Privacy Policy
We respect your privacy and take your personal data seriously. This policy explains what information we collect, why we collect it, and how we protect it.
Who we are
Mymetabolism (“we”, “us”, “our”) is a UK-based weight management service operating at mymetabolism.co.uk. We supply HPLC-verified weight management products including GLP-1 medications and peptides, sourced directly from manufacturers.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Mymetabolism acts as the data controller for personal information collected through this website and associated services.
Data Controller: Mymetabolism Ltd
Registered address: London, United Kingdom
Contact: info@mymetabolism.co.uk
Website: https://mymetabolism.co.uk
Data we collect
We collect personal information only when you interact with us directly — for example, when you place an order, create an account, contact our support team, or submit a review. We never collect more information than we need.
Information you provide to us
- Full name and email address when you register or place an order
- Delivery address and contact telephone number for order fulfilment
- Payment details — processed securely by our payment provider; we never store your full card number
- Order history and product preferences
- Communications you send us via email, contact forms, or WhatsApp
- Reviews and testimonials you submit voluntarily
Information we collect automatically
- IP address and approximate location (country/region level)
- Browser type, device type, and operating system
- Pages visited, time spent on site, and referring URL
- Cookie identifiers (see Section 6 for full cookie information)
⚠️ We do not collect or store sensitive health data (such as medical history or diagnoses) through this website. Our products are sold for Research Use Only purposes. Please do not send us confidential medical information via standard email.
How we use your data
We use your personal information only for the purposes for which you provided it and as permitted by UK law. Specifically, we use your data to:
| Purpose | What this involves |
|---|---|
| Order processing | Taking payment, dispatching your order, sending tracking information and order updates |
| Account management | Creating and managing your customer account, order history, and saved preferences |
| Customer support | Responding to enquiries, resolving issues, and providing 24/7 support |
| Legal compliance | Meeting our obligations under UK law including fraud prevention and tax records |
| Service improvement | Analysing site usage to improve our website, products, and customer experience |
| Marketing | Sending promotional emails or offers — only if you have given us explicit consent to do so |
| Reviews | Publishing your submitted review on our website after moderation |
We never sell, rent, or trade your personal data to third parties for their own marketing purposes.
Legal basis for processing
Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
- Contract performance — processing is necessary to fulfil the order you placed with us
- Legal obligation — we must retain certain records to comply with UK tax and business law
- Legitimate interests — improving our website, preventing fraud, and maintaining security of our systems
- Consent — for marketing emails and non-essential cookies, we rely on your explicit opt-in consent, which you may withdraw at any time
Sharing your data
We share your personal data only where strictly necessary and with trusted parties who are contractually required to keep it secure. We may share data with:
- Payment processors — such as Stripe or PayPal, to handle your transaction securely
- Delivery partners — Royal Mail and courier services require your name and delivery address to dispatch your order
- IT and hosting providers — our website runs on servers managed by Hostinger; your data is stored in the UK/EU
- Analytics providers — such as Google Analytics (anonymised data only, with IP anonymisation enabled)
- Legal authorities — we will disclose personal information to law enforcement or regulatory bodies if required to do so by law
We never transfer your data outside the UK or EEA without ensuring appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA).
Cookies
We use cookies and similar tracking technologies to make our website function correctly and to understand how visitors use it. When you first visit mymetabolism.co.uk, we ask for your consent before placing non-essential cookies.
Essential cookies
These cookies are strictly necessary for the website to work. You cannot opt out of them.
- Shopping cart contents and session data (WooCommerce)
- Login authentication tokens
- Security and fraud prevention tokens
Analytics cookies
With your consent, we use Google Analytics to understand site traffic and user behaviour. All data is anonymised and no personally identifiable information leaves your browser. You can opt out at any time via our cookie banner or by installing the Google Analytics opt-out browser add-on.
Marketing cookies
We only place marketing or retargeting cookies if you give us explicit consent. You may withdraw consent at any time by clearing your cookies or adjusting your browser settings.
You can manage your cookie preferences at any time by clicking the “Cookie Settings” link in our website footer, or by adjusting your browser settings to block or delete cookies.
Data retention
We keep your personal data only for as long as we need it for the purpose for which we collected it, or as required by law.
- Order and transaction records — retained for 7 years to comply with HMRC requirements
- Customer account data — retained for as long as your account remains active; you may request deletion at any time
- Support communications — retained for 3 years after your last interaction
- Marketing consent records — retained until you withdraw consent
- Analytics data — retained for 26 months in Google Analytics, then automatically deleted
When we no longer need your personal data, we securely delete or anonymise it in line with our internal data retention schedule.
Your rights
Under the UK GDPR, you have the following rights regarding your personal data. You may exercise any of these rights at any time by contacting us at info@mymetabolism.co.uk. We will respond within 30 days.
📋 Right to access
Request a copy of the personal data we hold about you (a Subject Access Request).
✏️ Right to rectification
Ask us to correct inaccurate or incomplete personal data we hold about you.
🗑️ Right to erasure
Request deletion of your personal data where we no longer have a lawful basis to hold it.
⏸️ Right to restriction
Ask us to restrict how we process your data while a complaint or query is resolved.
📦 Right to portability
Receive your personal data in a structured, machine-readable format to transfer to another service.
🚫 Right to object
Object to processing based on legitimate interests or for direct marketing purposes at any time.
↩️ Right to withdraw consent
Where we rely on consent, you may withdraw it at any time without affecting prior processing.
⚖️ Right to complain
Lodge a complaint with the ICO if you believe we have mishandled your data.
To exercise any of your rights, email us at info@mymetabolism.co.uk with the subject line “Data Request”. We will verify your identity before processing your request and respond within 30 calendar days.
Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These measures include:
- SSL/TLS encryption on all pages of mymetabolism.co.uk (HTTPS)
- Secure, encrypted payment processing — we never store full payment card details on our servers
- Password-protected and access-controlled internal systems
- Regular software updates and security monitoring
- Staff awareness of data protection responsibilities
While we take every reasonable precaution, no method of internet transmission is 100% secure. If you believe your data has been compromised, please contact us immediately at info@mymetabolism.co.uk.
Third-party links
Our website may contain links to third-party websites such as payment gateways, social media platforms, or reference resources. Once you leave mymetabolism.co.uk, this Privacy Policy no longer applies.
We encourage you to read the privacy policy of any third-party website you visit. We accept no responsibility for the content or privacy practices of external sites.
Children’s privacy
Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has submitted personal data to us, please contact us immediately at info@mymetabolism.co.uk and we will delete the data promptly.
Changes to this policy
We review and update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email.
We encourage you to review this page regularly. Continued use of our website after changes take effect constitutes your acceptance of the updated policy.
Contact us
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please get in touch:
Mymetabolism
London, United Kingdom
📧 info@mymetabolism.co.uk
🌐 mymetabolism.co.uk/contact