YOUR DATA

Privacy Policy

Last updated: April 2026

Data controller: Peak Health Distribution Ltd, Clay Street, Hull, HU8 8HA (company registration 04708785)

Contact: support@discount-supplements.co.uk or 01482 606022

This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

When you place an order

  • Name, email address, phone number
  • Delivery and billing address
  • Order details and purchase history
  • Payment information (processed securely by our payment provider, not stored by us)

When you create an account

  • Name and email address
  • Saved addresses
  • Order history

When you browse our website

  • IP address and approximate location
  • Browser type and device information
  • Pages visited, time on site, and referring website
  • Cookie and tracking data (see Cookies section below)

When you contact us

  • Name, email address, and any information you provide in your message
  • Live chat transcripts

How We Use Your Data

Purpose Legal Basis (UK GDPR)
Processing and delivering your order Contract performance (Article 6(1)(b))
Handling returns, refunds, and complaints Contract performance (Article 6(1)(b))
Sending order updates and dispatch notifications Contract performance (Article 6(1)(b))
Sending marketing emails (only with your consent) Consent (Article 6(1)(a))
Improving our website and product range Legitimate interest (Article 6(1)(f))
Fraud prevention and security Legitimate interest (Article 6(1)(f))
Meeting legal and tax obligations Legal obligation (Article 6(1)(c))

Who We Share Data With

We only share personal data where necessary to fulfil our service to you or to meet legal obligations. We do not sell your data to third parties.

  • Shopify: Our ecommerce platform, which processes and stores order data on our behalf
  • Payment providers: Shopify Payments, PayPal, and Klarna process payment information securely
  • Delivery couriers: DPD Local, Royal Mail, and Evri receive your name and delivery address to fulfil orders
  • Email marketing: Klaviyo processes email addresses and purchase data for marketing communications you have consented to
  • Analytics: Google Analytics collects anonymised browsing data to help us improve the website
  • Customer support: Our live chat provider processes messages and contact details

Some of these providers are based outside the UK. Where data is transferred internationally, we ensure adequate safeguards are in place as required by UK GDPR, including standard contractual clauses or adequacy decisions.

Cookies

We use cookies and similar technologies on our website. Cookies are small text files stored on your device that help us provide and improve our service.

Essential cookies

Required for the website to function. These handle your shopping cart, checkout session, and login state. You cannot opt out of essential cookies.

Analytics cookies

Help us understand how visitors use the website (pages visited, time on site, bounce rate). We use Google Analytics with anonymised IP addresses. You can opt out via your browser settings or the cookie banner.

Marketing cookies

Used to deliver relevant advertising and measure campaign performance. These are only set with your consent via the cookie banner. You can withdraw consent at any time.

How Long We Keep Your Data

  • Order records: 6 years from the date of purchase (required for tax and accounting purposes under HMRC rules)
  • Customer accounts: Until you request deletion or the account has been inactive for 3 years
  • Marketing data: Until you unsubscribe or withdraw consent
  • Website analytics: Aggregated data retained for up to 26 months
  • Support enquiries: 2 years from the date of the enquiry

Your Rights

Under UK GDPR, you have the following rights over your personal data:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Ask us to correct inaccurate or incomplete data
  • Right to erasure: Ask us to delete your personal data (where there is no legal reason for us to keep it)
  • Right to restrict processing: Ask us to limit how we use your data
  • Right to data portability: Request your data in a structured, commonly used format
  • Right to object: Object to processing based on legitimate interest, including direct marketing
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email support@discount-supplements.co.uk with the subject line "Data rights request". We will respond within one calendar month.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to resolve the issue. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with the updated date shown at the top. We will not reduce your rights under this policy without your consent.