Privacy Policy

Data controller

Name: Chivrealthepax
Address: 127 Lothian Rd, Edinburgh EH3 9AD, Great Britain
Contact: Use the identifiers published in the site footer for correspondence (email strings as shown, without modification).

Categories of data

We may process: identification and contact details (name, email, phone if provided), message content, technical data (IP address, browser type, device), cookie identifiers where allowed, and order or enquiry records.

Purposes and lawful bases

• Responding to enquiries and contracts: performance of a contract or steps prior to a contract (Article 6(1)(b) GDPR), and legitimate interests in customer service (Article 6(1)(f)).
• Website operation and security: legitimate interests in secure, stable service (Article 6(1)(f)); strictly necessary cookies rely on Article 6(1)(f) or ePrivacy implementation rules.
• Analytics or marketing cookies: consent where required (Article 6(1)(a); ePrivacy).
• Legal compliance: legal obligation (Article 6(1)(c)) where applicable.

Retention

Enquiry data is kept for as long as needed to complete the request and for a limited period afterwards for follow-up and legal defence, typically up to twenty-four months unless a longer period is required by law. Server logs may be kept for shorter technical cycles. Cookie lifetimes are described in the Cookie Policy.

Recipients and transfers

We use infrastructure and email providers that may process data in the UK, EEA, or other countries. Where data leaves the UK/EEA, we use appropriate safeguards such as standard contractual clauses or adequacy decisions.

Your rights

Depending on applicable law, you may have the right to access, rectification, erasure, restriction, objection, data portability, and to withdraw consent at any time where processing is consent-based. You may lodge a complaint with the ICO (UK) or your local supervisory authority.

Security

We apply technical and organisational measures appropriate to the risk, including access controls, encryption where appropriate for transmission, and staff instructions on confidentiality.

Geographic scope and sales

The controller is established in Scotland, United Kingdom, at the address in this policy. The website and offers are primarily directed at adults in the United Kingdom and, where we state so at checkout, the European Economic Area. Shipping destinations, taxes, and import rules depend on the country you select when ordering. If you access the site from another region, local laws may still apply to you; we do not represent that the site or products are appropriate or lawful everywhere.

Online advertising and lawful basis

Where we run online advertising (including search or display), we aim to comply with platform policies and applicable law. For food supplements, we do not use personal data to promote unapproved health claims, and we do not target advertising at minors. Optional marketing cookies, if enabled, may help measure whether ads led to visits; you can withdraw consent for non-essential cookies via the cookie controls. We do not sell your personal data to third parties for their independent marketing use.

Children

Our services are not directed at children. We do not knowingly collect data from minors without parental authority.

Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use after changes constitutes notice where permitted by law.