Last updated: [date]

This policy explains how [retatrutide-uk.org] (“we”, “us”) processes personal data when you use retatrutide-uk.org (the “Site”) or buy from us. We are the data controller for website and customer data.

1) Who we are

• Company: retatrutide-uk.org

• Email: info@retatrutide-uk.org

2) Data we collect

• Identity: name, date of birth, ID/KYC data, age confirmation

• Contact: email, phone, billing/shipping address

• Order & payment: items, totals, transaction IDs, last-4 card digits (via processor), refunds, chargebacks

• Account: login, password hash, preferences

• Support: messages, call notes, attachments

• Device & usage: IP, device/browser, pages viewed, timestamps, cookies, consent logs

• Optional health context you choose to share for product suitability or safety questions

3) Why we use your data (lawful bases, UK GDPR)

• Provide the service and fulfil orders (Art. 6(1)(b) contract)

• Payments, fraud prevention, KYC/age checks (contract + Art. 6(1)(f) legitimate interests; legal obligations may apply)

• Customer support and safety follow-up (contract + legitimate interests)

• Regulatory, tax, and accounting (Art. 6(1)(c) legal obligation)

• Analytics, security, site performance (legitimate interests)

• Marketing with your consent (Art. 6(1)(a)); you can withdraw any time

If you provide health-related information, we process it only with your explicit consent (Art. 9(2)(a)) or where needed for safety information you request.

4) Cookies and tracking

• Essential cookies: login, cart, security

• Analytics: aggregated usage metrics; IP is truncated or pseudonymised where possible

• Marketing cookies: only if you consent
  Manage preferences via our Cookie Settings link. Browser controls can also block cookies.

5) Sharing your data

We share only what is necessary with:

• Payment processors: Bank Transfer

• Pharmacy/clinical partners: to prepare and dispatch your order where applicable

• IT vendors: hosting, email, analytics, customer support tools

• Professional advisors and regulators: where required by law
  We do not sell personal data.

6) International transfers

If data leaves the UK/EEA, we use safeguards such as UK IDTA or EU SCCs and risk assessments. Details available on request.

7) Retention

• Orders, invoices, tax records: 6 years

• KYC/age-verification: 5 years from last check (or as law requires)

• Support tickets: 3 years after closure

• Account data: while your account is active, then deleted or anonymised within 12 months

• Web logs/analytics: 12 months

• Marketing data: until you opt out or after 24 months of inactivity

8) Security

We use encryption in transit, hardened hosting, access controls, audit logs, and regular reviews. No system is perfectly secure; we maintain breach response procedures and will notify you where legally required.

9) Your rights

Under UK GDPR you can:

• Access your data

• Correct inaccurate data

• Delete data in certain cases

• Restrict or object to processing

• Portability of data you provided

• Withdraw consent at any time (does not affect prior processing)

To exercise rights, email info@retatrutide-uk.org. We respond within 30 days. We will verify identity before actioning.

10) Marketing choices

• Unsubscribe via any email footer or your account settings

• Cookie Settings controls for advertising and analytics tags

11) Children

Our services are for 18+. We do not knowingly collect data from children.

12) Automated decision-making

We do not use solely automated decisions that produce legal or similarly significant effects. Fraud/KYC checks may score risk but staff review outcomes.

13) Third-party links

External sites have their own policies. We are not responsible for their content or privacy practices.

14) Changes to this policy

We may update this policy. The “Last updated” date shows the latest version. Significant changes will be notified on the Site or by email.

15) Complaints

You can complain to us at info@retatrutide-uk.org. 

Contact
info@retatrutide-uk.org • +44 7917249296