Privacy policy

• Order details: your name, email, delivery and billing address, phone number and what you bought. We need these to take payment, deliver your order, send order updates and deal with returns. Legal basis: performing our contract with you.
• Payment details: handled entirely by Shopify Payments or your chosen payment provider. We never see or store your full card number.
• Account and marketing preferences: if you sign up to hear from us, or tick the marketing box at checkout, we store your email and your consent so we can send you news and offers. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in any email.
• Blood test data: if you order a Lyfestyle test we collect your date of birth and sex, the collection method and appointment details, and your sample and results are generated by our testing partners. This is health data, which the law treats as special category data. Legal basis: your explicit consent, given when you order, and the performance of the test you have asked for.
• Website use: our hosting provider records the pages requested, the time, your IP address and browser type in its server logs, to run the site and keep it secure. Legal basis: our legitimate interest in running a working, secure website.
• Messages: if you email or call us we keep the correspondence so we can answer you and keep a record of what was agreed. Legal basis: our legitimate interest in providing customer service.

We share your data only with the companies we need to fulfil your order and run the business, and only the parts they need:

• Shopify, which runs our store, checkout and customer list. Shopify processes data in Ireland, Canada and the United States under safeguards approved for UK data transfers.
• Royal Mail and our fulfilment partner Greenbridge Distribution, to pick, pack and deliver your order.
• For Lyfestyle blood tests: the phlebotomy provider who collects your sample, the UKAS-accredited laboratory that analyses it, and the doctor who reviews your results with you. Each is bound by confidentiality and by UK data protection law.
• Vercel, which hosts this website and holds the server logs described above.
• Our accountants, and any authority we are legally required to share data with.

We do not sell your data and we do not share it with advertisers.

• Order records: six years after the order, because tax law requires it.
• Marketing consent: until you unsubscribe or ask us to delete it.
• Blood test results: held by our testing partners under their clinical record-keeping rules. We keep the order and appointment details for six years and the results only for as long as needed to deliver your consultation and answer your questions, after which they are deleted from our systems.
• Server logs: 30 days.
• Correspondence: two years after the last message.

Under UK GDPR you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything that is wrong
• delete your data, where we no longer need to keep it
• stop using your data for marketing, at any time
• restrict or object to how we use your data
• send your data to you or another provider in a usable format

To do any of these, email info@lyfelinez.com. We will reply within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can fix it.

Checkout and every page on this site are served over HTTPS. Card payments are processed by Shopify Payments, which is PCI DSS certified. Health data is shared with our testing partners over encrypted channels and is not stored in our marketing systems.

We use very few cookies. What they are and how to control them is on our Cookies page.

This site is not aimed at anyone under 18 and we do not knowingly collect data from children. If you think a child has given us data, email us and we will delete it.

We will update this page if our practices change. Questions about your data go to info@lyfelinez.com or by post to Lyfelinez Ltd, Unit 55, Atcham Business Park, Atcham, Shrewsbury, SY4 4UG.