Privacy Policy

Who we are & who controls your data

This Privacy Policy explains how We Do Brands Ltd, trading as Muscle Miracle (“we”, “us” or “our”), collects and uses your personal data when you visit musclemiracle.co.uk or purchase our products.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how we use your information, please contact us:

• Email — contact@musclemiracle.co.uk
• Business address — Unit C, Shelf Mills, Wade House Rd, Halifax HX3 7BJ, United Kingdom
• Registered office — Mill 1850 Level 0, Shaw Lodge Mills, Shaw Lane, Halifax, England, HX3 9ET
• Company registration number — 14571470 (registered in England and Wales)

What we collect

We only collect the personal information we need to operate our website, fulfil your orders and support our customers.

• Order and delivery details — your name, email address, telephone number (where provided), billing and delivery address, and the products you purchase.
• Payment information — payments are securely processed by Shopify and its payment providers. We never receive or store your full payment card details. We receive confirmation that payment has been made together with your order information.
• Customer support enquiries — any emails, contact form submissions or other messages you send us so we can respond to your enquiry and keep a record of our correspondence.
• Marketing preferences — your email address and marketing consent where you choose to receive updates from us.
• Technical and usage information — including your IP address, browser type, device information, pages visited, referring website, basket contents, theme preference and anonymised website analytics collected through cookies and similar technologies.

Why we use your data & our lawful bases

Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Performance of a contract — to process payments, fulfil and deliver your order, manage returns and refunds, and provide customer support.
• Consent — to send marketing emails where you have chosen to receive them, and to place non-essential analytics cookies. You may withdraw your consent at any time by using the unsubscribe link in our emails or adjusting your cookie preferences.
• Legitimate interests — to operate and improve our website, keep it secure, prevent fraud, verify payments, understand how customers use our website and improve our products and services, while respecting your rights and freedoms.
• Legal obligation — to comply with our legal responsibilities, including keeping tax, accounting and transaction records.

We never sell your personal data.

Who we share your data with

We only share your personal data where it is necessary to operate our business. This may include:

• Shopify, which provides our online store, checkout and payment services;
• delivery and fulfilment partners so your order can be delivered;
• email service providers who send order confirmations and, where you have opted in, marketing emails;
• analytics providers who help us understand website performance; and
• public authorities or regulators where disclosure is required by law.

All of our service providers process personal data under appropriate contractual arrangements and only as necessary to provide their services.

International transfers

Some of our service providers, including Shopify, may process personal data outside the United Kingdom.

Where this happens, we ensure appropriate safeguards are in place in accordance with UK data protection law, including UK adequacy regulations or the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses, so your information remains protected.

How long we keep your data

We keep personal information only for as long as necessary.

• Order and transaction records are generally kept for up to six years to comply with UK tax and accounting requirements.
• Customer support correspondence is normally retained for up to two years after your enquiry has been resolved.
• Marketing information is kept until you unsubscribe or ask us to stop contacting you. We then keep a minimal suppression record to ensure we do not send further marketing communications.
• Analytics information is retained only in anonymised or aggregated form where possible.

Cookies

Cookies are small files stored on your device to help our website function and improve your browsing experience. We use two types of cookies:

• Strictly necessary cookies — these enable essential website functions such as your shopping basket, checkout, security and theme preferences. These cookies do not require your consent.
• Analytics cookies — these help us understand how visitors use our website so we can improve it. We only use these cookies where you have given your consent, in accordance with the Privacy and Electronic Communications Regulations (PECR).

You can manage your cookie preferences through our cookie banner or by changing your browser settings. Disabling certain cookies may affect how some parts of the website function.

Your rights

Under UK data protection law, you have the right to:

• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete information;
• request that we erase your personal data where we no longer have a lawful reason to keep it;
• ask us to restrict or object to certain types of processing, including processing based on our legitimate interests;
• receive certain personal data in a portable, machine-readable format;
• withdraw your consent at any time where processing is based on consent; and
• lodge a complaint with the Information Commissioner’s Office.

We do not use your personal data to make solely automated decisions that have legal or similarly significant effects on you.

To exercise any of your rights, please email contact@musclemiracle.co.uk. We will normally respond within one month.

Complaints

If you have any concerns about how we handle your personal data, we encourage you to contact us first so we have the opportunity to resolve the issue.

You also have the right to make a complaint to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk.