Privacy Policy
Last updated 17 September 2026
This policy explains what personal information Built Different Supplements collects when you use builtdifferentsupplements.co.uk, why we collect it, and the choices you have. We are the data controller. [Trading name, registered address and company number to be confirmed].
What we collect and why
- Contact form: your name, email address and message, so we can reply. If you tick the marketing box we also keep a record of that consent. Lawful basis: our legitimate interest in answering you; consent for marketing.
- Orders: your name, email, phone number, delivery address and what you bought, so we can deliver your order, handle returns and meet our accounting obligations. Lawful basis: contract and legal obligation.
- Consultation bookings: your name, email, phone number and appointment time, so we can confirm and hold the session. Anything you share during a consultation is used only to advise you. Lawful basis: contract.
- Payments: handled by Stripe. We never see or store your full card details. Stripe's own privacy policy applies to the payment step.
- Site usage: we use cookie-free analytics (Umami) that does not identify you, and standard server logs (IP address, browser type, pages requested) kept briefly for security.
Cookies
This site sets no advertising or tracking cookies. Your shopping cart is stored in your own browser, not on our servers. Stripe sets cookies on its own checkout pages to prevent fraud. Staff logging in to manage the site receive a login cookie.
Who we share it with
Only the services needed to run the shop: Stripe (payments), our email provider (order and booking emails), our hosting and DNS providers (servers in the EU, network protection by Cloudflare), and our delivery carrier for your parcel. We never sell your information.
How long we keep it
- Contact enquiries: up to 12 months after our last reply.
- Orders and bookings: 6 years, as required for tax records.
- Marketing consent: until you withdraw it.
- Server logs: 30 days.
Your rights
Under UK GDPR you can ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, and withdraw marketing consent at any time. Use the contact form or email info@builtdifferentsupplements.co.uk. We reply within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will post any changes to this policy on this page and update the date above.
