Privacy Policy

Your privacy matters to us. Learn how we protect your personal information.

GDPR Compliant

Fully compliant with UK GDPR regulations

Secure Data

Your information is encrypted and protected

Effective Date: 15 January 2024
Last Updated: 15 January 2024

BioHealth Arena ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website biohealtharena.co.uk and purchase our products.

By using our website and services, you consent to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our website.

1. Information We Collect

Personal Information

We collect information that you provide directly to us, including:

  • Contact Information: Name, email address, phone number, postal address
  • Account Information: Username, password, account preferences
  • Payment Information: Credit/debit card details, billing address
  • Order Information: Products purchased, order history, delivery preferences
  • Communication Data: Messages, feedback, customer service inquiries

Automatically Collected Information

When you visit our website, we automatically collect certain information:

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent, links clicked
  • Cookies: See our Cookie Policy section below
  • Location Data: Approximate location based on IP address

2. How We Use Your Information

We use the information we collect to:

  • Process and fulfill your orders
  • Communicate with you about your orders and account
  • Provide customer service and support
  • Send you marketing communications (with your consent)
  • Improve our website and services
  • Prevent fraud and enhance security
  • Comply with legal obligations
  • Analyze usage patterns and preferences

3. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on:

  • Contract Performance: To fulfill our obligations under our contract with you (e.g., processing orders, providing customer service)
  • Legal Obligation: To comply with legal requirements (e.g., tax, accounting)
  • Legitimate Interests: To improve our services, prevent fraud, and maintain security
  • Consent: For marketing communications and non-essential cookies (you can withdraw consent anytime)

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

Service Providers

  • Payment Processors: Stripe (for secure payment processing)
  • Shipping Companies: Royal Mail and other UK couriers
  • Email Services: SendGrid (for order confirmations and communications)
  • Website Hosting: Our hosting provider for website operations

Legal Requirements

We may disclose your information if required by law, court order, or to:

  • Comply with legal processes
  • Protect our rights and property
  • Prevent fraud or security threats
  • Protect the safety of our customers and public

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption: SSL/TLS encryption for data transmission
  • Secure Storage: Encrypted databases and secure servers
  • Access Controls: Limited employee access to personal data
  • Regular Audits: Security assessments and updates
  • Payment Security: PCI DSS compliant payment processing

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to enhance our protections.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Correct inaccurate or incomplete personal data

Right to Erasure (\"Right to be Forgotten\")

Request deletion of your personal data in certain circumstances

Right to Restrict Processing

Limit how we use your personal data

Right to Data Portability

Receive your personal data in a portable format

Right to Object

Object to processing based on legitimate interests or for marketing

Right to Withdraw Consent

Withdraw consent for processing at any time

To exercise these rights, contact us at info@biohealtharena.co.uk. We will respond within one month.

7. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience:

Essential Cookies

Required for website functionality (shopping cart, checkout, security)

Analytics Cookies

Help us understand how visitors use our website

Marketing Cookies

Used to deliver relevant advertisements (with your consent)

You can control cookie preferences through our cookie banner and your browser settings.

8. Data Retention

We retain your personal data for as long as necessary to:

  • Active Accounts: For the duration of your account plus 1 year
  • Order Information: 7 years (for tax and accounting purposes)
  • Marketing Data: Until you unsubscribe or withdraw consent
  • Legal Requirements: As required by UK law

9. Children's Privacy

Our website and services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Marketing Communications

With your consent, we may send you:

  • Promotional emails about products and special offers
  • Health tips and nutritional information
  • New product announcements
  • Company updates

Opt-Out: You can unsubscribe anytime by clicking the \"unsubscribe\" link in any marketing email or contacting us directly.

11. Third-Party Links

Our website may contain links to third-party websites (e.g., NHS guidelines, payment processors). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting the updated policy on this page
  • Updating the \"Last Updated\" date
  • Sending an email notification for material changes

Your continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

BioHealth Arena

Email: info@biohealtharena.co.uk

Phone: +44 20 1234 5678

Address: United Kingdom

Data Protection Officer: privacy@biohealtharena.co.uk

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

Phone: 0303 123 1113

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Your Privacy Matters

We are committed to transparency and protecting your privacy. If you have any questions or concerns about how we handle your personal information, please don't hesitate to contact us. We're here to help and ensure you feel confident shopping with BioHealth Arena.