Privacy policy

Health Nutrition privacy and cookies policy

Last updated: 30 September 2026

This policy explains how Nutritious Ltd, trading as Health Nutrition, collects, uses and shares personal information when you visit healthnutrition.com, buy from us or contact us. It also explains your privacy rights and choices.

You do not have to agree to marketing or optional tracking to buy from us. This policy explains our practices and does not replace any consent we need to obtain separately.

1 Who we are and how to contact us

Nutritious Ltd is the controller of the personal information covered by this policy. We are registered in England and Wales under company number 16111445. Health Nutrition is our trading name.

Postal address: Nutritious Ltd, 20 Wenlock Road, London, N1 7GU, United Kingdom.
Email: support@healthnutrition.com.

You can use these details for privacy questions, requests or complaints. Please include “Privacy” in the subject line to help us route your email, although this is not required.

2 Information we collect and where it comes from

We collect information that you provide, information generated when you use our store, and information from companies involved in your purchase or interaction with us.

  • Contact and account information: your name, email address, telephone number, billing and delivery addresses, account identifiers and account preferences.
  • Orders and payments: items ordered, subscriptions you choose, transaction amounts, delivery information, refunds, payment status and fraud checks. Payment providers collect your payment credentials. We receive the details needed to administer payments, such as transaction references and limited payment-method information. Please do not send full card details to customer support.
  • Customer communications: enquiries, complaints, returns, feedback, reviews and information you choose to send us.
  • Device and browsing information: IP address, browser and device type, approximate location derived from IP address, pages viewed, searches, referral links, cart activity, timestamps and cookie or similar identifiers.
  • Marketing and preferences: your consent and opt-out records, product interests and interactions with our marketing, including email opens or link clicks where tracking is enabled and permitted.

Sources other than you include Shopify, payment providers, delivery and fulfilment partners, subscription providers, fraud-prevention services, review platforms and advertising or referral partners. For example, a courier may confirm delivery and an affiliate may identify the referral that led to an order.

Online identifiers and browsing records can be personal information even when they do not include your name.

Most browsing does not require an account. Certain information is needed to accept payment, deliver your order or respond to you. If you do not provide it, we may be unable to provide the relevant service. Optional information is identified when we request it.

3 How we use information and our legal bases

Where UK or EEA data protection law applies, we rely on the following legal bases. “Legitimate interests” means a proportionate business purpose that does not override your rights.

Purpose Legal basis
Process orders, payments, deliveries, returns and subscriptions you request; manage your customer account. Performing our contract with you or taking steps you request before a contract.
Answer enquiries and resolve customer service issues. Contract where the enquiry concerns a purchase; otherwise our legitimate interest in helping customers and responding to enquiries.
Keep the store secure, prevent fraud and investigate misuse or disputed payments. Our legitimate interests in protecting customers, payments and our business; legal obligations where a specific obligation applies.
Keep accounting records, meet applicable product-safety duties and respond to lawful requests. Compliance with our legal obligations.
Send marketing and permitted cart reminders. Consent where required; otherwise our legitimate interest in promoting our own similar products where the applicable marketing rules permit this.
Use optional tracking for analytics, personalisation, advertising and referral attribution. Consent for UK and EEA visitors. Essential operational records are used for our legitimate interest in running and improving the store.
Administer referrals and calculate commissions from permitted referral records. Our legitimate interest in managing referral relationships. This does not replace consent required for tracking.
Handle legal claims and necessary business administration, including a potential business transfer. Our legitimate interests in protecting legal rights and managing the business; legal obligations where applicable.

We use only the information reasonably needed for each purpose. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. Additional safeguards apply to health information, as explained below.

4 Health information and other sensitive information

You do not need to provide medical records or details of a medical condition to place an ordinary order. Please avoid including unnecessary health information in messages or public reviews.

If you provide health information in an enquiry or product-safety report, we restrict its use to handling that matter and any related legal duties or claims. For UK and EEA information, we also need a condition permitting the use of sensitive information: normally your explicit consent, or the establishment, exercise or defence of legal claims where applicable. Where a specific safety-reporting law permits or requires another use, we explain that use and apply the safeguards required by that law.

Sending an email or accepting this policy does not, by itself, provide explicit consent. Where consent is required, we ask for it separately. We do not use the health information you provide to customer support to target advertising.

Some laws also protect health information inferred from purchases or browsing. Additional notices and choices may apply to that information. Where applicable, those rights include accessing or deleting consumer health information, withdrawing consent to its collection or sharing, and appealing a refusal to act on a request. Contact us using the details above to exercise these rights.

5 Marketing and your choices

We send promotional emails or texts where you have consented or another lawful permission applies. In the UK, the existing-customer exception may allow marketing of our own similar products where we obtained your details during a sale or genuine negotiations for a sale and offered a clear opt-out both when collecting them and in every message. Different local rules may apply elsewhere.

Cart reminders that encourage you to complete a purchase are treated as marketing. Entering your email at checkout does not automatically give permission for them.

You can object to direct marketing at any time, including profiling used for direct marketing. Use the unsubscribe link in an email, follow the opt-out instructions in a marketing text, or email support@healthnutrition.com. There is no charge from us for opting out.

We may still send necessary non-promotional messages about orders, subscriptions, deliveries, safety or your account. Declining marketing does not affect your ability to buy from us.

Marketing permission given to Health Nutrition does not automatically give a separate company or brand website permission to contact you.

6 Cookies and similar technologies

Our store uses cookies and related technologies such as pixels, local storage and tracking links. These help operate the store and, according to your choices, measure activity and support marketing. They can collect identifiers and activity information that relates to you or your device.

  • Essential: support functions such as the shopping basket, checkout, security and saving your privacy choices.
  • Preferences: remember optional choices and provide additional personalisation.
  • Analytics: help us understand use of the store and measure performance.
  • Advertising and attribution: measure campaigns and referrals and, where enabled and permitted, help show relevant advertising on other services.

For UK and EEA visitors, we ask for consent before optional tracking operates. You can accept, reject or change optional categories through the cookie controls. Refusing optional tracking does not prevent an ordinary purchase.

You can revisit your choices through the cookie and privacy controls on our website. You can also contact us for information about the technologies we use, their providers, purposes and durations. You can also use browser controls, although blocking essential cookies may affect checkout or other functions. Choices made on one device or browser may need to be repeated on another.

Marketing messages may use tracking pixels or links to measure opens and clicks. Where separate consent is required for this tracking, marketing consent alone does not replace it. You can contact us about tracking preferences or unsubscribe from marketing.

We recognise legally required browser opt-out preference signals, including Global Privacy Control, for sale, sharing or targeted advertising. Our response to opt-out signals is based on the signal and the applicable law. The older “Do Not Track” setting does not automatically exercise all the rights described in this policy; you can also use our privacy controls or contact us directly.

7 Who receives information

We disclose relevant information to the following recipients for the purposes described in this policy:

  • Store and service providers: Shopify and providers of hosting, IT support, customer support, subscriptions, communications and reviews.
  • Payment and fraud providers: to process transactions, prevent fraud and deal with refunds or payment disputes.
  • Fulfilment partners: warehouses, couriers and delivery providers, including providers in the country from which your order ships.
  • Analytics, advertising and referral partners: subject to the relevant permissions and choices. Information can include online identifiers, browsing and conversion events and referral records. Customer audience matching, if used, can involve contact details transformed into hashed identifiers; hashing does not make those identifiers anonymous.
  • Professional advisers and authorities: accountants, lawyers, insurers, regulators or other bodies where reasonably necessary for advice, legal duties or legal claims.
  • Business transaction parties: advisers and potential or actual purchasers where necessary for a proposed sale, merger or reorganisation, subject to appropriate confidentiality and data protection safeguards.

Providers acting on our behalf must follow appropriate contractual instructions and protect the information. Some recipients, including certain payment services, platforms and authorities, act as independent controllers for their own purposes. Their privacy notices explain those activities.

Public reviews you choose to submit for publication may display your chosen name and review content. Please avoid including details you do not want to make public.

8 Shopify

Our store is hosted on Shopify. Shopify processes information about visits, orders and transactions to provide the store and related services. Depending on the service, Shopify acts on our behalf or is responsible for its own processing, including certain services you choose to use directly.

Where Shopify’s Enhanced Services are used, Shopify may combine information about activity in our store with information about interactions with other merchants and Shopify to provide personalisation, advertising and performance insights. Information is shared with Shopify and relevant partners, which may be located in other countries. These uses are subject to the consent and opt-out requirements that apply to you. You can change your store privacy choices or use Shopify’s privacy portal to exercise relevant rights directly with Shopify.

Read Shopify’s Consumer Privacy Policy for details, including its international processing. You can also visit Shopify’s privacy portal to exercise rights relating to processing for which Shopify is responsible. Contact us for requests concerning our own use of your information.

9 International transfers

We are based in the United Kingdom. Shopify and other service providers may process information in other countries, including the United States and Canada. Fulfilment may also involve providers in the country serving your order.

For restricted transfers from the UK or EEA, we use an applicable adequacy decision or appropriate contractual safeguards, such as the European Commission’s Standard Contractual Clauses together with the UK Addendum, or the UK International Data Transfer Agreement, as relevant. We assess the safeguards and use additional protections where required.

You can contact us for information about the safeguards applying to a particular transfer or to request a copy, with confidential details redacted where necessary.

10 How long we keep information

We keep information for the purpose for which it was collected and then delete or anonymise it, unless a lawful reason requires longer retention.

  • Accounting and transaction records: normally six years from the end of the financial year to which the records relate, or longer where tax rules, an investigation or a legal claim require it.
  • Accounts and subscriptions: while needed to provide the account or subscription and afterwards only for necessary records, disputes or other lawful purposes.
  • Customer support and safety records: for the time needed to resolve the matter and meet relevant safety, complaint-handling or legal-claim requirements, taking account of the sensitivity of the information.
  • Marketing records: while the relevant permission or other lawful basis remains valid. If you opt out, we retain a limited suppression record so we can respect that choice.
  • Tracking and security records: according to the purpose, provider settings and investigation needs. The lifetime of a cookie is not necessarily the retention period of the information collected through it. You can contact us for details of the retention period applying to particular information.

Retention decisions consider the type and sensitivity of the information, whether it is still needed, and applicable legal deadlines. We do not keep information indefinitely simply because you have not asked us to delete it.

11 Your privacy rights

Depending on your location and the law that applies, you may have rights to access or obtain a copy of your information, correct it, request deletion, restrict its use, receive it in a portable form, withdraw consent or object to processing based on legitimate interests. You may also have protections concerning significant decisions made solely by automated means.

Your right to object to direct marketing is unconditional. Other rights can depend on the circumstances. For example, we may need to retain an invoice to meet tax obligations despite a deletion request.

Send requests to support@healthnutrition.com or our postal address. We may need proportionate information to verify your identity or an agent’s authority. We will not request more than is reasonably necessary. Ordinary requests are free; fees or refusal apply only where the law allows.

We respond within the applicable legal deadline, normally one month for UK and EEA requests, subject to permitted extensions or pauses. Where we cannot comply fully, we explain why and the options available to you.

Automated tools may assist with fraud screening or recommendations. If an automated process affects an order, contact us to explain your position and ask for review. This does not remove any additional rights you have under applicable law.

12 Additional information for United States residents

Where an applicable state privacy law covers our processing, you may have rights to know or access personal information, obtain a portable copy, correct inaccuracies, delete information, and opt out of its sale, sharing or use for targeted advertising. You may also have rights to limit certain uses of sensitive information or to opt out of profiling used for decisions with legal or similarly significant effects. We will not unlawfully discriminate against you for exercising these rights.

For these purposes, the categories described in section 2 include identifiers and contact information; account and transaction records; internet or device activity; approximate geolocation; communications and reviews; and preference information or inferences. Sensitive information can include health details you provide and certain account credentials. Sources, purposes, recipients and retention criteria are described above.

Sale and sharing: disclosing information to advertising services can count as “sale” or “sharing” under state law even when no money is paid. To opt out, email support@healthnutrition.com with your request, or use the applicable privacy controls on our website. You do not need to create an account to opt out. We also honour Global Privacy Control where required. A browser signal applies to that browser and, where we can associate it with your account, to the account as required by law. You can also contact us to record an account-level choice. Opting out of targeted advertising does not stop necessary order processing.

The following categories explain how information is disclosed in connection with the activities described in this policy. Which information relates to you depends on your interactions with us.

Information category Recipient categories and purposes
Identifiers and contact information, including name, addresses, email, customer ID and online identifiers. Store, support, communications, payment, security and fulfilment providers for operating the store and serving customers. Advertising partners may receive online or hashed identifiers for permitted advertising and measurement.
Commercial and payment information, including purchases, subscriptions, transaction references and returns. Store, subscription, payment, accounting, support and fulfilment providers for transactions, service and records. Limited conversion and referral information may be disclosed to advertising and affiliate partners where permitted.
Internet activity, device information and approximate location. Store, IT and security providers for operation and protection; analytics, advertising and referral partners for permitted measurement, personalisation and attribution.
Customer messages, feedback and reviews. Customer-support and review providers; relevant fulfilment, payment or professional advisers where needed to resolve an issue. Reviews submitted for publication may be visible to the public.
Preferences, consent records and product-interest inferences. Store, communications and consent-management providers to respect choices and manage services; advertising partners where relevant permissions allow.
Sensitive information, including health details voluntarily provided and account access information. Restricted service providers and, where necessary, professional advisers or authorities for support, account security, product safety, legal obligations or claims. Customer-support health details are not used for advertising.

Relevant categories may also be disclosed to advisers, authorities or business transaction parties in the circumstances described in section 7. We use sensitive information only where necessary and permitted for the purposes explained in this policy. You can ask us about the information collected or disclosed about you, including during the preceding 12 months, and request any applicable restriction on its use.

You may use an authorised agent where the law permits. We may verify authority and identity for access, correction or deletion requests; sale or sharing opt-outs do not require a verified consumer account.

Where you have an appeal right, email us with “Privacy appeal” and explain why you disagree with our response. We review the decision and respond within the period required by your state law. If we reject an appeal, we explain how to contact the relevant regulator where required. US requests are generally answered within 45 days, subject to the specific law and any permitted extension; opt-outs are implemented within the shorter applicable deadline.

13 Security and children

We use appropriate technical and organisational measures to protect information and restrict access to people who need it. No online service can guarantee absolute security.

Our store is intended for adults aged 18 and over. We do not knowingly collect children’s information for marketing or knowingly sell or share the personal information of people under 16 for cross-context behavioural advertising. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

14 Privacy complaints

If you have a privacy complaint, contact support@healthnutrition.com or write to our postal address. We acknowledge data protection complaints within 30 days, investigate and respond without undue delay.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or on +44 (0)303 123 1113. If you are in the EEA, you can complain to the supervisory authority where you live, work or believe an infringement occurred. Other residents may contact their relevant privacy or consumer protection regulator. You do not have to complete our complaints process before exercising a legal right to contact a regulator.

15 Other websites and changes to this policy

Other websites and services linked from our store have their own privacy notices. This policy covers Health Nutrition’s processing, not the independent practices of those services.

We update this policy when our practices or legal requirements change and revise the date above. For material changes, we provide additional notice and obtain fresh consent where the law requires it. An update does not override choices you have already made.