Privacy Policy
Information We Collect
Information you give us directly: name, email address, postal address, and phone number (at checkout or sign-up); payment information (processed securely by our payment provider — we do not store full card details); order history and product preferences; any information you provide when contacting customer support, entering promotions, or subscribing to emails/SMS.
Information collected automatically: IP address, browser type, device information; pages visited, time spent on Site, referring website; cookies and similar tracking technologies (see Section 6).
Information from third parties: if you purchase via TikTok Shop, we may receive order and limited contact information from TikTok to fulfil your order. Marketing engagement data (opens, clicks) from our email platform, Klaviyo.
How We Use Your Information
We use your information to: process and fulfil orders, including subscription renewals, and arrange shipping via Royal Mail; communicate with you about orders, shipping updates, and customer service enquiries; send marketing emails via Klaviyo, where you have opted in (you can unsubscribe at any time); improve our Site, products, and customer experience; detect and prevent fraud, abuse, or security issues; comply with legal and tax obligations.
Legal Basis for Processing (UK GDPR)
We rely on the following legal bases: Contract, to process your order and provide the products/subscription you've purchased; Consent, for marketing emails/SMS and non-essential cookies; Legitimate interests, for fraud prevention, Site analytics, and improving our services; Legal obligation, for tax, accounting, and consumer protection record-keeping.
Sharing Your Information
We do not sell your personal information. We share it only with: Service providers — Wix (website hosting and e-commerce platform), Klaviyo (email marketing), Royal Mail (delivery), payment processors, and TikTok Shop (order fulfilment for TikTok purchases); Legal authorities, where required by law, court order, or to protect our legal rights; Business transfers, if HAX is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
All third-party providers are contractually required to protect your data and use it only for the purposes we specify.
International Transfers
Some of our service providers (e.g. Wix, Klaviyo, TikTok) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent adequacy protections.
Cookies
Our Site uses cookies and similar technologies to keep your cart and account session active, understand how visitors use our Site (analytics), and support marketing and retargeting (e.g. Meta Pixel, TikTok Pixel, if used).
You can control cookies through your browser settings or via the cookie consent banner on our Site. Disabling non-essential cookies won't affect your ability to browse or purchase, but may limit personalised features.
Data Retention
We retain personal data for as long as necessary to fulfil the purpose it was collected for (e.g. order history for warranty/support), meet legal, tax, and accounting requirements (typically 6 years for financial records), and resolve disputes and enforce our agreements. When no longer needed, data is securely deleted or anonymised.
Your Rights
Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"); object to or restrict certain processing; request data portability; withdraw consent at any time (e.g. unsubscribe from marketing); lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, contact us at [YOUR SUPPORT EMAIL].
Children's Privacy
Our products and Site are not intended for individuals under 18. We do not knowingly collect personal information from children.
Security
We use industry-standard measures (including those provided by Wix's platform) to protect your data, including encryption during transmission and secure payment processing. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Site after changes constitutes acceptance.
Contact Us
If you have questions about this Privacy Policy or how we handle your data:
Email: haxsupplements@outlook.com
Address: HAX Supplements Ltd, Charter Way, Charter House, Macclesfield