Privacy Policy
Your privacy matters to us. Learn how we protect your personal information.
GDPR Compliant
Fully compliant with UK GDPR regulations
Secure Data
Your information is encrypted and protected
Effective Date: 15 January 2024
Last Updated: 15 January 2024
BioHealth Arena ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website biohealtharena.co.uk and purchase our products.
By using our website and services, you consent to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our website.
1. Information We Collect
Personal Information
We collect information that you provide directly to us, including:
- Contact Information: Name, email address, phone number, postal address
- Account Information: Username, password, account preferences
- Payment Information: Credit/debit card details, billing address
- Order Information: Products purchased, order history, delivery preferences
- Communication Data: Messages, feedback, customer service inquiries
Automatically Collected Information
When you visit our website, we automatically collect certain information:
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, links clicked
- Cookies: See our Cookie Policy section below
- Location Data: Approximate location based on IP address
2. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders
- Communicate with you about your orders and account
- Provide customer service and support
- Send you marketing communications (with your consent)
- Improve our website and services
- Prevent fraud and enhance security
- Comply with legal obligations
- Analyze usage patterns and preferences
3. Legal Basis for Processing (UK GDPR)
Under UK GDPR, we process your personal data based on:
- Contract Performance: To fulfill our obligations under our contract with you (e.g., processing orders, providing customer service)
- Legal Obligation: To comply with legal requirements (e.g., tax, accounting)
- Legitimate Interests: To improve our services, prevent fraud, and maintain security
- Consent: For marketing communications and non-essential cookies (you can withdraw consent anytime)
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
Service Providers
- Payment Processors: Stripe (for secure payment processing)
- Shipping Companies: Royal Mail and other UK couriers
- Email Services: SendGrid (for order confirmations and communications)
- Website Hosting: Our hosting provider for website operations
Legal Requirements
We may disclose your information if required by law, court order, or to:
- Comply with legal processes
- Protect our rights and property
- Prevent fraud or security threats
- Protect the safety of our customers and public
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption: SSL/TLS encryption for data transmission
- Secure Storage: Encrypted databases and secure servers
- Access Controls: Limited employee access to personal data
- Regular Audits: Security assessments and updates
- Payment Security: PCI DSS compliant payment processing
While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to enhance our protections.
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Correct inaccurate or incomplete personal data
Right to Erasure (\"Right to be Forgotten\")
Request deletion of your personal data in certain circumstances
Right to Restrict Processing
Limit how we use your personal data
Right to Data Portability
Receive your personal data in a portable format
Right to Object
Object to processing based on legitimate interests or for marketing
Right to Withdraw Consent
Withdraw consent for processing at any time
To exercise these rights, contact us at info@biohealtharena.co.uk. We will respond within one month.
7. Cookies and Tracking
We use cookies and similar tracking technologies to improve your experience:
Essential Cookies
Required for website functionality (shopping cart, checkout, security)
Analytics Cookies
Help us understand how visitors use our website
Marketing Cookies
Used to deliver relevant advertisements (with your consent)
You can control cookie preferences through our cookie banner and your browser settings.
8. Data Retention
We retain your personal data for as long as necessary to:
- Active Accounts: For the duration of your account plus 1 year
- Order Information: 7 years (for tax and accounting purposes)
- Marketing Data: Until you unsubscribe or withdraw consent
- Legal Requirements: As required by UK law
9. Children's Privacy
Our website and services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. Marketing Communications
With your consent, we may send you:
- Promotional emails about products and special offers
- Health tips and nutritional information
- New product announcements
- Company updates
Opt-Out: You can unsubscribe anytime by clicking the \"unsubscribe\" link in any marketing email or contacting us directly.
11. Third-Party Links
Our website may contain links to third-party websites (e.g., NHS guidelines, payment processors). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on this page
- Updating the \"Last Updated\" date
- Sending an email notification for material changes
Your continued use of our website after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us:
BioHealth Arena
Email: info@biohealtharena.co.uk
Phone: +44 20 1234 5678
Address: United Kingdom
Data Protection Officer: privacy@biohealtharena.co.uk
14. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Your Privacy Matters
We are committed to transparency and protecting your privacy. If you have any questions or concerns about how we handle your personal information, please don't hesitate to contact us. We're here to help and ensure you feel confident shopping with BioHealth Arena.