Privacy policy
Last updated: 8 January 2026
This Privacy Policy explains how NuProtein ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website or purchase our products.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. WHO WE ARE
NuProtein
Burnley, Lancashire, UK
Email: info@nuprotein.com
We are the data controller responsible for your personal information.
2. WHAT INFORMATION WE COLLECT
We collect information that you provide directly to us and information that is collected automatically when you use our website.
INFORMATION YOU PROVIDE TO US:
- Name
- Email address
- Delivery address
- Billing address
- Phone number
- Payment information (processed securely by our payment provider)
- Order history
- Communication preferences
INFORMATION COLLECTED AUTOMATICALLY:
- IP address
- Browser type and version
- Device information
- Pages visited on our website
- Time and date of visits
- Referring website addresses
- Cookies and similar tracking technologies
3. HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes:
ORDER PROCESSING:
- To process and fulfil your orders
- To communicate with you about your orders
- To arrange delivery of products
- To process payments and prevent fraud
CUSTOMER SERVICE:
- To respond to your inquiries and requests
- To provide customer support
- To handle returns and refunds
MARKETING (WITH YOUR CONSENT):
- To send you promotional emails about new products, special offers, and updates
- To personalise your shopping experience
- To send you information we think you may find interesting
You can opt out of marketing communications at any time by:
- Clicking "unsubscribe" in any marketing email
- Contacting us at info@nuprotein.com
- Updating your preferences in your account settings
LEGAL OBLIGATIONS:
- To comply with legal requirements
- To enforce our terms and conditions
- To protect our rights and property
WEBSITE IMPROVEMENT:
- To analyse website usage and improve our services
- To understand customer preferences
- To enhance user experience
4. LEGAL BASIS FOR PROCESSING (UK GDPR)
We process your personal data under the following legal bases:
- CONTRACT: Processing is necessary to fulfil our contract with you (order processing, delivery)
- CONSENT: You have given us explicit consent to process your data (marketing emails, cookies)
- LEGITIMATE INTERESTS: Processing is necessary for our legitimate business interests (fraud prevention, website improvement)
- LEGAL OBLIGATION: Processing is required by law (tax records, consumer protection)
5. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies to enhance your experience on our website.
WHAT ARE COOKIES?
Cookies are small text files stored on your device when you visit our website. They help us recognise you and remember your preferences.
TYPES OF COOKIES WE USE:
ESSENTIAL COOKIES (REQUIRED):
- Enable core website functionality
- Remember items in your shopping cart
- Process secure payments
- Maintain your session when logged in
PERFORMANCE COOKIES (OPTIONAL):
- Analyse how visitors use our website
- Help us improve website performance
- Understand which pages are most popular
FUNCTIONAL COOKIES (OPTIONAL):
- Remember your preferences
- Personalise your experience
- Enable social media features
MARKETING COOKIES (OPTIONAL):
- Track effectiveness of our advertising
- Show you relevant advertisements
- Measure campaign performance
MANAGING COOKIES:
You can control cookie settings through our cookie consent banner when you first visit our website.
You can also manage cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Privacy → Cookies
Note: Disabling essential cookies may affect website functionality.
6. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information to third parties.
We may share your information with:
SERVICE PROVIDERS:
- Payment processors (Shopify Payments, PayPal, Stripe)
- Delivery companies (Royal Mail, DPD, Evri)
- Email service providers (for order confirmations and marketing)
- Website hosting and analytics providers
These service providers are contractually obligated to protect your data and use it only for the purposes we specify.
LEGAL REQUIREMENTS:
- Law enforcement or government authorities when required by law
- To protect our legal rights or prevent illegal activity
- In connection with legal proceedings
BUSINESS TRANSFERS:
- If NuProtein is sold or merged with another company, your information may be transferred to the new owner
7. INTERNATIONAL DATA TRANSFERS
Your personal information may be transferred to and processed in countries outside the UK and European Economic Area (EEA).
When we transfer your data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
- Adequacy decisions recognising equivalent data protection standards
- Other legally approved transfer mechanisms
Our primary service providers (Shopify, payment processors) maintain GDPR-compliant data protection standards.
8. HOW WE PROTECT YOUR INFORMATION
We implement appropriate technical and organisational measures to protect your personal information:
SECURITY MEASURES:
- SSL encryption for data transmission
- Secure payment processing (PCI-DSS compliant)
- Regular security assessments
- Access controls and authentication
- Employee training on data protection
- Secure data storage and backups
However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. HOW LONG WE KEEP YOUR INFORMATION
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy and comply with legal obligations.
RETENTION PERIODS:
- Order information: 7 years (UK tax and accounting requirements)
- Customer account data: Until you request deletion or close your account
- Marketing consent: Until you withdraw consent
- Website analytics: 26 months
- Customer service records: 3 years after last interaction
After these periods, we will securely delete or anonymise your information.
10. YOUR RIGHTS UNDER UK GDPR
You have the following rights regarding your personal information:
RIGHT TO ACCESS:
Request a copy of the personal information we hold about you.
RIGHT TO RECTIFICATION:
Request correction of inaccurate or incomplete information.
RIGHT TO ERASURE ("Right to be Forgotten"):
Request deletion of your personal information in certain circumstances.
RIGHT TO RESTRICT PROCESSING:
Request that we limit how we use your information.
RIGHT TO DATA PORTABILITY:
Request a copy of your information in a structured, commonly used format.
RIGHT TO OBJECT:
Object to processing based on legitimate interests or for marketing purposes.
RIGHT TO WITHDRAW CONSENT:
Withdraw consent for processing at any time (where consent is the legal basis).
RIGHT TO COMPLAIN:
Lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been violated.
HOW TO EXERCISE YOUR RIGHTS:
Contact us at:
Email: info@nuprotein.com
We will respond to your request within 30 days.
11. THIRD-PARTY LINKS
Our website may contain links to third-party websites (e.g., social media, payment providers).
We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.
12. CHILDREN'S PRIVACY
Our products and services are intended for adults aged 18 and over.
We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately, and we will delete it.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
We will notify you of significant changes by:
- Posting the updated policy on our website with a new "Last updated" date
- Sending an email notification (if you have subscribed to communications)
Your continued use of our website after changes constitutes acceptance of the updated policy.
14. MARKETING COMMUNICATIONS
We will only send you marketing emails if you have opted in to receive them.
You can opt out at any time by:
- Clicking "Unsubscribe" at the bottom of any marketing email
- Emailing us at info@nuprotein.com
- Updating your preferences in your account settings
You will still receive transactional emails (order confirmations, shipping updates, etc.) even if you opt out of marketing.
15. COMPLAINTS AND SUPERVISORY AUTHORITY
If you have concerns about how we handle your personal information, please contact us first at info@nuprotein.com, and we will do our best to resolve the issue.
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk
16. CONTACT US
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:
NuProtein
Email: info@nuprotein.com
Address: Burnley, Lancashire, UK
We are committed to protecting your privacy and will respond to your inquiry within 30 days.