we hold about you, correct inaccurate information, delete your data, receive a copy of it (portability), object to or restrict certain processing, and withdraw consent at any time. You can also opt out of marketing emails whenever you like using the unsubscribe link. To exercise any of these, just get in touch — we'll respond as required by law.

It may be, since some of our service providers (including Shopify) operate internationally. Where that happens, we rely on recognised legal safeguards — such as the UK's International Data Transfer Agreement or equivalent Standard Contractual Clauses — unless the destination country is already recognised as offering an adequate level of protection.

Email us at info@nutripeak.co.uk and we'll do our best to help. If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.