Privacy policy

At Colossal Health, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website (colossalhealth.co.uk) and your rights under UK GDPR.

Who We Are

Colossal Health is the data controller responsible for your personal data.

Business name: Colossal Health
ICO Registration Number: ZB958569
Email: info@colossalhealth.co.uk

What Personal Data We Collect

We may collect and process the following information:

Information you provide directly

  • Name
  • Email address
  • Billing and delivery address
  • Phone number
  • Account details (if you create an account)
  • Customer support enquiries and communications

Transaction information

  • Products purchased
  • Order and payment confirmation
  • Shipping and delivery details

Website usage data

  • IP address
  • Browser type and device information
  • Pages visited and interactions
  • Cookies and similar technologies

Marketing preferences

  • Your opt-in or opt-out choices for marketing communications

How We Use Your Data

We use your personal data to:

  • Process and fulfil orders
  • Communicate order, delivery, and service updates
  • Handle returns, refunds, and customer support
  • Manage customer accounts
  • Send marketing communications only where you have given consent
  • Improve website functionality, performance, and security
  • Comply with legal and regulatory obligations

Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

  • Contract - to fulfil your order and provide services
  • Legal obligation - for accounting, tax, and regulatory requirements
  • Legitimate interests - to improve our services and website (without overriding your rights)
  • Consent - for marketing communications and non-essential cookies

Sharing Your Data

We only share your personal data with trusted third parties where necessary to operate our business, including:

  • E-commerce and website platform providers
  • Payment processors
  • Delivery and courier services
  • Analytics and marketing tools (only with consent)
  • Legal or regulatory authorities where required by law

We never sell, rent, or trade your personal data.

Marketing Communications

We will only send marketing emails or messages if you have actively opted in.

You can unsubscribe at any time by:

Unsubscribing will not affect essential service communications related to your orders.

Cookies

We use cookies to:

  • Ensure the website functions correctly
  • Analyse traffic and performance
  • Improve user experience

Where required, cookies are used only with your consent.

You can manage or disable cookies through your browser settings. For more information, please refer to our Cookie Policy (if applicable).

Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data (where applicable)
  • Withdraw consent at any time for marketing
  • Object to or restrict certain data processing
  • Request a copy of your data (data portability)
  • Complain with the Information Commissioner’s Office (ICO)

Data Retention & Storage

We retain personal data only for as long as necessary to:

  • Fulfil orders
  • Provide customer support
  • Meet legal, accounting, and regulatory obligations

Your data is stored securely within the UK or EEA. Where data is transferred outside these regions, appropriate safeguards are applied.

We do not use customer data for:

  • AI training
  • Profiling
  • Automated decision-making

Children’s Data

Our website and products are intended for adults only. We do not knowingly collect personal data from anyone under the age of 18.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the revised version will apply from the date of publication.

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at info@colossalhealth.co.uk.