Data Controller
Information We Collect
When you use our website we may collect:
Identity information: name, billing address, delivery address.
Contact information: email address, telephone number.
Order information: products ordered, order history, payment status, delivery information.
Technical information: IP address, browser type, device information, operating system, time zone, cookie identifiers.
Website usage: pages visited, time spent on pages, clicks, referring websites.
How We Collect Information
We collect information when you:
- Place an order
- Create an account
- Subscribe to emails
- Contact customer support
- Browse our website
- Accept cookies
We may also receive information from payment providers and delivery companies relating to your order.
How We Use Your Information
We use your personal information to:
- Process your orders
- Deliver purchases
- Process refunds
- Respond to enquiries
- Prevent fraud
- Verify transactions
- Improve our website
- Maintain customer accounts
- Comply with legal obligations
Where you have consented, we may also send marketing communications.
Lawful Basis For Processing
Under the UK GDPR we rely on the following lawful bases:
Contract: to fulfil your order and provide customer support.
Legal obligation: to comply with tax, accounting and consumer legislation.
Legitimate interests: to prevent fraud, secure our website, improve customer experience and analyse website performance.
Consent: for marketing communications and non-essential cookies. You may withdraw consent at any time.
Payment Processing
Payments are processed securely by authorised third-party payment providers. We do not store your full payment card details. Your payment information is handled directly by the payment provider in accordance with their own privacy policies.
Delivery Providers
To deliver your order we share relevant information with delivery providers, including your name, delivery address, and your email address and telephone number where required. Only information necessary to complete delivery is shared.
Service Providers
We may share personal information with trusted service providers including:
- Payment processors
- Courier companies
- Website hosting providers
- IT support providers
- Fraud prevention providers
- Analytics providers
- Professional advisers where legally required
All providers are required to protect your information appropriately.
Marketing
If you subscribe to marketing communications, we may contact you by email, or by SMS where consent has been given. You can unsubscribe at any time by clicking the unsubscribe link, replying STOP to an SMS (where applicable), or contacting us directly.
Cookies
Our website uses cookies to remember your preferences, keep your shopping basket active, improve website functionality, analyse website traffic and detect fraud. You can manage cookie preferences through your browser or our cookie banner.
Analytics
We may use website analytics tools to understand website performance, visitor behaviour, popular pages and technical issues. These services may collect anonymised or pseudonymised information.
Fraud Prevention
To protect our customers and business we may process personal information to detect fraudulent transactions, prevent payment abuse, investigate suspicious activity and protect website security.
Data Retention
We retain personal information only for as long as necessary. Order information is generally retained for at least six years to comply with UK accounting and tax legislation. Information may be retained longer where required by law or to resolve disputes.
International Transfers
Some service providers may process information outside the UK. Where this occurs we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Your Rights
You have the right to:
- Access your information
- Correct inaccurate information
- Request deletion where applicable
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
To exercise any of these rights, contact hello@bodybioadvanced.com.
Security
We use appropriate technical and organisational measures to protect your information, including SSL encryption, secure payment processing, restricted staff access, website security monitoring and regular software updates. No method of internet transmission is completely secure, but we take reasonable steps to protect your information.
Children’s Privacy
Our website is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites.
Changes To This Policy
We may update this Privacy Policy from time to time. Any updates will be published on this page together with the revised effective date.
Contact Us
Questions About This?
Get in touch and we will reply within one working day.
Last updated 27 October 2026
