Privacy policy

At Colossal Health, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website (colossalhealth.co.uk) and your rights under UK GDPR.

Who We Are

Colossal Health is the data controller responsible for your personal data.

Business name: Colossal Health
ICO Registration Number: ZB958569
Email: info@colossalhealth.co.uk

What Personal Data We Collect

We may collect and process the following information:

Information you provide directly

  • Name
  • Email address
  • Billing and delivery address
  • Phone number
  • Account details (if you create an account)
  • Customer support enquiries and communications

Transaction information

  • Products purchased
  • Order and payment confirmation
  • Shipping and delivery details

Website usage data

  • IP address
  • Browser type and device information
  • Pages visited and interactions
  • Cookies and similar technologies

Marketing preferences

  • Your opt-in or opt-out choices for marketing communications

How We Use Your Data

We use your personal data to:

  • Process and fulfil orders
  • Communicate order, delivery, and service updates
  • Handle returns, refunds, and customer support
  • Manage customer accounts
  • Send marketing communications only where you have given consent
  • Improve website functionality, performance, and security
  • Comply with legal and regulatory obligations

Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

  • Contract - to fulfil your order and provide services
  • Legal obligation - for accounting, tax, and regulatory requirements
  • Legitimate interests - to improve our services and website (without overriding your rights)
  • Consent - for marketing communications and non-essential cookies

Sharing Your Data

We only share your personal data with trusted third parties where necessary to operate our business, including:

  • E-commerce and website platform providers
  • Payment processors
  • Delivery and courier services
  • Analytics and marketing tools (only with consent)
  • Legal or regulatory authorities where required by law

We never sell, rent, or trade your personal data.

Marketing Communications

We will only send marketing emails or messages if you have actively opted in.

You can unsubscribe at any time by:

Unsubscribing will not affect essential service communications related to your orders.

Cookies

We use cookies and similar technologies to:

  • enable essential website functionality
  • maintain security and shopping basket features
  • analyse website traffic and performance
  • support advertising and marketing where you have provided the required consent

Essential cookies may be used where necessary for the website to function. Non-essential cookies, including analytics and advertising cookies, are used only where the required consent has been obtained.

You can manage your cookie choices through our cookie consent controls and, where applicable, your browser settings.

Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data (where applicable)
  • Withdraw consent at any time for marketing
  • Object to or restrict certain data processing
  • Request a copy of your data (data portability)
  • Complain with the Information Commissioner’s Office (ICO)

Data Retention & Storage

We retain personal data only for as long as necessary to:

  • Fulfil orders
  • Provide customer support
  • Meet legal, accounting, and regulatory obligations

Your personal data may be processed or stored in the United Kingdom, the EEA or other countries in which our service providers operate.

Where personal data is transferred outside the UK and the transfer is subject to UK GDPR restrictions, we take steps to ensure an appropriate transfer mechanism is in place, such as UK adequacy regulations, appropriate contractual safeguards or another lawful transfer mechanism.

Children’s Data

Our products are intended for adults aged 18 and over. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the revised version will apply from the date of publication.

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at info@colossalhealth.co.uk.